Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/89AJ50tStsB-pvPVVqoldWkCG68.roa
File: 89AJ50tStsB-pvPVVqoldWkCG68.roa (raw, json)
Hash identifier: 2go61LRMvFlDoi2moatdS0asIveXulG++eRpD3UafEw=
Subject key identifier: F3:D0:09:E7:4B:52:B6:C0:7E:A6:F3:D5:56:AA:25:75:69:02:1B:AF
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 026983
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/89AJ50tStsB-pvPVVqoldWkCG68.roa
Signing time: Tue 01 Mar 2022 11:56:48 +0000
ROA not before: Tue 01 Mar 2022 11:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200308
IP address blocks: 185.248.28.0/22 maxlen: 22
2a0d:dd80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158083 (0x26983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Mar 1 11:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3d009e74b52b6c07ea6f3d556aa257569021baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:29:2b:05:39:a0:fd:95:bf:f1:b2:45:51:
b3:93:af:77:10:ba:f5:8f:e9:97:40:e5:26:b4:fe:
84:74:99:66:8d:30:bb:05:74:ad:cb:e8:af:27:a3:
7a:31:4f:a4:19:a8:d2:93:11:ca:62:17:21:8a:01:
30:26:59:f3:f6:ff:eb:dd:33:03:0d:05:46:8e:e8:
6e:e4:54:85:5d:5e:56:cd:1b:c6:bd:6e:f0:7f:21:
f2:b4:08:8e:44:c5:07:31:a2:22:0f:ea:53:17:47:
70:17:09:5b:28:13:c1:3c:8d:60:26:d5:11:cb:07:
e1:18:b8:b8:90:5e:eb:9a:6e:68:4f:16:e1:b1:3e:
61:f0:56:b6:af:b6:03:8c:a7:27:4a:ca:db:a9:79:
1f:20:e3:f4:26:95:68:14:7e:67:47:67:8b:e2:91:
ab:94:a9:d1:72:a2:9b:eb:4b:5f:11:83:fe:51:89:
62:2a:dc:67:28:a5:e7:26:7a:b1:a7:fa:b1:ad:5f:
d7:27:03:17:99:bf:9b:29:97:3d:8f:c0:2b:44:f7:
83:7e:6d:dd:cf:17:49:f2:0d:2b:1c:5c:f7:ce:d2:
04:a8:9e:9b:b6:09:af:e0:51:1d:72:ec:23:a3:c1:
d6:0a:15:39:db:38:2e:9d:95:98:7c:57:b5:b5:1c:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:09:E7:4B:52:B6:C0:7E:A6:F3:D5:56:AA:25:75:69:02:1B:AF
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/89AJ50tStsB-pvPVVqoldWkCG68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.28.0/22
IPv6:
2a0d:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
26:8b:33:4d:22:01:95:66:3f:ba:dd:c3:0c:14:48:7e:fd:b1:
14:ad:74:48:64:b5:33:c2:bb:e3:d7:59:14:af:44:54:5c:31:
ce:78:6f:91:fc:c2:b4:74:82:6e:3f:b9:cb:94:8c:55:0c:9d:
6e:92:81:6a:99:ca:0f:f6:ac:6b:77:b1:94:24:56:04:78:98:
ef:c2:89:eb:9f:63:7a:3e:a4:76:dc:38:96:fa:95:32:de:88:
03:da:94:17:41:1a:ee:ec:26:c3:43:da:3b:5f:90:0f:b8:17:
8c:14:ab:da:0c:c0:0a:78:83:f2:c9:1b:b0:6b:98:91:a6:e0:
3d:e4:83:40:54:84:ad:ce:56:db:b1:ee:b7:e8:8a:b1:50:8b:
d3:9c:c6:44:57:aa:fc:3f:00:e4:84:fc:f7:65:9a:97:ca:55:
06:f4:02:fc:a1:0e:b2:fb:02:c5:8a:81:74:b9:d1:e9:69:ba:
ea:6e:1a:8e:77:ff:43:73:92:3a:48:d7:a8:9c:a7:98:0f:95:
b0:12:c2:37:e3:15:2f:28:88:16:fe:c0:dd:4a:0f:fa:a7:78:
45:4a:43:66:52:25:b1:0c:7c:79:d4:69:0e:47:c6:49:ec:d9:
a7:18:f3:1e:97:a3:f1:f5:ce:6a:cc:1c:ec:e1:de:0b:37:59:
6b:85:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:14 2024 by rpki-client on console-fra.rpki-client.org