Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/RoPK5DAUM4NbsidijQxkmlS8QoA.roa
File: RoPK5DAUM4NbsidijQxkmlS8QoA.roa (raw, json)
Hash identifier: hYhwkFhZxoweWluYbnkQitY7ArLY5U13NPdZjw8btpI=
Subject key identifier: 46:83:CA:E4:30:14:33:83:5B:B2:27:62:8D:0C:64:9A:54:BC:42:80
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 1CB3851F
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/RoPK5DAUM4NbsidijQxkmlS8QoA.roa
Signing time: Sat 01 Jan 2022 08:03:58 +0000
ROA not before: Sat 01 Jan 2022 08:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60595
IP address blocks: 185.15.54.0/24 maxlen: 24
185.15.55.0/24 maxlen: 24
185.15.52.0/22 maxlen: 22
185.15.52.0/24 maxlen: 24
185.15.53.0/24 maxlen: 24
194.2.77.0/24 maxlen: 24
2a03:a2c0::/29 maxlen: 48
2a03:a2c0::/32 maxlen: 32
2a03:a2c2::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481527071 (0x1cb3851f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Jan 1 08:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4683cae4301433835bb227628d0c649a54bc4280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:53:90:a3:aa:11:36:fc:3e:c8:5c:df:55:
04:57:cd:34:90:bb:02:33:65:b9:ac:94:2f:a6:45:
a3:cd:60:be:55:60:d8:98:ce:5a:a1:05:1f:b0:6f:
90:38:ae:0b:58:3b:05:37:22:6a:55:1f:00:c0:44:
8a:e3:9e:1e:06:b4:39:f5:89:59:0d:a1:2a:d3:03:
55:14:c5:48:26:88:e9:df:be:44:dd:31:21:9e:c7:
b0:28:db:82:1d:06:96:58:69:8f:dd:9d:3f:84:d9:
75:2e:3a:3f:ef:42:1f:ce:5a:3f:55:7a:6b:5c:33:
20:20:42:e1:38:0d:99:0b:93:ee:65:14:6e:74:6d:
fd:50:49:96:8a:d3:08:4f:41:38:b2:a7:d1:e2:d0:
f5:f9:8a:99:ef:f8:e3:16:33:47:4c:2e:72:cc:f4:
17:50:60:c7:42:0f:12:98:f1:a4:f2:82:58:8f:8f:
a6:5d:97:ec:db:b3:65:5b:61:39:f9:01:0d:1e:a2:
c1:dc:b1:fb:09:71:85:d9:77:7b:f5:f0:be:51:61:
a9:5a:aa:2d:f6:43:dc:08:ca:c4:5a:41:d0:9c:91:
04:8c:31:67:bb:36:64:1e:d0:28:0d:01:29:28:fd:
d9:e6:ae:69:13:c7:e8:df:0c:73:65:c4:a2:8b:24:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:83:CA:E4:30:14:33:83:5B:B2:27:62:8D:0C:64:9A:54:BC:42:80
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/RoPK5DAUM4NbsidijQxkmlS8QoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.52.0/22
194.2.77.0/24
IPv6:
2a03:a2c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:3b:e6:fc:32:ab:4a:91:7f:e3:63:f9:c6:b4:ac:0f:d8:eb:
2f:af:84:00:6a:c8:55:4d:de:ae:5d:70:9b:7d:58:a4:21:b7:
0f:4f:f4:9f:4e:07:3f:73:f7:d4:4b:32:f8:b6:3f:d0:89:0f:
c6:cb:a4:44:84:d6:14:b3:90:51:94:02:6e:c8:56:8a:ec:77:
90:89:61:c8:e9:34:2d:ee:40:95:17:c3:40:87:01:44:2e:a4:
73:d6:20:ba:90:23:8d:85:20:be:59:47:7c:b0:f8:46:fe:22:
59:e5:3d:78:81:e9:2c:e4:90:d4:46:d0:30:51:89:33:dd:9e:
d2:65:ac:4e:11:cc:d8:71:00:b9:92:6d:92:36:09:86:f5:f3:
cd:b4:c0:05:1a:45:f3:6e:59:25:9e:ba:7c:cb:d3:cf:1d:79:
08:58:ca:72:35:53:4b:b3:e1:0a:b0:65:a6:2c:8d:f0:07:40:
26:4c:d9:81:56:97:da:1a:e1:55:69:54:ae:d6:3a:e0:65:4a:
b9:b7:8e:8f:8c:39:30:e5:c4:a7:1a:47:f7:ee:18:7a:01:c3:
bc:e5:0f:1d:a4:a9:c3:af:ee:22:27:4e:7b:0f:3a:2f:93:6d:
6b:59:4f:21:50:7e:7e:84:23:6b:d0:ba:1c:c6:d2:fc:82:8d:
a8:77:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:28 2024 by rpki-client on console-ams.rpki-client.org