Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/fYswHB5M1r9QFkyoaCHFNqsv2PQ.roa
File: fYswHB5M1r9QFkyoaCHFNqsv2PQ.roa (raw, json)
Hash identifier: xODshh2uRfYp+zxoYIABfzJM9krTMS7j0nQPgkLNvRY=
Subject key identifier: 7D:8B:30:1C:1E:4C:D6:BF:50:16:4C:A8:68:21:C5:36:AB:2F:D8:F4
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 0BF5C141
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/fYswHB5M1r9QFkyoaCHFNqsv2PQ.roa
Signing time: Sat 01 Jan 2022 03:57:00 +0000
ROA not before: Sat 01 Jan 2022 03:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204609
IP address blocks: 185.231.88.0/23 maxlen: 23
185.231.90.0/24 maxlen: 24
185.231.91.0/24 maxlen: 24
185.231.88.0/22 maxlen: 24
2a0d:a680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200655169 (0xbf5c141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Jan 1 03:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d8b301c1e4cd6bf50164ca86821c536ab2fd8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:ee:9d:53:85:40:92:61:d0:94:53:37:3e:
71:d7:df:6a:89:c0:59:91:08:b6:60:82:b4:29:00:
9b:c1:73:c0:88:e8:a5:f3:28:b5:8a:7a:0a:d4:51:
02:59:e1:5b:55:06:73:96:8e:d9:c2:58:ec:7b:7e:
89:d3:85:d8:75:98:33:08:5e:a0:69:9e:3f:53:43:
68:79:3f:c9:a9:68:0a:5d:d4:62:77:07:98:eb:50:
96:6d:7f:23:9e:7f:95:ee:80:4b:71:b1:68:14:b5:
12:52:9a:24:29:36:5d:f9:3f:96:0a:b5:98:71:ba:
19:04:42:76:11:2c:40:e3:9f:f9:b1:1e:a7:ab:a6:
6b:06:eb:43:1d:36:b1:e5:50:b4:0e:0a:c1:40:52:
ef:07:29:f9:44:59:99:97:b1:e6:fb:05:d2:20:97:
ab:ee:0c:e6:92:65:f8:eb:62:a0:d7:5b:8b:55:30:
88:f9:58:c4:64:be:20:46:9c:7a:81:16:9d:18:dc:
de:6b:77:5b:48:97:2f:26:45:c8:67:1a:47:04:15:
43:c7:63:6a:9f:93:95:77:87:fd:f8:20:43:d1:15:
03:a1:37:0e:0a:c0:90:50:85:d8:e9:7d:f5:22:87:
1b:72:74:93:2e:23:ec:41:a2:d3:7e:78:e0:54:04:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:30:1C:1E:4C:D6:BF:50:16:4C:A8:68:21:C5:36:AB:2F:D8:F4
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/fYswHB5M1r9QFkyoaCHFNqsv2PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.88.0/22
IPv6:
2a0d:a680::/32
Signature Algorithm: sha256WithRSAEncryption
34:eb:83:8e:6d:4d:39:1a:b2:e7:78:b9:f8:e9:96:18:47:86:
2a:1b:e3:b5:9b:0c:b1:8f:85:75:94:07:df:08:53:d3:ac:71:
e4:fa:58:0b:3e:1e:25:91:17:1f:03:b9:0f:97:2e:81:21:8d:
54:68:8a:b4:ff:c0:cc:8c:64:07:b7:7d:ad:6d:3e:e9:8c:33:
93:c6:b5:83:ed:b7:85:5f:19:65:2a:40:a4:f7:be:6d:27:6b:
16:51:91:60:eb:25:78:32:8c:3f:d1:da:d0:da:77:50:cb:f6:
e4:63:e8:cf:d0:ba:e1:68:b8:f0:04:6e:c5:5c:5b:24:0e:31:
ad:17:6a:3f:fe:cc:70:43:fa:af:1f:15:89:a4:62:a2:e2:79:
24:57:0d:35:e2:1a:50:0c:5a:a4:b4:35:2d:ed:d4:d4:62:84:
5b:30:51:18:18:b0:42:4e:35:38:fc:db:59:03:ef:9a:6a:9a:
55:7c:9d:ca:20:32:7f:84:ca:c2:bf:4c:5d:98:40:96:2d:b4:
75:ca:7f:0f:d0:04:6d:25:8f:aa:36:1e:62:00:4d:84:5b:a9:
82:9c:ff:f5:92:11:c3:2c:1d:d8:13:ec:6a:ee:23:fe:f7:f3:
02:c6:13:21:dd:81:3c:ea:94:16:d3:ba:df:af:b2:a8:67:fb:
4d:b6:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:55 2024 by rpki-client on console-fra.rpki-client.org