Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/1-YLyrTRVXffRl6XuZ62varZs4is.roa
File: 1-YLyrTRVXffRl6XuZ62varZs4is.roa (raw, json)
Hash identifier: wDlkK5CkpDBiCwc5zJcjScOQI6miDZuMl/5Kv+GXuDY=
Subject key identifier: F9:82:F2:AD:34:55:5D:F7:D1:97:A5:EE:67:AD:AF:6A:B6:6C:E2:2B
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 0A0A0D2D
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/1-YLyrTRVXffRl6XuZ62varZs4is.roa
Signing time: Sat 01 Jan 2022 11:54:12 +0000
ROA not before: Sat 01 Jan 2022 11:54:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16019
IP address blocks: 185.241.220.0/22 maxlen: 32
2a0c:b180::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168430893 (0xa0a0d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jan 1 11:54:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f982f2ad34555df7d197a5ee67adaf6ab66ce22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:45:97:1e:3d:f2:58:50:07:f8:4a:9d:18:3b:
11:74:11:8c:69:22:c7:00:cc:be:c6:ba:d5:47:b3:
f8:28:d6:b8:47:e5:45:56:9b:fa:16:c2:d3:23:fa:
83:05:5d:01:75:1d:f5:c3:57:0a:74:68:b2:41:50:
f1:56:a3:b0:ea:aa:ab:1d:cc:88:f3:e1:39:77:12:
26:b1:45:75:3e:4b:53:46:e2:62:74:b1:e1:5f:85:
f2:ff:ff:4f:da:10:b7:05:84:8e:44:a2:5a:3f:95:
f4:be:81:87:9b:7b:94:12:15:87:2f:86:73:15:87:
4b:24:8c:4d:07:d9:df:e3:11:1d:ac:44:2f:66:94:
c3:e6:d3:10:3d:af:e2:9e:c6:6f:62:e1:d8:c5:df:
6a:a8:56:30:60:0f:d6:33:48:49:aa:f3:c7:07:56:
81:12:49:04:d0:12:1f:37:2d:e3:97:90:85:e7:1a:
cf:d3:08:bf:07:47:96:f6:23:eb:6b:21:38:ff:c0:
35:df:ba:41:f8:dc:cc:68:23:7a:7f:cb:e7:12:cb:
e1:b5:66:7b:d6:ad:26:b9:59:14:76:c2:05:1f:12:
68:0b:26:6b:c4:de:4b:e2:0a:83:d3:c6:89:2a:11:
22:fe:8c:a5:1a:c3:88:2b:f8:6a:5b:76:2d:ba:4b:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:82:F2:AD:34:55:5D:F7:D1:97:A5:EE:67:AD:AF:6A:B6:6C:E2:2B
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/1-YLyrTRVXffRl6XuZ62varZs4is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.220.0/22
IPv6:
2a0c:b180::/29
Signature Algorithm: sha256WithRSAEncryption
92:31:0a:b8:75:3f:10:e8:ff:89:6d:5c:b1:01:06:58:c8:46:
43:f2:a1:91:44:a3:70:f7:92:e8:6e:c9:d4:15:3d:65:64:8d:
1b:62:c4:c8:1b:10:33:da:a4:ee:bd:48:90:45:16:b7:73:2f:
ad:fa:77:b1:9f:36:29:fb:14:da:7c:55:8b:ef:7e:8e:29:85:
3e:b5:0e:bc:70:e7:40:94:f4:a5:75:7c:30:da:ea:92:2d:3a:
f0:a8:80:d6:33:3b:23:27:f0:31:84:94:9e:34:22:c1:80:5b:
8a:38:c1:f7:17:47:6a:6c:eb:3e:e0:dc:86:a3:79:f6:c3:81:
02:34:95:97:ad:9e:95:d2:33:0a:ed:31:29:4b:28:59:03:1f:
4c:2f:21:c3:ad:7b:2f:16:40:8d:02:be:10:13:46:7c:d2:0f:
76:85:69:bc:f9:67:55:1c:d3:97:f2:cd:ef:2b:0d:88:d5:47:
ef:a8:0d:33:ce:f6:e7:20:b8:46:b4:4e:2a:22:51:61:78:0e:
96:45:20:45:2a:30:c9:fd:94:fb:69:84:b2:96:10:a6:72:aa:
00:8c:ba:20:d5:b2:ad:e0:73:0d:fc:23:e5:4e:99:3e:d6:1c:
12:5e:d2:9c:39:90:fc:a6:18:2b:46:0b:7e:13:c0:82:a6:03:
e7:3d:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org