Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/7bxKIehtrFf_N-AelmVAxjv6VR4.roa
File: 7bxKIehtrFf_N-AelmVAxjv6VR4.roa (raw, json)
Hash identifier: 3F+AZueo/uDUMbnsWmsJ3bPMhwz9mxi6p4TGXMWoL6I=
Subject key identifier: ED:BC:4A:21:E8:6D:AC:57:FF:37:E0:1E:96:65:40:C6:3B:FA:55:1E
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 07002D92
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/7bxKIehtrFf_N-AelmVAxjv6VR4.roa
Signing time: Sat 01 Jan 2022 08:53:01 +0000
ROA not before: Sat 01 Jan 2022 08:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 185.115.76.0/23 maxlen: 23
185.115.77.0/24 maxlen: 24
185.115.76.0/22 maxlen: 22
185.115.78.0/24 maxlen: 24
185.115.76.0/24 maxlen: 24
185.115.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117452178 (0x7002d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jan 1 08:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edbc4a21e86dac57ff37e01e966540c63bfa551e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:87:04:22:c7:2b:fb:3c:2d:d7:19:d5:d2:
35:b7:b2:02:7c:db:97:62:cf:16:0c:e5:43:60:af:
95:05:af:5e:22:b3:98:a8:e2:86:43:75:05:64:77:
1c:6a:14:71:d0:64:19:f0:1c:ac:86:8e:30:0d:1b:
17:5a:9f:5a:d0:72:2f:48:fb:ec:66:6a:fa:58:05:
67:cf:79:d8:29:42:2d:c8:e1:f9:bd:f1:65:52:a6:
ea:bf:b5:8f:ed:86:91:88:6f:f0:9f:4a:92:cc:7e:
72:60:59:2f:25:96:e9:df:51:85:0a:be:db:3e:2d:
0e:55:6f:fa:a5:e4:13:2c:b3:de:aa:c2:7d:1f:08:
4f:c1:80:d8:c9:c9:18:fa:7b:5c:7e:69:aa:1c:f4:
72:c7:b5:0c:d4:fc:9b:ed:28:ca:fe:7a:c4:4f:3d:
2b:5c:bc:93:87:78:86:3c:8b:60:91:3a:1b:ec:1a:
37:99:36:58:ee:f6:ac:11:00:c0:e1:be:ff:2d:8a:
b7:aa:17:d0:b6:48:ea:77:73:e6:f5:33:99:a3:10:
80:9b:00:6b:5f:d3:f7:e4:79:c9:69:b9:45:85:3e:
c6:53:e5:40:ac:2e:c5:a7:ae:66:b3:6f:0c:22:b3:
cd:ee:cf:ef:87:19:59:53:bf:f9:8d:bf:3a:00:f2:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BC:4A:21:E8:6D:AC:57:FF:37:E0:1E:96:65:40:C6:3B:FA:55:1E
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/7bxKIehtrFf_N-AelmVAxjv6VR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.76.0/22
Signature Algorithm: sha256WithRSAEncryption
64:58:03:39:cf:08:88:00:87:2f:69:d1:7f:1c:b0:d4:97:d6:
f6:0a:c3:23:1a:d0:59:c1:8c:50:1e:10:11:f9:5f:94:13:f0:
61:7b:1a:91:4b:6f:d3:d7:ed:66:ec:98:90:61:35:62:7e:a0:
bb:31:32:0f:85:90:e7:50:e0:b3:1f:7d:dd:7c:e7:e6:bb:00:
ab:7d:cb:30:55:59:04:6a:66:25:05:1e:5d:59:bf:ec:c1:e6:
15:6a:da:47:54:61:17:ac:3b:b0:1b:28:09:79:6a:9c:23:0a:
39:8b:bf:f0:de:96:d5:57:84:10:22:4a:54:7b:31:d4:55:f4:
9a:3a:8f:a0:9b:dd:d7:53:ad:b4:05:ba:06:5d:40:dd:5a:bb:
01:ea:de:72:b1:52:06:d6:dd:77:92:3b:f5:2e:a3:61:19:21:
a8:cb:97:80:5f:f3:7e:eb:51:66:67:fe:8b:c6:86:57:2e:1b:
7a:d9:32:46:b1:7a:a6:68:76:b4:b9:87:c8:08:03:0e:47:93:
35:9b:b9:b3:03:f5:98:c8:e2:6c:8b:ab:ff:ba:58:b8:81:de:
a4:f9:69:fa:b5:33:42:7b:4f:fe:97:40:49:57:46:a3:ed:eb:
aa:af:01:63:a5:23:56:4f:13:e3:3d:90:e4:55:35:60:21:43:
c2:11:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:39 2024 by rpki-client on console-ams.rpki-client.org