Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/ryedNVSyUbmx2BBpIHXBZBMnoQg.roa
File: ryedNVSyUbmx2BBpIHXBZBMnoQg.roa (raw, json)
Hash identifier: un4HN/oNMynjgeDikWWDfFHWn2cwpsBxqbHWDeTcDNc=
Subject key identifier: AF:27:9D:35:54:B2:51:B9:B1:D8:10:69:20:75:C1:64:13:27:A1:08
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 02F18FD2
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/ryedNVSyUbmx2BBpIHXBZBMnoQg.roa
Signing time: Mon 24 Jan 2022 19:52:56 +0000
ROA not before: Mon 24 Jan 2022 19:52:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198735
IP address blocks: 212.15.85.0/24 maxlen: 24
212.15.84.0/24 maxlen: 24
212.15.83.0/24 maxlen: 24
212.15.82.0/24 maxlen: 24
212.15.81.0/24 maxlen: 24
212.15.80.0/24 maxlen: 24
212.15.80.0/21 maxlen: 21
212.15.86.0/24 maxlen: 24
212.15.87.0/24 maxlen: 24
185.51.223.0/24 maxlen: 24
185.51.222.0/24 maxlen: 24
185.51.221.0/24 maxlen: 24
185.51.220.0/22 maxlen: 22
185.51.220.0/24 maxlen: 24
5.1.105.0/24 maxlen: 24
5.1.104.0/24 maxlen: 24
5.1.104.0/21 maxlen: 21
5.1.109.0/24 maxlen: 24
5.1.108.0/24 maxlen: 24
5.1.107.0/24 maxlen: 24
5.1.106.0/24 maxlen: 24
5.1.111.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49385426 (0x2f18fd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Jan 24 19:52:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af279d3554b251b9b1d810692075c1641327a108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:ee:15:bb:ac:d8:f4:e6:54:81:ea:c5:4b:
c4:e8:2e:77:44:54:12:c5:ab:75:1e:98:54:5d:65:
b9:c8:37:b9:45:31:80:9e:2d:94:f1:48:0c:c2:d8:
ee:05:b0:2e:ba:d3:81:4e:08:0d:c7:44:89:68:b3:
45:8b:85:c9:02:79:00:f7:ea:b1:bb:0a:c1:ce:12:
da:66:31:1b:1c:92:96:17:1e:4f:53:c7:c0:c6:c5:
84:fd:b7:a1:c8:fc:09:45:e1:cb:56:f3:d0:bf:37:
5d:fd:d9:5d:08:13:15:13:46:a6:33:3e:61:7d:1b:
d2:82:5d:7f:0c:7b:25:52:df:b3:b8:54:b3:e3:90:
42:bb:64:d9:0f:99:d2:36:d9:a3:7a:fd:ea:0e:ef:
f9:2d:22:3d:0e:e3:d0:5f:bc:8d:0f:5f:99:3a:9e:
a6:2d:2e:e2:42:f2:83:8d:c1:8b:d6:05:4d:af:c3:
7b:53:09:cc:bc:1a:60:e8:c2:41:ba:af:e3:83:84:
59:fd:dc:dd:e9:0a:e0:d3:a0:84:a1:82:d7:65:c6:
af:6f:02:f8:3d:38:a1:86:b9:bd:b8:90:e4:8e:86:
c0:af:e2:5a:f3:bd:e9:af:1c:f6:fb:62:1f:02:1b:
0b:94:b0:a3:c1:06:10:41:62:6d:f6:6f:6d:37:58:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:9D:35:54:B2:51:B9:B1:D8:10:69:20:75:C1:64:13:27:A1:08
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/ryedNVSyUbmx2BBpIHXBZBMnoQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
185.51.220.0/22
212.15.80.0/21
Signature Algorithm: sha256WithRSAEncryption
e1:c9:06:cb:db:99:7a:a1:16:b0:28:2f:92:6a:8e:a6:34:da:
91:65:04:96:42:e2:eb:a0:e9:17:f7:46:43:c9:f7:0f:8e:4e:
5b:3e:19:6a:62:0e:7a:b9:65:f5:97:b2:84:ae:c4:35:84:cd:
60:35:bb:89:04:20:4f:76:18:9a:2a:ea:58:e7:45:f3:ca:ec:
98:2a:52:d6:5d:87:e0:45:9a:d4:67:99:ab:5f:ff:61:c7:ae:
b7:c3:89:f7:e6:a0:63:df:71:4b:27:6d:4b:f8:01:e6:4d:b6:
4c:30:49:d2:1e:d6:dd:c4:d4:e5:40:cd:ff:d0:1c:53:48:11:
e0:87:ef:19:e4:8a:1a:f2:db:98:22:33:08:13:cf:73:c9:71:
4d:5e:52:b4:49:fb:8f:2c:31:ff:7d:ff:38:37:a4:52:cf:f9:
92:7c:b5:e6:a4:ee:e1:ca:b0:15:42:93:aa:c6:e9:62:e0:20:
bf:6f:f6:60:f3:0a:79:69:e2:ee:86:27:e0:5e:27:5b:61:02:
c2:77:b7:03:c5:47:fb:d9:c5:9c:11:cc:58:12:93:ad:45:41:
fc:97:19:c6:c0:2a:75:26:0d:29:d6:74:eb:a0:6b:b2:aa:fd:
ec:98:35:de:3c:21:94:68:35:c8:98:c8:a0:ca:ea:30:3d:29:
02:09:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org