Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/pOdGso6zyFXI-ZKtlSicn95ikaM.roa
File: pOdGso6zyFXI-ZKtlSicn95ikaM.roa (raw, json)
Hash identifier: OZtukQjnKlHvBw2bqcFXkOrQFR6QIuZxZ+vPTphbo+s=
Subject key identifier: A4:E7:46:B2:8E:B3:C8:55:C8:F9:92:AD:95:28:9C:9F:DE:62:91:A3
Certificate issuer: /CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Certificate serial: 0CE4E17B
Authority key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/pOdGso6zyFXI-ZKtlSicn95ikaM.roa
Signing time: Sat 01 Jan 2022 15:55:45 +0000
ROA not before: Sat 01 Jan 2022 15:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205174
IP address blocks: 185.217.222.0/24 maxlen: 24
185.217.220.0/22 maxlen: 22
2a0c:e200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216326523 (0xce4e17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Validity
Not Before: Jan 1 15:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4e746b28eb3c855c8f992ad95289c9fde6291a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:b0:7c:e9:09:2c:5b:41:d0:0b:25:a6:1e:
b7:14:5b:25:70:fc:a7:2e:4e:52:97:39:2b:61:eb:
c8:2a:ed:ed:a7:46:56:e4:05:02:25:67:9d:cb:ba:
0a:b7:5e:04:50:ac:88:79:fb:33:7a:a8:9d:a2:04:
4e:e4:0b:b1:79:95:78:9f:fa:c1:88:33:d0:a1:09:
59:70:c4:32:3a:55:35:68:d8:f5:bc:ae:cd:ee:fe:
16:26:8c:28:13:99:92:8d:89:ff:01:49:51:07:fd:
c3:76:46:07:84:2e:7e:6c:b6:59:23:7b:ec:6c:f9:
bd:0b:10:7a:24:5e:d7:c6:ce:ca:48:88:ba:58:bc:
4c:9a:a9:8a:04:9f:07:8a:1b:69:55:34:3e:d4:7e:
5b:3c:b6:ae:1a:75:ef:bc:e6:a7:db:8e:a1:90:05:
13:ac:cc:d9:1c:10:50:4c:15:4d:f2:01:05:ce:ef:
8d:9e:b0:db:fb:56:69:08:ea:d5:03:19:af:a1:ff:
df:94:e8:07:03:5a:92:ac:c7:3e:ea:31:96:64:82:
50:42:23:45:27:f3:a9:ea:28:09:79:d9:e3:29:de:
13:a5:9a:7c:22:62:1b:4d:70:53:2f:f2:28:79:c5:
c3:be:49:c2:16:6b:70:00:24:c5:1e:ad:29:bd:27:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:46:B2:8E:B3:C8:55:C8:F9:92:AD:95:28:9C:9F:DE:62:91:A3
X509v3 Authority Key Identifier:
keyid:4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/pOdGso6zyFXI-ZKtlSicn95ikaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.220.0/22
IPv6:
2a0c:e200::/29
Signature Algorithm: sha256WithRSAEncryption
59:ef:85:f9:3c:16:e1:85:27:22:39:95:32:81:9d:e0:99:0f:
3c:95:c0:ef:5a:32:09:f7:9f:42:6b:e7:10:f9:e2:48:6a:a8:
e8:4e:99:e7:3d:b8:f5:5c:7a:36:bb:38:db:57:ac:cb:70:e4:
ff:93:72:75:27:93:20:2b:fe:18:5b:23:8c:cb:91:1a:5a:72:
f3:e5:be:d1:1e:1d:ab:f8:93:25:99:6f:e8:f1:01:0b:17:0c:
47:61:32:42:3a:06:c8:dc:f8:fe:64:65:09:fb:4b:e2:60:e2:
68:ac:49:40:02:f4:fe:39:c6:8b:cf:b8:46:b3:82:2d:84:3d:
d8:b9:c8:07:52:6b:9a:0f:ed:72:e2:04:0e:f4:51:dd:da:e3:
21:a2:fc:17:e6:64:22:fa:c6:fa:20:2e:fd:6c:96:76:59:1e:
33:90:90:78:f3:3c:f1:23:25:5f:07:b2:ba:62:12:d6:ca:c6:
ae:28:5f:1b:4d:a9:05:df:80:07:ce:f6:7b:45:d0:29:25:a3:
0b:e9:d1:4e:39:ec:21:c8:67:ae:4f:55:76:c5:76:e3:d6:63:
f3:71:02:24:74:fe:7b:ff:52:82:da:35:b0:ef:80:8f:8f:c8:
c7:2f:98:0a:f3:f3:4d:4e:ff:ef:97:5d:c5:4e:41:8d:2b:09:
77:14:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-fra.rpki-client.org