Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/2Q99k2Nu7TVBiT6nZ5Z9uNaiWyo.roa
File: 2Q99k2Nu7TVBiT6nZ5Z9uNaiWyo.roa (raw, json)
Hash identifier: UWKx6CFXWxwFKgsEQHgZY4qfrOEjtzyXEKnuej+CdXY=
Subject key identifier: D9:0F:7D:93:63:6E:ED:35:41:89:3E:A7:67:96:7D:B8:D6:A2:5B:2A
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 0F7EC2F2
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/2Q99k2Nu7TVBiT6nZ5Z9uNaiWyo.roa
Signing time: Sat 01 Jan 2022 06:04:39 +0000
ROA not before: Sat 01 Jan 2022 06:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25780
IP address blocks: 185.206.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259965682 (0xf7ec2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jan 1 06:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d90f7d93636eed3541893ea767967db8d6a25b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:08:9f:e7:19:75:6a:46:ac:b0:73:d6:c2:
c3:df:b5:da:06:6e:ca:26:a8:e1:89:11:ef:93:1a:
65:a2:07:bb:bd:ab:bf:1d:9a:c3:62:85:3e:25:00:
1f:e9:cd:a3:d5:b9:be:f5:de:21:b0:44:73:dd:e8:
b1:99:5d:20:7d:59:98:37:9b:49:cf:34:41:46:71:
8c:65:37:77:cf:00:dc:72:40:c5:b6:51:4e:da:b0:
23:0c:6d:c0:60:ac:56:cf:65:7f:dc:03:be:e1:cc:
6c:78:c6:ea:4e:25:13:a9:5e:ad:70:48:6f:58:53:
e2:8d:9e:14:04:70:5d:57:b5:83:c3:7c:45:61:bd:
47:a1:3c:7d:56:4b:9d:d4:d4:be:8d:df:ec:84:dd:
0c:c2:a4:3e:33:74:7a:c0:8f:6a:b9:1d:ae:4c:b8:
05:02:d9:34:67:1a:b8:91:7a:df:50:40:96:4f:92:
b2:3f:f7:b4:bf:62:cb:a3:c9:fb:ad:a0:8b:fc:6a:
db:50:45:2a:d9:a8:43:b0:46:c6:03:69:a1:9d:c9:
2f:55:1d:c7:fa:7b:d9:65:de:45:0c:dc:51:df:49:
b4:21:31:6d:8c:95:66:04:65:f6:5e:11:97:6a:a2:
e9:ac:70:aa:51:18:0a:0c:fe:9a:18:d2:7e:c4:6a:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:7D:93:63:6E:ED:35:41:89:3E:A7:67:96:7D:B8:D6:A2:5B:2A
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/2Q99k2Nu7TVBiT6nZ5Z9uNaiWyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.168.0/22
Signature Algorithm: sha256WithRSAEncryption
85:4e:df:10:bb:fb:c6:87:ac:af:9b:73:9d:b1:a5:98:51:92:
42:9d:53:c3:c7:e3:9c:da:04:e1:1f:bf:98:e8:39:e0:16:30:
1a:83:66:d5:4a:4e:3b:26:d0:ec:9a:2d:af:fd:96:39:6f:b6:
dd:f4:ef:5b:c5:fb:bc:6d:b0:4c:81:7d:fa:8a:eb:bd:f3:e0:
db:04:03:93:80:8a:fa:17:71:18:55:ea:04:12:c5:a2:30:74:
fd:65:5d:08:4e:36:98:c1:78:76:14:90:bc:c6:08:4b:0b:f9:
67:c1:56:fc:d5:01:73:b2:45:2d:54:62:4b:e7:fb:e8:21:04:
1c:65:2b:fe:ed:db:c5:d1:7a:80:ed:35:73:49:64:7d:84:10:
b5:dc:2f:ca:2d:7d:cd:d5:f2:aa:69:48:cc:13:12:89:e2:a5:
4e:23:a0:e0:17:4c:a2:2e:a9:2c:bd:09:6c:fc:37:82:51:65:
f7:39:90:14:75:c9:26:88:2f:ed:f2:25:b5:b7:3b:e2:38:9c:
9c:bb:41:2f:68:4e:f8:c4:bc:e3:18:14:50:30:c7:82:51:38:
e4:78:b0:a0:c9:ae:93:7f:8c:00:4b:2b:c0:ec:80:39:4b:4d:
d3:99:4d:eb:af:3e:e4:32:2e:a8:92:6f:27:73:77:35:c7:6a:
6f:01:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org