Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/veubSo5UmQEwGV7mwS_OSbOZ40g.roa
File: veubSo5UmQEwGV7mwS_OSbOZ40g.roa (raw, json)
Hash identifier: lv77AM2hUl+WylhAFtUf8tFNm0HNaWWmxVOoyIGFmAk=
Subject key identifier: BD:EB:9B:4A:8E:54:99:01:30:19:5E:E6:C1:2F:CE:49:B3:99:E3:48
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09209283
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/veubSo5UmQEwGV7mwS_OSbOZ40g.roa
Signing time: Sat 01 Jan 2022 16:00:43 +0000
ROA not before: Sat 01 Jan 2022 16:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206804
IP address blocks: 185.227.68.0/24 maxlen: 24
185.234.73.0/24 maxlen: 24
2a0b:b87:ffd7::/48 maxlen: 48
2a0b:b87:ffd6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153129603 (0x9209283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdeb9b4a8e54990130195ee6c12fce49b399e348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:c6:a0:f9:44:f5:ca:10:f4:b0:a5:6c:93:
bf:76:39:e1:95:1a:00:ca:5e:bf:e4:c3:c8:c5:e3:
e2:8a:70:e5:55:a6:42:71:5b:df:41:1b:21:50:2b:
ab:f4:7a:24:8a:fb:fc:ac:74:d8:8e:a5:6b:99:f1:
68:93:e7:a0:06:65:46:00:e6:74:51:50:d1:86:86:
8d:90:12:a5:80:22:15:61:8b:1b:10:44:55:de:36:
53:fc:8d:11:5a:a7:5f:cc:50:f0:01:9e:91:4c:43:
41:01:16:4f:90:70:c3:1c:a1:07:35:8a:5b:0e:8b:
8b:a1:83:8a:46:1a:16:26:ed:0a:8f:f1:ae:e6:dd:
c0:b5:d2:f9:4b:c7:95:dc:3f:10:2e:d3:29:bd:e7:
20:f3:ad:44:94:52:27:0a:b0:e7:05:8c:93:0d:7b:
e0:ee:dc:6f:72:12:6c:37:1b:f3:b7:4e:15:84:2c:
91:8a:c0:2c:1d:e5:fe:64:28:63:37:01:15:69:04:
49:3e:f1:c1:34:18:f9:65:4f:48:5c:9a:cc:07:d9:
2d:a6:5f:e9:f1:a1:51:71:0f:80:8d:13:3f:39:bb:
3e:52:5f:53:95:70:1a:63:4e:e2:49:ef:e6:54:7a:
00:b7:0b:f5:f1:93:57:07:5c:64:9a:60:9e:d8:84:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EB:9B:4A:8E:54:99:01:30:19:5E:E6:C1:2F:CE:49:B3:99:E3:48
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/veubSo5UmQEwGV7mwS_OSbOZ40g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.68.0/24
185.234.73.0/24
IPv6:
2a0b:b87:ffd6::/47
Signature Algorithm: sha256WithRSAEncryption
d4:3e:8d:27:05:9f:ae:f6:1f:2f:8a:97:3b:e9:75:d6:99:7a:
65:4b:91:0a:e2:6c:2d:46:99:02:8d:15:09:85:c2:af:b6:bd:
fb:3d:af:0d:23:f7:83:36:06:3f:9a:df:e7:90:ee:4f:1c:41:
78:1f:8d:3c:1a:cf:fe:22:1b:cc:70:6c:4b:55:f0:ce:78:e1:
29:ed:c1:7a:11:b5:ea:4c:8d:15:09:86:e8:a1:24:b4:26:15:
78:17:e1:10:fd:db:10:46:83:3f:b7:3c:ec:62:24:fc:d6:6a:
65:67:ec:4d:6d:3d:4c:49:47:61:1b:24:3b:22:f2:1c:88:cc:
ec:f4:15:70:db:fd:39:fb:fc:4a:c0:a7:a0:db:1b:4d:01:bd:
64:2e:fb:a4:6a:0d:4c:51:37:be:1d:d0:eb:60:64:c3:a0:b1:
cb:0b:1c:ed:1c:3c:29:7b:88:1e:8c:58:6f:27:91:5a:e3:76:
ed:6c:b0:be:33:ce:56:73:c8:f1:91:f9:79:ec:b5:38:7f:5c:
ed:50:10:2e:e0:97:27:13:dd:e7:56:36:86:48:46:50:1d:2d:
1d:97:de:95:52:0d:33:13:07:31:0d:f0:55:c4:03:25:30:93:
0c:e2:db:34:dc:7c:16:b3:6a:78:0a:e5:03:7f:e2:b8:bd:e5:
bc:22:07:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org