Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/koUUyw9uvzK6SzRxCLqGoHPybAM.roa
File: koUUyw9uvzK6SzRxCLqGoHPybAM.roa (raw, json)
Hash identifier: eHIm2uym8JFGK34pVqURCx+E1WnDQbUuFaCwU4ydW+s=
Subject key identifier: 92:85:14:CB:0F:6E:BF:32:BA:4B:34:71:08:BA:86:A0:73:F2:6C:03
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 17F37FBF
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/koUUyw9uvzK6SzRxCLqGoHPybAM.roa
Signing time: Sat 14 May 2022 01:52:40 +0000
ROA not before: Sat 14 May 2022 01:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.33.92.0/23 maxlen: 23
185.33.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401833919 (0x17f37fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: May 14 01:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=928514cb0f6ebf32ba4b347108ba86a073f26c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:0d:5e:d5:3f:d4:04:02:24:07:2f:92:a7:
cf:34:04:c0:01:08:89:7a:f6:8a:68:30:ac:7c:eb:
e7:74:de:5b:6e:7f:4f:7e:c6:5d:f8:2c:ff:76:89:
34:02:25:5d:2a:79:6c:69:1e:d1:ea:b5:a7:57:1f:
7b:20:35:2b:b6:6f:47:00:81:32:15:3f:ac:ef:cd:
40:16:ea:3f:71:9f:24:61:ca:fc:ed:14:c8:d3:a2:
44:11:e8:87:0b:2c:e6:2a:3a:6b:43:6e:e4:ab:5e:
ca:3a:51:fd:4c:30:44:11:12:01:a3:33:4e:4f:e5:
d2:6b:82:f1:e1:84:1a:d3:71:cc:74:6e:85:2b:80:
e7:4f:30:6f:25:84:f5:60:51:2c:ee:76:b7:f6:04:
cb:5f:8f:8b:88:ae:0a:93:7c:cd:78:fa:cb:c7:3f:
b7:ff:40:d8:5a:80:df:6b:e9:09:23:65:6f:24:2e:
83:72:cb:38:50:ed:04:81:95:48:76:f0:74:20:04:
86:25:f4:6c:5e:e6:e4:c0:fc:bc:46:fd:b6:e6:33:
ca:c8:9c:1c:c8:3c:e4:01:26:9f:10:b8:2b:2f:1a:
ef:7b:25:37:90:dd:55:46:d0:74:f6:01:9f:0e:94:
7e:ed:2d:ff:39:71:80:30:1d:25:1b:75:78:ab:53:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:14:CB:0F:6E:BF:32:BA:4B:34:71:08:BA:86:A0:73:F2:6C:03
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/koUUyw9uvzK6SzRxCLqGoHPybAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.92.0-185.33.94.255
Signature Algorithm: sha256WithRSAEncryption
20:ea:a9:c5:a8:67:f0:70:09:91:e6:3f:28:ff:bf:f8:5b:d9:
0e:c9:a1:20:77:4d:28:c4:98:a1:f3:ed:ee:6d:06:cc:a2:d7:
04:72:1e:1d:bf:59:3d:19:7f:30:23:41:7c:9e:66:ba:58:62:
a3:50:e1:83:fa:77:bd:49:6c:60:a5:d0:71:4d:ab:84:87:02:
77:30:c6:cc:fd:29:a3:00:d5:ed:59:e5:a2:45:22:27:13:8e:
64:41:0a:e0:c2:b1:6f:b5:f5:cd:01:48:a9:d8:ec:89:58:02:
22:45:79:8a:9d:3f:e6:cb:3a:43:73:93:b4:1f:68:c9:34:58:
e4:86:29:90:80:6f:a1:2b:53:af:91:61:b3:50:a1:fc:3f:df:
2e:b3:59:fb:60:87:46:2f:a1:67:77:f6:72:12:6b:ac:91:0b:
a9:8b:c7:83:0e:ff:50:a1:5c:70:a7:0a:bd:a7:aa:ae:84:f6:
0d:5d:3f:8b:29:be:32:f5:30:4b:14:5c:9e:c3:8b:40:63:20:
3b:1c:b8:dc:dc:a2:0c:54:0e:a4:4b:e1:33:6b:23:54:a2:a0:
3f:52:65:92:fb:15:0f:32:d3:9a:85:60:02:c2:2f:8a:09:f0:
c4:94:59:55:17:47:4d:da:b2:9c:3c:bd:f4:89:7a:01:8f:90:
41:27:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:04 2023 by rpki-client on console-ams.rpki-client.org