Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/okRtj_GHI4_Wp8fqBrkAyRhkFAo.roa
File: okRtj_GHI4_Wp8fqBrkAyRhkFAo.roa (raw, json)
Hash identifier: cjRD1yOpsYcoNlUpdAxkvmh5o87WTbZHeXY8Lvm5QdA=
Subject key identifier: A2:44:6D:8F:F1:87:23:8F:D6:A7:C7:EA:06:B9:00:C9:18:64:14:0A
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 05184597
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/okRtj_GHI4_Wp8fqBrkAyRhkFAo.roa
Signing time: Sat 01 Jan 2022 10:02:51 +0000
ROA not before: Sat 01 Jan 2022 10:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50779
IP address blocks: 185.106.12.0/22 maxlen: 24
2a0c:db80::/29 maxlen: 29
2001:67c:2698::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85476759 (0x5184597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Jan 1 10:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2446d8ff187238fd6a7c7ea06b900c91864140a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:65:26:78:41:85:38:59:a5:5b:ab:f8:b0:
14:d2:7f:d3:fd:53:36:4a:0e:dd:3f:5a:0d:9a:4d:
63:5b:52:9c:d3:95:0d:10:cd:9a:f4:8c:96:2b:21:
0e:7a:b2:06:13:3d:55:96:4c:e3:e8:86:94:41:ce:
02:0b:46:11:f9:1a:b4:1d:21:dd:94:41:87:29:39:
64:09:1a:2e:87:2b:95:f0:7b:f6:f1:3d:c3:ab:cc:
7f:f5:22:2d:5a:96:75:b4:ab:6c:23:d2:8d:dc:bf:
f7:48:57:b8:3c:ce:23:5e:97:58:8e:04:77:25:fc:
34:e2:b7:d5:bf:81:68:6f:00:d7:35:30:ed:45:c8:
c7:f3:20:13:12:dc:78:e1:ba:b7:15:99:d9:fa:12:
3d:fa:df:da:77:fb:29:17:ae:28:e2:a3:0e:7d:4d:
84:3b:c7:49:cd:eb:22:87:59:17:aa:20:9b:45:1e:
6a:73:cf:01:bf:18:05:42:cf:ef:42:4c:51:c2:7b:
e6:7c:54:8f:eb:7c:71:cc:70:21:57:9e:9a:49:44:
a7:d7:70:c0:f4:dd:d1:58:35:03:ce:d4:f4:44:62:
7e:0c:c8:0b:18:40:2b:fd:16:3a:07:14:d8:d9:b6:
f1:ba:84:ca:8f:3c:c5:f8:94:64:7e:88:b3:58:83:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:44:6D:8F:F1:87:23:8F:D6:A7:C7:EA:06:B9:00:C9:18:64:14:0A
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/okRtj_GHI4_Wp8fqBrkAyRhkFAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.12.0/22
IPv6:
2001:67c:2698::/48
2a0c:db80::/29
Signature Algorithm: sha256WithRSAEncryption
3c:8a:cd:b8:6e:6a:6b:45:17:d9:65:b5:34:2e:5e:10:f8:17:
3f:0d:0d:3c:28:4f:87:f5:b7:30:95:2f:a5:7d:73:34:e8:59:
ad:aa:f9:47:9e:2d:0a:37:95:53:ce:10:35:77:32:da:3a:b5:
64:f7:2e:52:e7:ac:81:03:95:c4:38:c0:e6:65:c1:a9:36:1e:
1f:1a:2f:09:b9:59:86:12:54:d8:6d:91:31:81:0e:ec:39:74:
3d:03:95:e7:c5:35:b5:ed:b5:eb:fd:a4:9a:34:05:a8:4a:94:
d0:6a:6b:85:e3:c8:bc:5a:63:81:f4:61:53:d0:df:04:dd:40:
aa:60:20:02:c7:a1:44:55:95:7d:a4:8c:5e:38:eb:61:f2:71:
c6:f5:31:73:2f:15:34:30:0a:9e:26:ed:fc:82:26:e8:ae:51:
aa:89:d2:c4:22:cd:75:5c:eb:9c:c4:e0:6a:a4:9b:4a:49:89:
0d:5e:6a:35:7a:1e:b2:cd:a3:1d:3b:79:9f:ae:d4:f8:e9:4b:
8b:f5:08:39:59:b9:5f:58:52:f7:c0:57:28:86:0b:be:0e:44:
29:86:52:62:b5:5b:82:99:86:f8:4f:d5:e2:90:62:d1:01:25:
de:6e:de:6c:5a:86:77:06:2e:9c:69:db:bd:cc:69:19:43:3d:
df:a0:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:07 2023 by rpki-client on console-fra.rpki-client.org