Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/rdI0asDL0MMQ9vJU3L-ceR_euE8.roa
File: rdI0asDL0MMQ9vJU3L-ceR_euE8.roa (raw, json)
Hash identifier: 8fyEpNHFewTA1iOmBcquSssSB7NTeYTLfN1LxLtK3Uk=
Subject key identifier: AD:D2:34:6A:C0:CB:D0:C3:10:F6:F2:54:DC:BF:9C:79:1F:DE:B8:4F
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 018552CE2D734E5B3E72A38E14B78354BE82
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/rdI0asDL0MMQ9vJU3L-ceR_euE8.roa
Signing time: Tue 27 Dec 2022 08:58:41 +0000
ROA not before: Tue 27 Dec 2022 08:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204700
IP address blocks: 185.241.105.0/24 maxlen: 24
185.241.104.0/24 maxlen: 24
185.241.104.0/22 maxlen: 22
185.241.107.0/24 maxlen: 24
185.241.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:ce:2d:73:4e:5b:3e:72:a3:8e:14:b7:83:54:be:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Dec 27 08:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=add2346ac0cbd0c310f6f254dcbf9c791fdeb84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:cf:49:f2:80:0a:e7:a6:20:c6:19:a8:51:
2c:1f:f4:9d:a1:73:16:2c:06:c7:58:e9:fc:4e:e0:
00:52:e2:a3:fc:86:35:89:11:68:b0:cd:58:17:e9:
b4:bd:f9:69:d8:57:99:ad:23:21:28:57:04:06:fe:
cf:87:dd:ca:67:eb:da:3f:b7:3f:d0:36:41:ae:bb:
1d:23:73:22:62:8a:f1:1b:91:4b:c9:b3:09:07:11:
23:95:34:6b:6c:58:75:6e:d7:77:f7:7f:74:93:4f:
c2:a5:6f:8e:2e:5e:e4:ca:a0:1b:3f:3d:e0:80:f1:
9a:2d:d0:d8:11:ee:6c:3a:fa:8e:d1:eb:6f:02:fb:
ea:cd:46:1a:f9:5f:df:91:90:74:06:8e:84:d7:50:
15:9a:7f:26:91:80:75:77:54:e7:a3:41:59:53:97:
de:3c:1a:8d:80:05:45:3e:bb:f1:27:fe:71:31:b0:
0a:46:5a:52:ee:1e:f8:ef:47:19:f6:88:b3:23:5a:
e3:6c:88:78:96:f0:24:59:f2:94:74:72:1c:4f:d5:
6e:10:b9:53:a8:85:6c:13:b9:49:68:d9:22:11:f6:
a6:66:a1:6f:97:50:59:10:69:6d:4c:5a:f2:a0:30:
c2:74:79:9d:94:a6:c0:7f:7e:43:cf:9a:56:eb:6f:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:34:6A:C0:CB:D0:C3:10:F6:F2:54:DC:BF:9C:79:1F:DE:B8:4F
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/rdI0asDL0MMQ9vJU3L-ceR_euE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.104.0/22
Signature Algorithm: sha256WithRSAEncryption
50:9e:ee:55:19:16:79:b1:a2:89:b6:b9:44:05:87:7b:14:86:
bc:10:6a:37:09:60:fc:d9:60:71:05:9d:29:4e:18:bb:ed:64:
b2:f8:30:be:bb:c5:b0:1b:27:a3:ef:91:2a:6d:11:21:b8:aa:
10:aa:fd:fd:43:a5:4f:de:41:7c:a1:ac:07:ab:08:33:ce:d9:
83:c8:36:43:3b:28:af:07:2b:eb:f4:e5:9a:ab:d6:65:74:ca:
93:2d:4f:4e:b1:f5:d6:b3:8b:b1:11:62:ba:6c:a4:b5:9a:2a:
13:bd:b1:82:92:07:59:e1:82:de:9e:f2:fc:34:6d:db:9d:c3:
fc:fd:9f:c9:a2:bf:d8:d9:e8:f0:42:df:21:ef:4c:13:fd:40:
6d:d3:d5:d5:ea:f9:54:33:ba:db:d2:ae:a2:0e:89:3a:34:41:
59:c7:70:c0:83:84:f6:09:c8:41:32:3b:0d:d2:fc:eb:f7:d0:
3b:2a:31:c2:ee:31:28:3c:d7:ee:bd:42:06:10:8a:8f:f4:6b:
c2:69:eb:bb:59:a6:e5:c2:79:f0:7e:ca:a5:71:79:44:ca:a5:
19:ca:c2:3b:56:92:31:54:be:34:b3:5e:a9:3d:c2:c1:ab:19:
d4:28:d5:ea:94:cc:2b:31:4f:9d:22:d8:61:14:82:4c:c5:df:
fd:5b:c0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:52 2024 by rpki-client on console-fra.rpki-client.org