Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/oLEDXxYPwpUFmCiE-kjA5p00UEY.roa
File: oLEDXxYPwpUFmCiE-kjA5p00UEY.roa (raw, json)
Hash identifier: okqlDQ76i56XHLnkBclCsqAE58SpWMUKX/OhujMc2Gw=
Subject key identifier: A0:B1:03:5F:16:0F:C2:95:05:98:28:84:FA:48:C0:E6:9D:34:50:46
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0182EF3411993FBD52F6EFFB0DF38AFF39D5
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/oLEDXxYPwpUFmCiE-kjA5p00UEY.roa
Signing time: Tue 30 Aug 2022 14:42:23 +0000
ROA not before: Tue 30 Aug 2022 14:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204964
IP address blocks: 185.233.156.0/22 maxlen: 22
185.233.160.0/22 maxlen: 22
185.243.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:34:11:99:3f:bd:52:f6:ef:fb:0d:f3:8a:ff:39:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Aug 30 14:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0b1035f160fc29505982884fa48c0e69d345046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:cc:c9:3c:1b:12:a1:d8:e6:11:06:ad:fb:
91:b8:2a:a7:33:55:ea:e3:24:8b:73:fe:88:9e:63:
33:aa:f8:e8:31:3f:06:2a:6a:f0:7a:be:6a:6e:33:
49:6d:3c:74:e3:a2:c4:78:0b:3d:65:69:f3:e6:0d:
9e:dd:98:66:43:57:7a:03:90:5a:e5:ec:85:f7:5a:
01:31:42:f0:82:5d:b9:87:eb:c8:c8:a1:37:fa:8e:
b3:b1:31:2b:6d:fa:c9:58:4a:b7:d4:68:fe:25:c2:
11:73:fc:d8:cf:69:86:aa:2d:41:80:b3:8c:23:b8:
fe:bf:43:e1:53:58:ce:c1:f5:1a:c4:9f:4c:0f:1e:
74:31:77:55:8c:9f:a6:c4:20:5a:e2:ea:77:62:d5:
32:c1:9f:cd:1e:a7:4d:b9:6b:0f:8f:e6:00:c9:c1:
43:35:d1:7c:3f:9d:f6:59:4b:d4:71:f2:04:b1:f1:
3a:02:f5:0d:19:7a:b5:47:37:a5:3a:42:92:95:0d:
37:1d:ea:af:74:ea:91:92:f5:56:f3:db:cf:5c:49:
b3:81:7d:65:2e:45:c6:f7:cb:9b:7d:76:6a:7d:97:
79:f4:2f:c5:bf:12:1f:a1:4e:38:0b:4a:be:7c:e2:
3d:46:5a:68:2c:72:75:a2:0f:61:a2:3f:1b:c3:01:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:03:5F:16:0F:C2:95:05:98:28:84:FA:48:C0:E6:9D:34:50:46
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/oLEDXxYPwpUFmCiE-kjA5p00UEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.156.0-185.233.163.255
185.243.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:60:58:7f:de:49:55:42:70:ef:ab:ad:a1:31:47:ea:b0:b3:
61:70:1f:59:b7:91:24:56:79:49:d7:81:00:4e:b2:7c:8b:b0:
7d:cb:60:fe:a1:7e:bd:22:d2:4e:d4:b1:9b:98:b1:14:07:f1:
6b:63:3b:37:80:06:64:f8:6f:93:d9:35:67:8b:66:5c:44:59:
c8:2c:2b:fe:6a:62:37:a8:64:b8:85:71:9d:b5:cf:74:dd:4a:
92:b9:d7:7e:e9:27:24:1e:14:2f:a8:d1:89:ce:47:4f:26:08:
98:76:18:fb:a4:a0:1d:6b:41:27:5b:f1:aa:7c:94:19:66:22:
b9:20:0b:5c:4c:53:bf:dc:e0:4a:f6:76:cd:71:3d:f5:b2:67:
80:0d:77:2c:f2:1d:98:1d:ae:0e:39:07:6f:bd:8a:86:8e:61:
50:87:31:90:6c:5c:72:8e:b0:f8:77:0f:eb:9f:e5:78:e3:74:
bb:9c:e2:38:a1:0f:94:e8:df:80:57:f0:fc:c3:d1:33:f8:3d:
c6:d3:a9:09:87:ee:6f:12:a4:5a:20:ca:78:34:bd:9c:7a:6a:
02:18:53:da:05:4f:e8:89:5e:17:c7:be:22:f7:18:61:0d:20:
7d:c0:64:d1:7a:1f:6d:34:8a:e6:a2:dc:5e:fb:61:5f:ed:6f:
4a:aa:78:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:58 2024 by rpki-client on console-fra.rpki-client.org