Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/7_CUaV-6laVbdlISZ_T9jptCIHk.roa
File: 7_CUaV-6laVbdlISZ_T9jptCIHk.roa (raw, json)
Hash identifier: GIMK1drj56KMSzYvsfPA8LKyn1Wde3v0Sb47GsNLlgA=
Subject key identifier: EF:F0:94:69:5F:BA:95:A5:5B:76:52:12:67:F4:FD:8E:9B:42:20:79
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 0D807E07
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/7_CUaV-6laVbdlISZ_T9jptCIHk.roa
Signing time: Sat 01 Jan 2022 09:58:31 +0000
ROA not before: Sat 01 Jan 2022 09:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211326
IP address blocks: 185.134.82.0/24 maxlen: 24
185.134.82.0/23 maxlen: 23
185.134.80.0/22 maxlen: 22
185.134.81.0/24 maxlen: 24
185.134.83.0/24 maxlen: 24
185.134.80.0/23 maxlen: 23
185.134.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226524679 (0xd807e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Jan 1 09:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eff094695fba95a55b76521267f4fd8e9b422079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:03:96:59:41:88:42:c8:97:4a:8b:69:f0:
35:52:2e:16:29:c4:5b:ef:1a:21:13:25:d9:da:da:
bf:48:d8:d2:16:20:22:6f:4b:61:ec:ff:a1:f2:47:
0f:f7:11:6b:93:c7:90:ed:dd:41:81:58:57:c4:c1:
6e:ed:7c:43:47:db:3b:df:75:19:23:d7:21:ab:89:
b9:27:43:67:0c:ed:30:74:f9:36:9e:91:95:88:cd:
5a:bf:9c:78:6d:14:f8:ae:64:9b:39:47:ec:8a:cb:
af:6a:5b:13:f0:78:b9:31:ae:d6:b6:65:78:a9:58:
75:f8:40:c4:c7:d4:03:fc:86:92:e7:fc:93:fa:ce:
28:ed:45:39:8c:c2:44:dc:d3:9d:74:f7:8c:0a:bd:
09:37:57:a0:c8:f7:5a:21:15:a7:dd:62:ec:1c:dd:
81:d6:92:0f:94:0d:d7:57:8d:8a:92:63:22:b6:9d:
e1:cc:be:b0:52:ba:45:23:49:9b:1b:39:98:87:4b:
e1:5a:2c:89:bf:53:64:47:0e:a3:b5:6c:4d:e2:6e:
b4:67:05:1d:2c:44:15:11:5a:75:0b:7a:aa:d8:d7:
ad:b2:ec:7b:3a:ad:3b:c1:34:55:15:52:6f:2c:27:
df:74:b5:af:dc:1b:5c:94:f0:5c:32:02:48:c9:c2:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F0:94:69:5F:BA:95:A5:5B:76:52:12:67:F4:FD:8E:9B:42:20:79
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/7_CUaV-6laVbdlISZ_T9jptCIHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.80.0/22
Signature Algorithm: sha256WithRSAEncryption
87:87:2e:c4:de:87:22:22:c2:4e:2d:ae:0a:d3:4e:e7:ff:a3:
ff:5f:92:bd:c5:ab:95:b6:35:f7:c0:83:2e:63:bd:3d:05:e7:
2d:ef:ed:e7:1c:ad:65:64:3b:48:23:dd:a1:af:fd:db:9b:6b:
1c:10:c1:ca:3c:ac:83:3c:85:3d:12:5e:98:ed:41:74:4a:88:
b9:95:c1:43:7d:bc:5d:ad:fe:2c:0a:10:f4:66:11:68:cc:34:
3d:fc:fb:df:b3:f3:af:a5:3a:75:15:6a:13:ee:05:14:e1:54:
98:54:b9:02:55:2f:97:db:f2:65:23:c9:f9:92:92:fd:bb:1b:
60:94:e8:66:4e:ab:2e:36:4c:49:8c:a3:16:b6:7e:1a:68:0f:
61:5a:75:7b:78:46:94:04:f0:24:42:d6:a7:28:af:61:b4:fd:
b9:df:ee:e5:4c:02:5c:ae:80:85:e7:77:c0:42:fc:e6:20:a3:
0c:37:5b:e8:61:fb:01:ce:61:9e:89:01:e9:2d:10:f9:fb:bf:
10:bb:6a:e1:51:59:6b:dc:bb:e6:d1:b4:e4:b5:4a:7e:d5:97:
8f:d5:37:40:bb:6c:ca:5d:e7:4f:76:73:e2:62:1a:8a:ba:ba:
62:d5:73:53:7b:50:b9:fc:68:75:11:06:09:f9:7c:af:0c:c0:
83:f9:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:08 2024 by rpki-client on console-ams.rpki-client.org