Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/yChDIYsfdlF4jcJx7PSp2g0SO-g.roa
File: yChDIYsfdlF4jcJx7PSp2g0SO-g.roa (raw, json)
Hash identifier: 0xMq4e4qfTQ4DFEjBtnZFGi1vc9fV6rLUip/DqKtbmE=
Subject key identifier: C8:28:43:21:8B:1F:76:51:78:8D:C2:71:EC:F4:A9:DA:0D:12:3B:E8
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 872504
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/yChDIYsfdlF4jcJx7PSp2g0SO-g.roa
Signing time: Wed 27 Apr 2022 13:25:08 +0000
ROA not before: Wed 27 Apr 2022 13:25:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.122.0/24 maxlen: 24
185.164.121.0/24 maxlen: 24
185.164.120.0/24 maxlen: 24
185.221.96.0/24 maxlen: 24
185.221.98.0/24 maxlen: 24
185.221.97.0/24 maxlen: 24
185.221.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8856836 (0x872504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Apr 27 13:25:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c82843218b1f7651788dc271ecf4a9da0d123be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:64:e1:93:a9:41:06:78:3a:66:94:49:49:
17:9e:72:07:64:90:4a:91:52:9b:b7:23:38:de:4d:
ae:ed:42:fb:5b:7b:6f:60:3e:9a:78:f8:a6:54:c9:
a4:40:f2:34:d4:96:4f:48:45:d7:69:a2:7b:1d:4e:
3a:0b:fb:50:7b:29:6c:1d:f6:52:fe:44:d7:6c:4a:
4f:87:73:fa:1a:25:26:f6:01:51:83:c8:95:c4:68:
ea:08:c2:e7:df:cf:ab:9c:3e:40:f9:14:b1:b3:4e:
5a:b6:d6:4e:a5:14:cb:0a:75:77:44:bd:0a:66:83:
94:fe:a7:a4:f7:44:a6:c4:50:ac:0d:75:4c:f4:57:
17:32:07:78:3c:f2:74:21:b4:e1:5e:09:04:cc:08:
2f:01:85:99:79:10:31:71:22:ef:d9:9f:c9:97:a9:
6a:a2:1e:c7:1c:46:8f:a4:6d:d1:01:4a:31:22:9d:
c0:ea:1a:65:1a:b6:58:ce:0d:97:35:b0:1e:d4:9c:
9c:80:47:6f:ee:38:e3:b6:64:1c:30:a7:5d:6b:2b:
11:0c:71:59:18:d7:74:5a:5e:6f:63:f1:e7:f6:10:
c0:32:41:43:d4:8d:bc:a5:93:7d:dd:99:2d:d3:55:
ad:a0:80:fd:e6:24:f5:9f:c3:a2:5a:57:aa:f3:19:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:43:21:8B:1F:76:51:78:8D:C2:71:EC:F4:A9:DA:0D:12:3B:E8
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/yChDIYsfdlF4jcJx7PSp2g0SO-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.120.0-185.164.122.255
185.221.96.0/22
Signature Algorithm: sha256WithRSAEncryption
24:e1:38:e5:1a:eb:a4:c9:e9:52:08:02:78:a6:34:e2:a7:5d:
c2:64:0b:f1:03:1f:76:6c:fc:0c:24:d1:74:6d:c2:24:e7:7a:
56:5b:64:10:ea:f9:cd:b1:29:a8:13:19:67:d7:fa:64:aa:03:
09:89:3c:6e:3d:6c:be:d7:b4:39:cd:b2:9b:93:8e:63:df:0a:
f7:0f:63:d7:0d:e7:e3:25:5b:3e:ab:d4:b0:eb:6c:f9:42:0e:
5c:25:62:5c:13:f9:73:93:0b:fb:e9:dc:e2:2d:20:75:67:0c:
11:d0:16:1c:e3:7d:4e:9c:85:40:af:12:24:8a:40:b5:3f:09:
fa:21:46:a0:a0:e2:ce:1b:5b:3d:f4:26:9b:0e:4e:8a:73:96:
ad:8f:e8:a4:be:a4:4f:40:68:db:1e:68:39:a3:74:83:a9:8d:
c6:b1:9e:db:f9:2d:ed:d0:1b:02:39:39:9d:84:3e:15:63:75:
db:91:e9:13:de:34:50:5b:be:e0:f5:51:c4:44:fa:5d:ce:c7:
5b:56:9d:7d:c3:ac:11:79:ce:70:09:ab:25:3c:55:b9:c8:16:
1d:a4:28:e7:d3:a9:fd:f3:02:b1:cf:86:47:93:11:4e:4b:2c:
48:4e:61:c1:ef:19:81:24:08:c6:d9:95:7f:5e:03:93:4f:60:
65:80:b8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org