Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/0yNS1XeQVEhqsCslDEYxpW0oRv8.roa
File: 0yNS1XeQVEhqsCslDEYxpW0oRv8.roa (raw, json)
Hash identifier: 352ToPM1JrxUZa4p1J+gcq8cV+fltcsQMaF1G/22ETY=
Subject key identifier: D3:23:52:D5:77:90:54:48:6A:B0:2B:25:0C:46:31:A5:6D:28:46:FF
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 0A83764A
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/0yNS1XeQVEhqsCslDEYxpW0oRv8.roa
Signing time: Sat 01 Jan 2022 14:55:53 +0000
ROA not before: Sat 01 Jan 2022 14:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208374
IP address blocks: 185.215.69.0/24 maxlen: 24
185.215.68.0/24 maxlen: 24
2a0b:880:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176387658 (0xa83764a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Jan 1 14:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d32352d5779054486ab02b250c4631a56d2846ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:13:b7:42:74:a0:a4:16:39:c1:3a:1a:5d:
2f:e8:9f:8c:02:aa:97:ca:c7:51:55:78:c9:a1:a1:
84:cb:70:13:90:b3:bb:b6:a0:e6:21:ed:ac:71:4a:
ae:9d:43:a8:78:79:79:a4:7e:7d:93:26:71:18:96:
9e:53:46:61:cd:71:fb:50:c2:bc:71:6d:b4:ea:98:
78:00:99:33:ea:e6:dc:84:cf:e4:e9:ce:36:c6:f2:
45:d0:d2:6c:90:d6:07:c9:41:87:eb:81:c3:77:a2:
f1:a5:c8:2a:49:f3:5e:29:97:1d:97:46:c5:c5:69:
78:c9:0f:c5:51:cd:42:a7:30:cf:6f:46:3a:99:19:
bc:42:93:c2:d2:54:50:71:8c:fd:23:be:aa:2a:7b:
5a:43:d2:e5:fb:f2:77:c1:3f:e8:d4:a8:b8:14:ae:
79:be:43:c3:e9:15:3b:e4:1c:a7:35:48:41:af:4b:
62:17:b4:f4:fd:0b:1a:ae:f2:53:ea:00:40:d6:f7:
a0:81:32:47:c1:50:35:83:a4:97:09:d4:db:c2:08:
c7:ea:a5:68:6e:46:0c:9e:0c:61:e5:63:a8:be:1d:
29:5a:09:dc:f3:25:0e:ed:98:84:58:0e:2a:be:45:
5f:62:5f:9c:8f:96:0a:ae:25:ee:9e:ae:05:67:b5:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:23:52:D5:77:90:54:48:6A:B0:2B:25:0C:46:31:A5:6D:28:46:FF
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/0yNS1XeQVEhqsCslDEYxpW0oRv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.68.0/23
IPv6:
2a0b:880:f000::/36
Signature Algorithm: sha256WithRSAEncryption
be:6c:7c:22:be:4b:e4:90:91:ca:fa:b1:f6:ff:dc:66:29:60:
bc:96:77:72:40:e5:bc:2d:37:8d:12:f4:45:ad:25:73:98:2d:
60:48:af:c2:9b:99:c6:7e:d5:e2:b7:21:e4:d9:b4:4c:b2:84:
0e:23:3b:02:50:77:bd:4d:84:45:01:5e:c6:2f:02:8c:d6:8c:
cd:08:92:78:89:87:a0:d7:99:d4:5d:98:d6:15:5a:70:6b:ae:
47:88:35:89:da:20:e0:fe:14:ff:a1:46:3d:d6:c6:5d:b8:e6:
30:d7:69:c0:1c:d4:2e:18:1a:e8:0d:ff:a3:6d:a9:cb:72:00:
13:b8:0b:ca:2c:48:0d:e5:65:5d:35:db:c3:80:cb:aa:33:8e:
b7:55:a3:4c:fd:21:4a:da:e3:ae:e8:1c:5b:de:4a:8d:9d:7d:
77:2b:2e:aa:35:44:b4:0e:f0:ce:55:7d:82:ff:03:05:60:f3:
4d:7a:2b:da:68:64:44:49:64:f6:09:1d:07:bf:85:a0:37:1d:
29:6c:31:3a:10:7e:ca:36:23:1b:91:1f:1b:26:49:8a:7c:97:
aa:61:33:d6:30:cd:6a:c4:08:e4:d6:f4:50:90:38:e4:c6:1c:
8c:03:5e:bd:27:8a:56:00:40:d1:c2:20:33:59:6b:30:6e:d2:
51:37:d5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:40 2024 by rpki-client on console-ams.rpki-client.org