Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/Y7dl5ByCCqeKAxH8OGCOpwSd6tU.roa
File: Y7dl5ByCCqeKAxH8OGCOpwSd6tU.roa (raw, json)
Hash identifier: pV/aMQky9h7TPeGEwBanpC+QF+OvkMhKcFO60SjPZAY=
Subject key identifier: 63:B7:65:E4:1C:82:0A:A7:8A:03:11:FC:38:60:8E:A7:04:9D:EA:D5
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 09B1C11D
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/Y7dl5ByCCqeKAxH8OGCOpwSd6tU.roa
Signing time: Sat 01 Jan 2022 13:55:41 +0000
ROA not before: Sat 01 Jan 2022 13:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5089
IP address blocks: 185.33.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162644253 (0x9b1c11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 1 13:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63b765e41c820aa78a0311fc38608ea7049dead5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:c6:c4:66:73:1a:f3:46:20:94:ea:60:e4:
63:6e:f2:ca:cc:0e:12:31:7e:27:f3:35:9c:75:c1:
28:51:4e:79:02:83:2a:19:8c:d4:a1:17:f3:4c:63:
06:53:80:a1:d8:35:5b:ab:4b:d0:51:b0:f3:81:b5:
b6:29:d2:83:95:b2:30:4e:93:0e:7d:66:ec:58:e1:
1a:57:82:48:a7:66:dc:e2:d0:df:88:b5:99:79:a8:
f7:0e:84:5b:4d:e9:e5:31:46:39:db:9e:09:b6:f3:
f1:33:25:33:d1:0e:a2:c7:b9:2e:ec:76:b1:12:75:
ac:d7:e1:45:af:23:c3:b1:01:e3:e3:ad:36:97:5e:
c2:9d:bd:9f:c7:e1:df:64:9e:08:f6:70:78:3e:21:
bc:e7:8e:ff:25:af:af:ff:9e:28:da:07:bf:ec:ae:
c3:ca:e4:2c:a0:9a:43:04:82:10:29:e1:eb:60:40:
b8:b0:11:95:31:ee:61:49:0b:53:7b:c7:cb:74:f6:
b8:b4:b6:b1:13:4b:68:b3:a2:12:94:96:9c:1c:89:
1d:58:8d:64:a9:12:28:93:48:4c:8a:3b:e3:d5:f1:
93:73:f7:2a:0b:3e:fa:9d:53:b8:76:7f:56:c5:9a:
a8:b2:68:1d:ea:fe:00:d0:7c:13:6d:a9:7c:35:4b:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B7:65:E4:1C:82:0A:A7:8A:03:11:FC:38:60:8E:A7:04:9D:EA:D5
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/Y7dl5ByCCqeKAxH8OGCOpwSd6tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.184.0/22
Signature Algorithm: sha256WithRSAEncryption
54:4d:77:b3:01:63:fa:0d:a7:57:c2:31:86:f6:5b:2e:40:d8:
66:67:ae:2f:78:64:85:fe:97:ad:b2:68:35:fc:20:2c:ee:4a:
e0:af:43:c4:d3:50:23:14:0b:d0:63:fd:93:54:dd:b2:ab:7c:
09:64:d6:78:e0:9e:da:34:b9:65:cf:c2:7e:80:cc:4e:11:e1:
c3:44:ee:27:d2:98:6a:1c:bd:f9:b8:3d:2a:6f:8c:27:84:d8:
02:c2:b9:ee:2c:bb:9f:45:97:2d:fe:4a:00:f0:f0:74:47:e5:
d9:3d:ec:d0:bd:db:55:8a:89:25:cf:1e:af:dd:28:7d:25:65:
01:f6:2d:d7:ea:c8:63:78:eb:6a:dc:7e:31:ad:c7:25:bb:fa:
c4:25:5f:fa:55:65:9c:93:94:3a:ce:2d:1a:03:f0:11:1d:46:
2c:96:a8:7a:42:22:6c:5d:a7:a2:b2:13:97:57:5b:21:c9:bf:
82:61:cc:00:7e:5c:3c:c4:96:3f:f4:04:fa:c5:f5:60:56:28:
ac:41:1c:a8:e9:7b:1c:ac:cb:da:2d:c4:6f:ff:89:97:ae:88:
07:e6:d3:ca:d5:e2:7b:11:39:4a:c1:21:aa:87:1d:13:2d:8c:
e7:c0:6f:26:45:2d:26:7f:17:25:ad:8a:6f:53:0e:1b:09:3f:
d7:e6:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org