Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/25z5M-rpoeAbceWbWNikxKYLad8.roa
File: 25z5M-rpoeAbceWbWNikxKYLad8.roa (raw, json)
Hash identifier: ntx9HqXgIZhfHjmgwHsOSAcBlYzy6cc6fbz0eYyn+oA=
Subject key identifier: DB:9C:F9:33:EA:E9:A1:E0:1B:71:E5:9B:58:D8:A4:C4:A6:0B:69:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 062B0D2B
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/25z5M-rpoeAbceWbWNikxKYLad8.roa
Signing time: Wed 15 Jun 2022 22:23:45 +0000
ROA not before: Wed 15 Jun 2022 22:23:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 185.154.81.0/24 maxlen: 24
185.154.82.0/24 maxlen: 24
185.154.83.0/24 maxlen: 24
185.154.80.0/24 maxlen: 24
185.154.80.0/22 maxlen: 24
2a05:f500:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103484715 (0x62b0d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jun 15 22:23:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db9cf933eae9a1e01b71e59b58d8a4c4a60b69df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:59:cf:90:00:d0:9c:00:6e:9a:4b:8c:fc:
dd:fd:f9:51:ee:59:40:e8:d0:b8:83:89:9e:ea:ec:
68:e5:f3:b5:05:1e:c7:0e:14:51:3c:13:e9:db:a6:
8c:07:70:47:b3:6c:c5:3f:ec:7a:6e:e0:0f:32:99:
a4:a1:5c:e7:bd:8d:7c:53:a8:ea:ab:70:47:e6:7d:
52:9e:9e:65:e0:9c:5a:94:27:fb:63:32:fd:bd:0f:
6c:1b:c0:93:be:e8:dd:8a:66:ce:bd:6d:b4:56:fa:
cb:4c:33:9b:22:7e:a4:c5:a0:ca:87:af:a1:04:c4:
71:dd:52:db:19:70:d4:d5:6a:7d:2d:a8:25:15:65:
0f:09:09:cc:01:01:03:94:73:8f:3d:5a:37:80:11:
19:73:14:e4:07:4b:84:3a:71:93:32:8d:83:07:b3:
fb:fe:e5:93:5f:1a:29:7b:43:2f:4c:c8:2e:e1:36:
79:75:4b:8e:14:e3:2c:22:fc:3e:40:9c:1d:bf:5d:
dd:b3:a4:0b:43:1c:a6:ac:b5:a3:ad:ad:8d:65:a6:
07:95:28:be:79:72:90:e1:58:30:ed:dc:36:2a:ab:
69:2b:9d:46:cd:b4:fd:28:7b:03:81:e8:6e:a0:8f:
a2:8f:58:a5:31:0f:78:fa:ae:57:00:b3:71:e9:4a:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9C:F9:33:EA:E9:A1:E0:1B:71:E5:9B:58:D8:A4:C4:A6:0B:69:DF
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/25z5M-rpoeAbceWbWNikxKYLad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.80.0/22
IPv6:
2a05:f500:2::/48
Signature Algorithm: sha256WithRSAEncryption
1c:2a:ab:5a:ca:eb:7a:90:27:33:2b:60:27:c7:79:84:24:2a:
b1:4a:c8:8a:dc:6a:b3:02:57:77:68:59:64:9b:4e:df:c8:65:
8d:26:3c:9d:1a:ab:0c:84:8b:22:cc:fa:fc:c2:a2:c0:4f:ff:
e9:72:b2:bb:3a:d6:34:f5:99:aa:79:e3:3f:ab:12:06:9d:57:
4a:7d:9e:58:72:90:1b:01:61:f1:4a:58:e7:66:52:d6:a4:64:
55:c5:71:5f:fc:18:57:10:3f:2c:43:09:54:e4:8b:41:50:e6:
f9:78:c2:61:76:28:8c:b5:be:f2:84:e2:6c:ca:cb:9a:9c:d8:
84:8c:75:6f:d1:4b:87:2d:fa:d1:72:82:fc:41:de:76:05:a8:
c3:9d:3d:33:b3:fa:ba:da:d0:a5:8f:2c:5f:ec:29:4a:d6:a4:
4d:ee:3e:f9:75:47:f2:12:a3:01:57:9c:16:e4:53:51:89:2b:
ee:72:4a:21:a2:60:bc:8d:34:8a:b4:4d:28:58:bb:c3:bf:9c:
6e:99:c0:5f:74:7a:47:e4:83:e9:b4:65:d3:4e:50:77:49:c3:
1a:4d:28:ea:bf:71:0b:77:c4:c3:80:84:e1:4a:b3:5a:e7:59:
e5:76:13:0f:34:f2:d1:93:e9:20:58:13:e1:75:66:7b:7e:03:
5f:a6:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:25 2024 by rpki-client on console-ams.rpki-client.org