Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/EE2hFypkcgj3X0Q-SK9Z3lilUDw.roa
File: EE2hFypkcgj3X0Q-SK9Z3lilUDw.roa (raw, json)
Hash identifier: KSSNyr5DgmN+Y27Rk0Zr5d+++VTzVUjgJA4swfpgx9s=
Subject key identifier: 10:4D:A1:17:2A:64:72:08:F7:5F:44:3E:48:AF:59:DE:58:A5:50:3C
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 07CD45
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/EE2hFypkcgj3X0Q-SK9Z3lilUDw.roa
Signing time: Tue 01 Mar 2022 14:35:23 +0000
ROA not before: Tue 01 Mar 2022 14:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.185.209.0/24 maxlen: 24
185.185.211.0/24 maxlen: 24
185.185.208.0/24 maxlen: 24
185.185.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511301 (0x7cd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Mar 1 14:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=104da1172a647208f75f443e48af59de58a5503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:5c:9a:fa:88:d7:0f:53:16:10:b9:b5:05:
f0:cd:21:8c:e3:cf:47:2c:5d:93:43:4d:7b:29:f6:
cc:e9:4e:96:06:c4:85:fb:59:07:19:4c:9b:24:ee:
bd:8a:ed:f7:06:d5:23:da:9a:33:63:7f:92:4e:ba:
31:9a:3e:06:1c:0e:16:12:ed:c6:a7:b4:f5:0e:5c:
d5:98:2f:d5:e6:0f:84:81:18:17:50:7d:56:ae:49:
b4:1b:0f:5c:d6:e7:67:fa:65:9c:37:1e:51:53:d3:
ad:33:a2:7b:ee:d0:ce:3e:31:2a:ab:9d:ce:ef:33:
af:08:42:61:11:03:aa:08:bb:13:f7:d1:e1:be:58:
3a:10:a2:82:15:28:7f:c3:27:66:6d:ac:d9:cf:df:
49:75:a9:29:32:84:ef:f1:8a:6e:49:06:6c:64:48:
37:92:d9:da:c7:8c:fe:94:5f:98:01:7b:5a:a7:89:
d2:ae:7c:8d:98:1a:77:57:b1:01:53:1a:13:72:c9:
e1:b2:7a:9a:b3:84:c6:8a:42:ba:81:7d:21:8e:bf:
17:a5:43:cd:d8:ed:28:3b:c8:46:5b:67:24:f4:7e:
96:38:a5:bc:63:c1:10:de:72:04:86:f3:2b:9b:14:
82:eb:cf:de:b2:fc:84:be:c5:78:de:f1:ae:e9:95:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4D:A1:17:2A:64:72:08:F7:5F:44:3E:48:AF:59:DE:58:A5:50:3C
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/EE2hFypkcgj3X0Q-SK9Z3lilUDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.208.0/22
Signature Algorithm: sha256WithRSAEncryption
28:8c:70:e2:c6:9b:2d:72:ae:68:37:e9:6f:c1:e2:24:71:63:
40:48:9c:27:69:fd:46:77:11:fb:ba:dd:a1:d5:aa:98:0b:9d:
6f:24:59:d4:89:d7:c5:cd:18:70:42:4c:20:49:4a:f2:d4:da:
e7:34:30:a9:d7:e7:40:83:93:b0:b9:90:8c:07:e2:9d:5b:18:
07:50:d8:da:ab:8a:49:6a:b4:fa:38:5f:12:81:ca:94:76:e2:
f3:ca:1e:96:97:75:cb:7b:d7:4a:21:1e:d4:45:e6:56:13:51:
bc:89:86:8d:cc:14:1c:90:74:47:80:5f:22:c0:43:60:38:4a:
04:8e:1d:56:ca:ba:ca:95:8f:83:ea:ab:41:56:49:eb:44:23:
e5:e3:50:0a:e3:69:c9:b6:87:0f:5d:91:f2:70:f9:d8:d1:c4:
d5:be:94:0e:77:1a:28:65:83:37:66:b4:86:56:1a:6f:73:30:
1a:63:50:23:62:3c:0d:69:75:dd:02:b4:b4:7e:e5:fd:54:8d:
73:6b:4d:5a:43:4c:0c:fe:00:f0:38:33:f1:3f:ad:2e:3c:18:
a6:52:22:a2:50:bc:e0:bb:a4:76:2e:4b:8b:42:f0:e1:15:4a:
c4:6b:b5:f4:fa:a8:58:48:a5:ef:6d:c8:62:7f:16:e9:1f:47:
0a:48:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:43 2024 by rpki-client on console-fra.rpki-client.org