Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/1-etgHoxRqtcbH-7g1JTOTqE0MfA.roa
File: 1-etgHoxRqtcbH-7g1JTOTqE0MfA.roa (raw, json)
Hash identifier: /GRQZ6lHUA0S/mHW6u+CQ9OVeYmN3DLP+sxqmbqIb6k=
Subject key identifier: F9:EB:60:1E:8C:51:AA:D7:1B:1F:EE:E0:D4:94:CE:4E:A1:34:31:F0
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 117A730C
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/1-etgHoxRqtcbH-7g1JTOTqE0MfA.roa
Signing time: Tue 21 Jun 2022 23:43:44 +0000
ROA not before: Tue 21 Jun 2022 23:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204007
IP address blocks: 185.185.216.0/24 maxlen: 24
185.185.219.0/24 maxlen: 24
185.185.218.0/24 maxlen: 24
185.185.217.0/24 maxlen: 24
2a0b:6580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293237516 (0x117a730c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jun 21 23:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9eb601e8c51aad71b1feee0d494ce4ea13431f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:7b:6e:0b:57:c0:7d:28:50:ae:a8:ba:be:
5e:88:00:b5:40:ab:cb:5a:cf:43:f5:90:28:4f:48:
b5:37:94:9f:29:fc:b7:f9:3d:c3:6f:d1:08:22:3e:
34:a9:49:70:23:fa:a9:8e:23:c3:ba:dc:5c:ac:74:
b9:d9:f5:97:58:a1:8e:93:e9:ee:33:ed:d4:f3:a5:
48:28:d1:92:e2:1b:2e:2c:92:28:50:2e:74:81:3a:
57:2b:39:d7:77:ba:53:84:6b:b6:92:ec:75:c0:23:
b9:50:26:06:c5:cc:03:5a:ca:8c:97:51:ac:87:a7:
a7:ff:e7:43:b0:ba:74:c1:42:ae:15:b7:63:d9:61:
4a:7f:97:6f:53:8c:42:0c:65:bf:9b:a4:62:21:ae:
ff:aa:74:1c:d1:1e:56:71:ae:9e:69:dd:78:f5:a0:
84:2d:25:e4:c4:da:46:df:12:f7:85:ad:67:a1:8b:
85:6b:71:6c:b2:f8:25:f3:8c:1b:7a:19:12:c5:33:
a2:c0:1b:1e:85:f6:f3:95:7a:e6:b8:a8:25:9c:ae:
7b:e9:a0:fb:31:fb:81:5e:53:7d:88:f0:54:ee:ff:
f1:da:68:1a:ac:7a:9d:f8:a0:5c:d0:95:d2:88:8b:
1c:f5:20:40:8d:3c:f0:73:5c:d4:77:0e:5b:a8:57:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EB:60:1E:8C:51:AA:D7:1B:1F:EE:E0:D4:94:CE:4E:A1:34:31:F0
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/1-etgHoxRqtcbH-7g1JTOTqE0MfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.216.0/22
IPv6:
2a0b:6580::/29
Signature Algorithm: sha256WithRSAEncryption
b3:7d:af:b1:27:06:c3:a0:1d:fa:7f:ba:4a:96:51:9a:5e:67:
bd:04:9a:f8:29:2d:b5:a3:c1:2f:2b:6c:5b:9e:e4:3a:2c:fb:
07:71:ec:27:06:c6:6b:b2:62:9c:04:6f:5b:0a:71:d1:2e:35:
43:f6:bf:11:d0:1c:4a:3c:e1:bb:1b:41:bc:73:2b:f3:d7:76:
e6:00:b9:a9:61:51:f8:7e:1b:e5:0d:b1:d3:1e:5a:b1:11:75:
17:59:fb:b2:d5:1d:57:90:83:c4:4b:22:b9:cf:78:4e:86:3e:
90:9e:ea:36:af:37:97:76:c1:3d:a0:93:42:54:61:f7:59:53:
e8:d1:41:70:9a:3c:75:91:47:2c:01:5d:be:b2:bd:1d:2d:f2:
c5:23:09:61:9e:cf:3b:50:a2:f2:23:36:a0:54:d3:99:21:a2:
f9:07:ee:cf:1a:25:db:4b:9d:ce:5e:8e:82:02:93:12:df:70:
14:ac:0a:84:b3:4f:99:e5:c4:33:bb:09:f8:a7:b2:87:8d:54:
c7:a8:af:4a:4c:32:59:f8:7f:a3:15:ac:db:d4:c0:81:8c:86:
5e:2a:ca:a8:81:09:e3:7c:03:6a:68:53:96:73:9e:f7:00:2d:
14:31:69:82:36:54:6c:6c:8e:f2:65:bb:21:04:27:46:08:9c:
c0:38:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:47 2023 by rpki-client on console-ams.rpki-client.org