Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/c3R-tfTxpNLtPQkHUUNrRrUrASA.roa
File: c3R-tfTxpNLtPQkHUUNrRrUrASA.roa (raw, json)
Hash identifier: 5SodhvxQpU3F/dn1FmYyfIJkWN5a2XmEsE+8FJUIs/s=
Subject key identifier: 73:74:7E:B5:F4:F1:A4:D2:ED:3D:09:07:51:43:6B:46:B5:2B:01:20
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 0855E8C6
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/c3R-tfTxpNLtPQkHUUNrRrUrASA.roa
Signing time: Sat 01 Jan 2022 11:01:35 +0000
ROA not before: Sat 01 Jan 2022 11:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201502
IP address blocks: 185.253.80.0/22 maxlen: 22
185.13.220.0/22 maxlen: 22
2a03:a6c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139847878 (0x855e8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jan 1 11:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73747eb5f4f1a4d2ed3d090751436b46b52b0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:fd:c2:69:62:09:98:09:80:db:14:61:a4:
aa:93:8f:0c:1d:4b:b8:34:a0:d0:b2:9d:88:b8:cd:
a4:1a:bf:8e:74:48:01:d1:f9:08:04:1e:2d:ff:50:
d3:26:a5:14:f9:0f:b0:2e:a1:f5:7e:fa:c7:89:2f:
49:97:ad:a9:77:c5:7d:5c:be:86:e7:e7:c2:ed:21:
d6:e2:89:14:4d:cf:2f:2a:1b:8d:5c:d0:68:15:6e:
6c:d4:18:c7:60:75:24:c1:1e:2b:61:58:15:80:2c:
c7:87:99:bf:3c:83:7d:fd:5d:54:33:88:d0:8e:4c:
01:07:53:53:98:24:e1:6b:d1:c9:1c:fe:39:c6:8d:
cd:41:ff:d5:f2:b8:99:25:3d:82:d1:85:91:f1:17:
1b:d1:4a:ce:6c:60:c6:89:71:09:18:eb:7f:b5:e4:
d1:7f:17:d3:a7:63:ba:c5:74:8d:2a:2e:f3:1f:96:
43:81:5c:88:28:0a:1f:64:c2:7a:8a:b8:5c:6f:4b:
c5:a6:99:d2:30:15:e5:0d:da:08:31:3d:64:55:34:
08:d0:16:91:33:ce:dc:34:a4:d4:a5:d0:92:19:ab:
28:b0:1e:e4:81:da:1a:ac:19:07:d5:aa:8d:1b:26:
d4:50:fb:3c:ca:bd:9b:33:c2:e8:cc:43:2b:1b:49:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:74:7E:B5:F4:F1:A4:D2:ED:3D:09:07:51:43:6B:46:B5:2B:01:20
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/c3R-tfTxpNLtPQkHUUNrRrUrASA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.220.0/22
185.253.80.0/22
IPv6:
2a03:a6c0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:9a:1c:e5:6f:e6:6c:f8:7a:3f:2c:93:18:da:03:ca:5c:5c:
d4:12:6f:93:57:af:8e:05:7f:ea:a8:e5:36:59:2d:59:53:cc:
e1:e1:8b:95:24:60:9f:3f:db:31:4e:6c:cf:fc:38:46:d0:10:
50:1d:55:fe:8c:4f:5b:c9:1f:21:ef:02:06:f0:63:0e:75:4e:
66:90:4a:e9:e1:a2:fa:40:71:66:3e:a1:5e:d0:b4:10:91:24:
64:46:cc:58:f7:0a:cc:06:81:ce:a2:27:1c:71:27:5a:d8:c9:
6a:39:ad:5d:bb:c8:f2:9f:6e:6c:b2:64:66:ca:c6:57:91:bc:
62:e2:37:68:8f:10:b1:3b:d8:0e:d7:ef:58:c0:07:87:8f:80:
e5:ba:dd:a5:a4:85:77:89:bf:8b:71:69:cc:1f:0a:df:50:ad:
1f:12:2e:d0:76:4d:5f:b5:f8:08:47:a9:8b:77:8b:f1:ae:3c:
04:e3:4b:46:04:b9:14:bb:a5:88:8f:20:fc:8d:2a:d9:86:2a:
b9:1a:dc:c8:89:b1:c5:db:76:07:06:a6:84:c1:52:e3:ce:a4:
ad:bc:85:b6:00:49:52:2e:b6:c4:6a:ad:b1:52:8f:f2:2c:b6:
b9:28:d6:78:99:e6:57:ed:b3:bc:e7:1c:80:08:cf:e5:ca:55:
67:f3:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:14 2024 by rpki-client on console-ams.rpki-client.org