Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/IzKvHQUGWYEsOoFsllXHx6EfOwA.roa
File: IzKvHQUGWYEsOoFsllXHx6EfOwA.roa (raw, json)
Hash identifier: JA9y1U6NqqBG+MWVGxPDtLMBCq3VsyuBZsiEjRU/LI4=
Subject key identifier: 23:32:AF:1D:05:06:59:81:2C:3A:81:6C:96:55:C7:C7:A1:1F:3B:00
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 1680EF99
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/IzKvHQUGWYEsOoFsllXHx6EfOwA.roa
Signing time: Sat 01 Jan 2022 05:56:04 +0000
ROA not before: Sat 01 Jan 2022 05:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201135
IP address blocks: 185.84.188.0/23 maxlen: 23
185.84.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377548697 (0x1680ef99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 1 05:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2332af1d050659812c3a816c9655c7c7a11f3b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:a2:21:e2:49:ee:fa:54:8d:22:56:76:72:
b6:01:e3:bf:73:f8:53:20:3e:14:e6:99:9d:e5:33:
e9:32:ed:3b:5b:e2:0c:0e:f0:83:3d:03:a3:3b:bd:
1c:b9:d6:53:79:4f:a7:eb:8d:23:d7:32:c8:aa:04:
9b:70:fc:d2:d6:b4:e5:1d:ba:80:19:8a:61:84:32:
67:23:88:cb:22:b1:4b:ed:57:07:19:83:36:3c:da:
46:e3:8e:05:bb:f6:79:9e:ff:a0:ac:c2:56:3a:ab:
55:9a:42:18:be:98:14:14:6e:cf:cb:22:52:ef:e6:
59:81:62:84:c0:e7:61:ad:1d:6b:f6:db:e6:23:81:
41:4a:62:8b:c0:fb:2b:33:90:d7:c7:f4:bf:13:40:
c7:f0:57:41:cd:d4:29:56:eb:b1:19:52:f9:27:85:
9d:74:42:84:38:01:23:7f:1c:56:81:ce:28:c5:80:
c1:ad:48:65:5f:6f:7d:ff:88:16:af:26:85:3a:23:
64:76:69:c8:4f:1e:57:62:52:fd:f8:a2:c6:f9:58:
c9:a2:7e:df:16:03:2e:94:3f:3b:1b:5d:b0:ce:60:
f4:76:7d:a9:ba:26:bb:3a:c3:cf:3d:76:ab:bf:ae:
14:b0:1c:08:b0:0b:ab:1a:a3:7e:3f:4d:92:f0:69:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:32:AF:1D:05:06:59:81:2C:3A:81:6C:96:55:C7:C7:A1:1F:3B:00
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/IzKvHQUGWYEsOoFsllXHx6EfOwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:0e:0f:91:87:71:d8:96:9b:24:ef:42:a7:2b:ef:66:fd:8d:
39:96:35:e8:11:0b:ef:6b:c9:0c:a0:52:15:04:22:c4:50:1b:
87:6a:e7:ce:b0:ba:3c:23:20:03:bf:65:d0:ba:2e:52:c3:c5:
e4:3a:16:e5:87:b6:30:89:5b:8c:74:fb:c5:75:aa:c9:90:5a:
45:f7:29:91:03:45:7c:d2:b2:ca:55:26:2a:da:38:89:e0:10:
40:f4:bd:3a:51:52:b9:ac:32:da:cd:57:7b:1a:9e:d5:18:73:
13:d5:c3:19:7c:cd:ac:8b:ee:10:31:1e:c5:e5:44:2b:d6:20:
dc:19:ea:7c:f5:58:9c:2d:33:59:50:f2:f9:f3:10:5a:1f:90:
38:a4:f8:40:9d:e8:90:3f:e9:f0:3d:45:29:0f:3d:e3:9e:f6:
7d:56:1e:2b:e4:8e:0f:83:93:20:66:3e:70:24:fa:f6:24:85:
5c:d3:09:e7:3f:ed:94:0c:11:e7:07:de:b1:f6:34:24:1b:57:
6d:be:98:d0:21:7c:4a:c0:24:2c:cf:dc:a3:56:86:93:73:a7:
46:21:9d:57:f6:5b:38:e2:ff:14:6c:c9:87:b1:46:fc:15:dd:
83:6c:4e:e5:33:c8:34:be:13:c5:0d:1c:59:86:53:fb:18:ca:
8d:d3:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:17 2025 by rpki-client