Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Ezvw6O9i96wPbqPsVF3kyY1cHEA.roa
File: Ezvw6O9i96wPbqPsVF3kyY1cHEA.roa (raw, json)
Hash identifier: OQR/vcmFux0mZbclQXTEWB3x0x6gTaJtz70hKPW7Jf8=
Subject key identifier: 13:3B:F0:E8:EF:62:F7:AC:0F:6E:A3:EC:54:5D:E4:C9:8D:5C:1C:40
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 0184CF0A78ED533A28F6A9D02F018CC86308
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Ezvw6O9i96wPbqPsVF3kyY1cHEA.roa
Signing time: Thu 01 Dec 2022 18:54:40 +0000
ROA not before: Thu 01 Dec 2022 18:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.122.0/24 maxlen: 24
185.164.120.0/24 maxlen: 24
185.221.96.0/24 maxlen: 24
185.221.98.0/24 maxlen: 24
185.221.97.0/24 maxlen: 24
185.221.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:0a:78:ed:53:3a:28:f6:a9:d0:2f:01:8c:c8:63:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Dec 1 18:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=133bf0e8ef62f7ac0f6ea3ec545de4c98d5c1c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:61:dc:33:53:5d:0c:96:f2:19:f3:b8:6a:
05:5a:f9:d9:b0:cf:b0:54:82:cf:6f:89:be:d6:1b:
87:17:7e:97:cf:3c:6f:58:1a:3b:56:28:d7:4b:1d:
39:1c:6c:8d:48:33:31:8c:41:d5:94:1a:7e:f5:9c:
c8:76:a3:7e:12:55:89:0e:55:8c:b9:9e:24:ef:57:
a3:29:82:46:41:dd:9b:19:ab:f9:36:2d:48:d6:b6:
84:bc:b2:03:85:15:a4:a1:f1:84:04:33:1e:89:1b:
2b:0e:05:60:bb:0f:f2:a5:98:78:54:3c:0e:5d:86:
b2:fc:6e:74:e7:54:f6:f4:77:b4:44:8f:3e:b2:30:
a3:39:2f:d7:82:77:03:4f:72:06:fe:4d:93:92:91:
13:82:f8:e4:6d:f6:2c:51:bb:db:38:a4:be:58:05:
e8:a1:bb:31:f4:ad:c2:02:2f:f6:45:f9:b5:4a:8c:
56:d3:ea:2c:d3:d6:ed:24:a7:18:78:17:e7:28:b0:
2d:c1:c7:fe:4d:1a:83:40:37:c4:ee:35:09:9c:0a:
18:bb:bd:be:7d:11:33:74:93:d5:33:41:a2:c4:d8:
fd:a9:75:6c:c5:af:70:71:37:ae:02:12:e6:fe:82:
e5:0b:c9:70:41:44:89:f5:46:1f:52:16:1c:55:fe:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3B:F0:E8:EF:62:F7:AC:0F:6E:A3:EC:54:5D:E4:C9:8D:5C:1C:40
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Ezvw6O9i96wPbqPsVF3kyY1cHEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.120.0/24
185.164.122.0/24
185.221.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:3a:74:55:bd:72:ba:27:13:45:d2:70:b4:10:9f:78:56:d6:
41:65:95:18:bf:65:46:8a:48:a6:ba:db:8b:de:0c:b2:16:fa:
3b:4b:0e:f9:9c:0a:f6:26:8a:b6:61:78:c8:44:49:67:28:f7:
ea:7d:5e:9a:29:34:6c:9f:be:e8:6f:fe:40:49:67:d6:24:1e:
d9:4a:76:1e:26:49:c6:5d:e8:c9:97:f9:b7:b4:c0:b3:01:ee:
e0:69:64:bd:f7:2f:9f:a6:ad:78:88:2a:34:65:3c:45:57:51:
50:81:9d:fe:d5:2e:fa:32:8e:8d:b9:f4:50:54:49:c1:5c:73:
61:db:46:9f:67:10:0e:bf:96:3e:8f:6a:1f:09:d0:98:52:12:
0f:a6:2d:5a:40:7e:1e:c0:0b:b6:f8:d4:9f:52:2f:a5:3b:15:
cf:a4:85:dd:22:ee:a1:d0:52:08:7c:c0:c4:ab:db:d3:3d:1d:
49:e5:a8:48:29:c3:d4:30:72:29:5c:50:e3:79:1c:07:ce:69:
f9:f8:df:f1:c3:bb:9d:40:ac:00:49:f1:32:00:66:8f:21:46:
e9:92:76:4c:4e:7b:bc:0b:31:54:62:2e:a4:db:23:ca:00:01:
28:25:9f:72:49:dd:69:86:91:09:9c:11:c0:d7:f4:4a:19:f2:
fa:25:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org