Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/vxLsY_RZmEIl_RmWc2LOIbLDWzU.roa
File: vxLsY_RZmEIl_RmWc2LOIbLDWzU.roa (raw, json)
Hash identifier: iCbobDbALtOozTXnffsI3MeRPm8or6bGgSUoRRPii9s=
Subject key identifier: BF:12:EC:63:F4:59:98:42:25:FD:19:96:73:62:CE:21:B2:C3:5B:35
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 03B8A784
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/vxLsY_RZmEIl_RmWc2LOIbLDWzU.roa
Signing time: Sat 01 Jan 2022 04:57:10 +0000
ROA not before: Sat 01 Jan 2022 04:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204779
IP address blocks: 185.185.168.0/22 maxlen: 22
2a0b:5c80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62433156 (0x3b8a784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Jan 1 04:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf12ec63f459984225fd19967362ce21b2c35b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:4d:0a:5d:b0:91:4c:e1:98:1a:1e:bd:29:
d5:91:da:4f:13:2e:a3:09:a1:7a:20:93:25:57:08:
08:2c:35:28:c5:f1:8d:f3:a9:00:5a:af:b8:d5:f2:
f7:ff:92:d3:dd:84:64:51:0d:e3:86:b7:de:2b:8a:
2a:c0:51:77:4e:3c:78:0c:f1:8e:72:4b:b8:ed:e6:
e4:c0:f0:19:9c:6f:03:5d:3d:a7:93:96:e5:55:72:
71:87:ea:9e:17:2c:8a:07:9c:e5:89:b6:ce:fc:e7:
30:e4:27:8a:1b:36:a5:97:23:45:a5:6f:60:16:f4:
57:3d:7a:b1:5d:e8:b9:cb:5a:d8:0d:f7:e9:b0:63:
9d:78:f2:47:2b:82:2a:96:00:98:d2:dd:8c:1a:53:
c2:12:f1:b9:cc:92:95:72:22:01:47:75:22:8b:0f:
33:17:f5:57:cd:5d:df:8b:8f:20:47:de:2e:54:76:
11:09:aa:12:fc:01:d9:84:a4:4d:6c:43:59:e1:1e:
0a:d2:9d:21:49:86:fc:a5:66:d0:09:67:44:10:6b:
72:2d:33:46:42:f3:1a:cc:a5:03:13:29:15:66:78:
04:5f:7d:91:cc:31:04:01:9b:42:e5:ea:fc:0e:e0:
db:5c:dd:fa:81:c1:a9:79:15:fe:97:d8:2a:c1:9d:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:EC:63:F4:59:98:42:25:FD:19:96:73:62:CE:21:B2:C3:5B:35
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/vxLsY_RZmEIl_RmWc2LOIbLDWzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.168.0/22
IPv6:
2a0b:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
7d:5f:10:ca:12:21:d6:db:7f:f1:fd:8e:0c:50:75:33:99:53:
89:42:e5:0a:52:49:e6:61:4d:6b:dc:52:09:7c:e8:f8:8e:26:
14:ca:0d:8d:fc:04:a4:73:67:2b:d1:f2:88:90:d2:2e:67:e4:
92:9b:70:6d:3e:54:c5:8c:56:9c:bf:32:b9:a0:a3:3b:83:b1:
3f:ac:f6:48:e9:1d:19:5a:30:27:df:cf:b5:64:81:31:94:41:
98:31:52:d9:63:f7:1d:c6:69:51:27:54:17:47:8a:3e:e4:48:
ef:68:9a:1c:b8:08:20:5e:28:fd:02:55:04:8a:47:49:3b:9f:
94:b5:4a:d1:ad:97:84:89:5e:e4:b5:6b:fc:fa:59:ba:43:1b:
19:7f:aa:f0:23:8f:f0:97:a9:ef:03:c1:37:bc:6a:6d:e4:fc:
fe:ef:e0:7f:4b:d0:f4:7c:9e:2c:18:b4:91:26:3e:85:e0:ea:
21:1a:c7:86:65:ab:63:9d:a3:cd:26:10:2b:ef:b5:55:31:f9:
df:a5:50:a7:c9:a8:58:32:f0:d5:f9:0d:26:7f:49:6e:9d:f5:
9b:a1:23:e7:43:71:e6:bf:94:60:11:b1:d8:c9:c8:98:2e:18:
b8:4e:81:ce:57:c5:0f:45:f0:b7:37:a1:fe:b8:03:79:6d:0f:
c3:91:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org