Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/vKvJxd9vnn3npgj8IwPU-5VFjXY.roa
File: vKvJxd9vnn3npgj8IwPU-5VFjXY.roa (raw, json)
Hash identifier: yLUBkzATiH95vQrOo5Q6DQlIqhV9MKZTkYxYsm71WlE=
Subject key identifier: BC:AB:C9:C5:DF:6F:9E:7D:E7:A6:08:FC:23:03:D4:FB:95:45:8D:76
Certificate issuer: /CN=9c67ea34a011a4773871583ec3954e791d8c028d
Certificate serial: 0DD61A
Authority key identifier: 9C:67:EA:34:A0:11:A4:77:38:71:58:3E:C3:95:4E:79:1D:8C:02:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/vKvJxd9vnn3npgj8IwPU-5VFjXY.roa
Signing time: Tue 03 May 2022 07:42:21 +0000
ROA not before: Tue 03 May 2022 07:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205314
IP address blocks: 185.138.20.0/22 maxlen: 22
2a12:ddc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906778 (0xdd61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c67ea34a011a4773871583ec3954e791d8c028d
Validity
Not Before: May 3 07:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcabc9c5df6f9e7de7a608fc2303d4fb95458d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:78:5b:82:64:6b:e3:84:3d:83:e5:d8:00:
c6:c8:93:a4:2e:50:26:28:6c:8c:97:2d:0e:dc:98:
bc:74:44:e4:82:d5:84:ac:52:ff:30:aa:9a:e9:59:
01:dc:f8:82:d1:1b:c0:c5:54:e5:09:4e:f2:80:1f:
aa:2b:b4:67:a0:cb:f8:8c:a0:0a:59:95:c6:f3:21:
27:a1:6a:db:0f:2f:24:c5:65:ae:33:97:70:29:b1:
9e:b1:1b:56:fc:1b:58:40:4b:e4:ae:77:8e:40:99:
ae:d7:c3:70:45:f7:48:3f:65:1d:30:43:55:a6:5b:
91:13:23:9f:18:9f:19:66:a9:ae:4b:38:b8:8d:a1:
76:8a:66:dc:ec:c6:f3:a4:4d:0e:3f:e8:a5:ee:6d:
b0:36:58:7c:11:8c:3e:cf:66:c7:13:b2:f4:8b:81:
fa:c6:e5:99:7f:c4:2f:25:a9:6c:28:34:33:3b:a0:
da:2e:03:3c:0b:6c:7f:82:8d:be:7b:c4:ee:a0:01:
40:c7:3f:e6:0c:95:d7:68:1b:e5:f8:b8:66:7b:0c:
bf:92:20:cc:ff:8d:1e:2e:ec:bb:2e:ef:b2:ea:20:
61:e7:07:30:2f:e0:d5:47:c8:0b:9f:72:35:1f:4a:
0d:86:c7:53:01:15:ca:13:76:2e:86:1a:91:fe:ab:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:C9:C5:DF:6F:9E:7D:E7:A6:08:FC:23:03:D4:FB:95:45:8D:76
X509v3 Authority Key Identifier:
keyid:9C:67:EA:34:A0:11:A4:77:38:71:58:3E:C3:95:4E:79:1D:8C:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/vKvJxd9vnn3npgj8IwPU-5VFjXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.20.0/22
IPv6:
2a12:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:a7:36:4e:45:5b:f2:3b:0e:b8:80:24:74:e0:f6:bd:52:2c:
9c:86:9a:97:f0:e1:35:66:bc:f7:6d:ab:00:df:45:70:47:fb:
86:02:1e:94:97:c9:75:fb:0a:e1:ce:3e:c1:67:eb:2f:10:65:
97:38:98:7c:b9:6a:35:a7:07:04:31:63:06:7a:ec:be:0a:34:
f4:cb:84:8c:a7:66:5d:57:1a:d6:45:97:47:8c:b3:0e:d2:f6:
b3:fe:31:dc:a4:5c:36:2a:76:54:fc:9a:d8:b8:20:af:4b:27:
7b:27:4c:6d:87:d0:ac:63:02:31:3f:74:f7:fa:b4:53:bc:b3:
2d:36:91:63:ed:8f:3d:6c:bf:3b:65:b2:bc:aa:35:ca:b5:e5:
1e:82:78:d2:af:ff:e6:b9:91:18:3c:44:3b:c6:ff:ad:cb:5c:
b6:8c:38:bb:cb:03:5b:b3:de:e5:46:53:45:4a:1a:f4:82:63:
a2:49:3a:29:56:f5:76:ec:00:ce:b0:4b:29:12:8e:e8:10:d3:
69:c7:6f:0e:83:13:4d:4a:f6:6c:8f:9e:2e:a1:54:f5:3e:c2:
73:24:36:87:e4:af:e7:f2:6c:73:0e:32:92:62:c1:04:ba:f1:
88:ec:22:53:f7:7f:f5:f6:e3:5b:5c:3b:47:d6:d0:12:23:93:
80:da:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org