Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/y2Mqk0bMoaU3mAE6M321U6mgzVE.roa
File: y2Mqk0bMoaU3mAE6M321U6mgzVE.roa (raw, json)
Hash identifier: mD2a1yi0CEqC/o/h6ObMjwV94TLxtYLtEBGonYnBgkM=
Subject key identifier: CB:63:2A:93:46:CC:A1:A5:37:98:01:3A:33:7D:B5:53:A9:A0:CD:51
Certificate issuer: /CN=dd5072b13880c1f1ba86fcc4c40297f5d9f43774
Certificate serial: 092CF903
Authority key identifier: DD:50:72:B1:38:80:C1:F1:BA:86:FC:C4:C4:02:97:F5:D9:F4:37:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/y2Mqk0bMoaU3mAE6M321U6mgzVE.roa
Signing time: Sat 01 Jan 2022 08:01:20 +0000
ROA not before: Sat 01 Jan 2022 08:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200697
IP address blocks: 185.135.197.0/24 maxlen: 24
185.135.198.0/24 maxlen: 24
185.135.199.0/24 maxlen: 24
185.135.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153942275 (0x92cf903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5072b13880c1f1ba86fcc4c40297f5d9f43774
Validity
Not Before: Jan 1 08:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb632a9346cca1a53798013a337db553a9a0cd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:05:94:f2:b3:8a:3c:5f:5a:aa:d7:44:dc:
2b:9e:6d:fe:f6:58:d0:90:fb:58:49:6d:8f:57:2f:
2e:7f:3d:d8:a2:bc:d8:f2:e6:96:d1:b4:3e:c3:de:
06:eb:c2:6b:ea:20:3f:6a:01:68:fa:81:18:2d:20:
b1:c4:9c:80:4d:28:5b:6c:b0:f0:9c:47:08:60:a8:
14:91:42:39:3f:9f:d9:e4:f6:67:5d:a9:e1:9c:bf:
68:2f:31:42:78:05:af:ab:62:6b:d1:7a:85:68:87:
e7:04:61:5d:a8:df:1d:15:45:ad:db:4e:16:04:5c:
61:01:7d:0d:c2:d4:7b:77:ab:44:fe:a5:c2:7d:7e:
5d:7e:1c:40:6a:aa:26:02:ac:ce:17:9c:c2:ac:4b:
6b:d3:bb:ea:0f:09:b5:15:d8:78:5c:6f:6c:c6:d5:
8b:a2:c9:d4:06:d6:64:f6:52:70:48:64:8a:80:e2:
8b:d9:79:c8:89:1c:4c:1e:df:bd:de:de:dd:68:db:
b1:7b:b2:2c:36:9c:ba:1e:92:26:b6:2f:b8:a3:9d:
b9:b0:39:5b:86:53:fa:12:53:ea:2a:fc:e6:dd:2c:
e3:78:14:0f:ad:b6:86:0d:05:66:de:e8:01:d2:a6:
29:ad:00:58:3f:8b:ad:3d:42:0b:36:c0:32:1f:f9:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:63:2A:93:46:CC:A1:A5:37:98:01:3A:33:7D:B5:53:A9:A0:CD:51
X509v3 Authority Key Identifier:
keyid:DD:50:72:B1:38:80:C1:F1:BA:86:FC:C4:C4:02:97:F5:D9:F4:37:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/y2Mqk0bMoaU3mAE6M321U6mgzVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.196.0/22
Signature Algorithm: sha256WithRSAEncryption
68:0d:83:8d:20:91:4a:69:32:1a:60:61:ff:5a:b4:5a:c8:bb:
e3:10:6e:b2:84:60:84:0e:b8:6d:91:fe:9a:d7:7f:7a:6a:fe:
f0:b4:5b:d8:0a:4f:e8:c6:58:75:fc:4a:06:50:14:73:6d:fd:
fb:21:b0:cc:cb:d9:da:69:f2:83:dc:76:10:4a:da:ec:fb:c9:
46:44:4f:c1:40:de:7e:ed:0a:c8:42:e2:8e:5b:3d:fa:da:85:
e2:91:aa:49:f3:ad:a6:00:06:e8:b2:92:42:c0:a2:72:1c:62:
d5:5e:ba:b0:81:67:2c:b1:b5:fe:25:d3:3e:05:0b:23:af:9b:
d2:fa:56:91:fa:be:0f:0b:74:e8:fb:70:c4:e3:e3:fd:6e:a5:
c3:4d:74:56:8b:b8:14:77:ba:a7:4a:26:7b:03:96:d5:9f:5f:
78:fb:37:57:b2:91:8b:4c:1f:15:51:7e:da:23:6c:84:2b:b1:
81:04:76:f0:1f:61:d7:72:2d:64:8a:7d:eb:d7:cc:c4:13:c0:
cc:d5:5a:1e:ec:91:fe:8b:db:bf:1f:2d:dc:2e:b6:53:a4:c2:
ce:4c:87:83:99:e7:03:a2:34:98:0e:61:7a:b7:bd:a1:61:9c:
d2:41:02:f5:25:7b:7a:ec:e1:ed:d3:45:6e:1c:4b:a9:79:13:
13:59:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org