Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/aAVso8x29avjBtNyYIXxb9xP_tA.roa
File: aAVso8x29avjBtNyYIXxb9xP_tA.roa (raw, json)
Hash identifier: bTET4/vXr4+MVHEbnPrpL8ld9D0Os+gu/eJhc+5jmpE=
Subject key identifier: 68:05:6C:A3:CC:76:F5:AB:E3:06:D3:72:60:85:F1:6F:DC:4F:FE:D0
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 0182CBA3A6E8DE176B9EDE35AD2F149E0081
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/aAVso8x29avjBtNyYIXxb9xP_tA.roa
Signing time: Tue 23 Aug 2022 16:57:56 +0000
ROA not before: Tue 23 Aug 2022 16:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205334
IP address blocks: 185.211.41.0/24 maxlen: 24
185.214.169.0/24 maxlen: 24
185.193.172.0/24 maxlen: 24
185.193.173.0/24 maxlen: 24
185.193.175.0/24 maxlen: 24
185.193.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:a3:a6:e8:de:17:6b:9e:de:35:ad:2f:14:9e:00:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Aug 23 16:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68056ca3cc76f5abe306d3726085f16fdc4ffed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:da:9b:dc:5d:b7:35:93:21:a3:2f:16:cf:
59:ef:19:14:57:0f:a2:0c:92:19:ce:5b:b1:52:de:
b6:d4:91:ac:0c:16:c7:3f:93:14:3b:e0:c0:ba:9a:
e0:11:79:d2:ac:f4:e8:c9:d7:c9:9e:4c:e5:5c:42:
32:db:d9:e1:dd:d4:bf:09:ff:28:fe:77:8c:b6:92:
0f:0f:8f:4f:f8:aa:5e:27:9b:3d:a9:be:c0:65:80:
f7:0d:14:34:5e:96:81:df:6f:3f:5a:b7:e7:4a:cf:
fd:f4:d0:df:fd:c5:bc:a4:f8:52:df:bf:f6:c6:e5:
8a:79:27:d4:cb:3d:63:68:b1:bb:49:7c:80:9e:fc:
24:1d:8a:ac:70:d9:58:85:07:81:3d:b6:0a:06:d1:
b5:bc:4a:ac:3d:d9:06:1b:d8:21:e8:99:fb:ab:ec:
2b:c7:b1:1a:ee:be:c6:ec:ce:8a:58:e1:7c:cd:a8:
b3:be:4a:4f:dc:ff:e9:a7:31:2d:d0:92:e1:8c:be:
4a:d9:7a:54:01:03:69:3c:87:2f:d4:35:81:17:83:
0a:0e:ef:d8:5f:0f:03:9c:c4:f9:18:14:c1:1d:bb:
ac:b6:2d:a4:2a:81:23:98:49:8f:a0:3e:e5:0c:a7:
d6:ac:69:e0:e4:aa:01:dd:61:25:1d:7d:16:72:94:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:05:6C:A3:CC:76:F5:AB:E3:06:D3:72:60:85:F1:6F:DC:4F:FE:D0
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/aAVso8x29avjBtNyYIXxb9xP_tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.172.0/22
185.211.41.0/24
185.214.169.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a1:f9:14:1d:08:6d:93:9e:eb:f5:a5:f4:21:ca:0d:a2:6b:
94:12:56:02:bb:ed:77:66:44:8d:b5:f6:a3:6a:ea:58:ff:a1:
7b:f8:e7:f9:22:ed:64:80:72:97:b2:e6:5e:86:41:60:1c:ec:
b8:da:c7:7c:bd:8b:0f:a5:11:ea:c8:d6:78:05:7c:35:9d:b2:
dc:ec:73:e0:2b:5c:4a:48:37:2a:45:83:a7:a2:dd:4f:dc:5e:
37:c8:69:35:7b:af:04:b6:31:31:a3:31:8d:7a:a4:0a:50:81:
37:47:0d:60:54:07:d2:80:78:ba:46:34:bd:8b:0a:fb:b3:4f:
80:30:6e:ff:11:4b:75:9d:58:53:1c:3b:02:39:e5:c4:60:70:
2b:49:34:7c:82:fe:d9:f1:cb:3b:dc:ae:95:2b:0f:03:bf:85:
7e:64:d5:60:10:9c:04:19:2d:15:9a:5e:6f:9c:9a:b1:64:40:
ba:ec:9e:68:e7:c4:88:1e:3f:77:a1:ca:46:c7:36:12:47:72:
22:55:fb:04:7a:7c:36:86:0c:24:8e:06:20:b1:84:e4:2d:50:
19:69:44:ce:8b:c5:8e:71:90:36:e1:b4:5d:91:50:bb:a7:01:
46:60:ff:ca:3c:ae:bd:77:81:5e:2f:d1:06:b8:1e:44:fd:cc:
6b:d0:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org