Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/okzcytlj30-TziSHtozSRW-Rqgg.roa
File: okzcytlj30-TziSHtozSRW-Rqgg.roa (raw, json)
Hash identifier: ykjLgZ16q0FWEaLYTm5aXLOuIFnH5mNuLon/hPKc36A=
Subject key identifier: A2:4C:DC:CA:D9:63:DF:4F:93:CE:24:87:B6:8C:D2:45:6F:91:AA:08
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 0658B4F1
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/okzcytlj30-TziSHtozSRW-Rqgg.roa
Signing time: Sat 01 Jan 2022 07:00:40 +0000
ROA not before: Sat 01 Jan 2022 07:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138915
IP address blocks: 185.23.180.0/24 maxlen: 24
185.23.183.0/24 maxlen: 24
185.23.181.0/24 maxlen: 24
185.23.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106476785 (0x658b4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jan 1 07:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a24cdccad963df4f93ce2487b68cd2456f91aa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:1c:e2:bf:ff:73:eb:b8:bd:0d:c2:62:ac:
a7:fe:27:47:0c:2f:cd:7c:93:d1:42:a6:03:00:77:
f2:43:d3:6f:cc:2a:a5:54:53:a7:b7:fc:e9:f9:a1:
c6:3b:c4:1f:83:28:7d:d6:7a:33:43:d9:93:0d:8b:
cf:b0:ae:54:76:70:c5:c3:a9:24:01:fd:75:6d:c2:
0e:a2:c4:35:a4:62:7a:b8:fb:d0:95:82:0f:dc:02:
6f:c9:ae:58:3f:40:40:22:19:5c:65:b6:21:dc:31:
ff:b6:07:fa:a5:02:1c:27:0a:a1:d4:9d:07:b4:0f:
98:5b:57:ae:b6:6a:8a:55:fb:95:71:75:e9:c0:8c:
22:72:3e:18:6c:ad:76:ca:6d:81:89:47:d0:66:cb:
11:32:bd:61:33:ec:f3:3f:9b:9c:2f:1f:03:a5:48:
e3:02:64:29:66:4c:f4:af:d0:c6:b6:11:e4:87:71:
93:9f:41:19:bb:e5:25:ae:37:32:a9:39:9c:73:5f:
66:01:fb:f5:85:c7:80:41:33:67:f2:d3:d9:28:50:
3e:fa:dc:f6:73:6b:5f:40:6b:61:a9:82:ed:14:9d:
b0:d0:ea:64:cc:fb:4f:29:0e:71:bb:f8:ec:63:d7:
ec:45:12:04:7f:31:d4:59:bf:f1:4c:0c:18:39:1b:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4C:DC:CA:D9:63:DF:4F:93:CE:24:87:B6:8C:D2:45:6F:91:AA:08
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/okzcytlj30-TziSHtozSRW-Rqgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.180.0/22
Signature Algorithm: sha256WithRSAEncryption
93:76:be:ff:e9:73:1d:fe:2e:30:c1:0e:c7:cc:81:9c:29:7a:
0e:53:ea:6e:b8:7a:a4:ad:de:d1:c6:96:28:3b:ba:bb:04:90:
85:d8:89:da:a5:1f:76:88:b5:f2:d0:61:2f:58:13:b4:3a:85:
46:30:f3:b4:64:6b:95:73:d6:4b:26:cc:2b:87:25:42:53:f4:
66:fe:b3:23:89:1c:25:81:a1:ff:26:3f:0a:9d:0a:fa:6e:c3:
2e:a0:5f:34:7d:e6:0c:3b:9d:5f:29:f5:f7:b3:f0:4b:53:07:
ae:9c:29:9d:4a:b5:99:6c:2a:69:a9:a7:64:f1:54:96:83:b7:
da:43:31:7a:72:02:79:b7:56:83:a1:f0:08:b8:02:be:5e:2c:
76:73:0b:96:35:51:97:43:6a:66:1d:4d:78:6c:fa:a1:c0:68:
5c:7f:86:c2:f9:3e:80:c2:35:f1:5c:f0:af:11:22:af:f3:2e:
81:69:5e:11:50:d9:04:eb:25:e5:7d:99:20:45:1f:b8:79:b5:
d4:25:82:c7:89:f6:44:3a:ec:3a:ef:cb:04:a2:e3:33:72:57:
a0:12:fd:aa:b8:47:34:62:3f:21:0e:20:4e:76:b2:1e:67:24:
49:e0:53:4f:69:8a:62:c4:c0:30:33:a0:a3:5b:54:d4:c4:41:
01:27:5c:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBli08TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YmQyYzM3Mjg0ZDg0NDI2ZjA1ZTMyNWI2YjA0N2FkNWNmM2ZlNGYyMB4XDTIyMDEw
MTA3MDA0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTI0Y2RjY2FkOTYz
ZGY0ZjkzY2UyNDg3YjY4Y2QyNDU2ZjkxYWEwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhPHOK//3PruL0NwmKsp/4nRwwvzXyT0UKmAwB38kPTb8wq
pVRTp7f86fmhxjvEH4MofdZ6M0PZkw2Lz7CuVHZwxcOpJAH9dW3CDqLENaRierj7
0JWCD9wCb8muWD9AQCIZXGW2Idwx/7YH+qUCHCcKodSdB7QPmFtXrrZqilX7lXF1
6cCMInI+GGytdsptgYlH0GbLETK9YTPs8z+bnC8fA6VI4wJkKWZM9K/QxrYR5Idx
k59BGbvlJa43Mqk5nHNfZgH79YXHgEEzZ/LT2ShQPvrc9nNrX0BrYamC7RSdsNDq
ZMz7TykOcbv47GPX7EUSBH8x1Fm/8UwMGDkbGWMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSiTNzK2WPfT5POJIe2jNJFb5GqCDAfBgNVHSMEGDAWgBQr0sNyhNhEJvBe
MltrBHrVzz/k8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0s5TERjb1RZUkNid1hqSmJhd1I2MWM4XzVQSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvYzQ2NGQ2LTBjYmQtNGVmZC05OGFjLTUzZDlkM2E0NGZjZi8x
L29remN5dGxqMzAtVHppU0h0b3pTUlctUnFnZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
YzQ2NGQ2LTBjYmQtNGVmZC05OGFjLTUzZDlkM2E0NGZjZi8xL0s5TERjb1RZUkNi
d1hqSmJhd1I2MWM4XzVQSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkXtDANBgkqhkiG9w0BAQsFAAOC
AQEAk3a+/+lzHf4uMMEOx8yBnCl6DlPqbrh6pK3e0caWKDu6uwSQhdiJ2qUfdoi1
8tBhL1gTtDqFRjDztGRrlXPWSybMK4clQlP0Zv6zI4kcJYGh/yY/Cp0K+m7DLqBf
NH3mDDudXyn197PwS1MHrpwpnUq1mWwqaamnZPFUloO32kMxenICebdWg6HwCLgC
vl4sdnMLljVRl0NqZh1NeGz6ocBoXH+Gwvk+gMI18VzwrxEir/MugWleEVDZBOsl
5X2ZIEUfuHm11CWCx4n2RDrsOu/LBKLjM3JXoBL9qrhHNGI/IQ4gTnayHmckSeBT
T2mKYsTAMDOgo1tU1MRBASdc4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:45 2024 by rpki-client on console-ams.rpki-client.org