Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/2SbdVovlm-GbZBkaSgCifAmRqDM.roa
File: 2SbdVovlm-GbZBkaSgCifAmRqDM.roa (raw, json)
Hash identifier: Iq87TkipGTSwNMAirK+2r8QC9gETtOmFhFSpDwK+4hY=
Subject key identifier: D9:26:DD:56:8B:E5:9B:E1:9B:64:19:1A:4A:00:A2:7C:09:91:A8:33
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 05D775DA
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/2SbdVovlm-GbZBkaSgCifAmRqDM.roa
Signing time: Sat 01 Jan 2022 01:59:13 +0000
ROA not before: Sat 01 Jan 2022 01:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34447
IP address blocks: 185.82.35.0/24 maxlen: 24
185.82.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98006490 (0x5d775da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jan 1 01:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d926dd568be59be19b64191a4a00a27c0991a833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:c0:d8:05:78:32:93:c4:c8:8c:fb:69:fa:
db:bd:45:ed:b1:5a:44:e6:b8:71:bf:f1:94:2f:80:
5f:29:f3:85:4d:8e:fc:eb:27:bd:21:54:a8:7d:97:
dd:5c:db:16:03:41:ee:c3:6e:62:50:d1:10:10:a0:
10:d2:7e:7b:7b:37:34:82:ea:c1:fe:39:38:07:ac:
23:a9:bf:a1:b0:de:a3:94:2f:41:92:52:7d:d5:54:
c6:1e:78:d7:54:9d:0b:90:01:96:82:7e:3b:9e:f5:
1b:4f:ce:97:81:ed:c9:63:03:bd:ff:9c:46:ba:23:
d6:b9:f2:41:c7:7f:03:69:bb:8c:52:ff:1f:7e:66:
c7:41:00:be:90:88:d0:a3:5a:e6:bc:69:7a:25:a0:
f8:29:e5:fe:52:09:6b:a6:68:c8:11:12:3a:cc:0a:
60:f0:41:d4:fc:6e:e0:b0:93:b9:73:de:58:86:e1:
71:b7:4a:28:a6:a0:8e:01:91:a5:f1:1c:f0:99:3e:
c3:de:ea:7d:ba:16:79:c6:c2:15:07:2f:da:3f:a5:
4d:30:7f:ae:be:73:e9:87:f0:85:4e:6f:31:a8:74:
c2:46:dc:67:ac:e3:ce:cd:d0:72:4c:a9:d1:4a:d1:
2b:56:59:90:60:37:30:04:49:ca:8b:24:89:10:a1:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:DD:56:8B:E5:9B:E1:9B:64:19:1A:4A:00:A2:7C:09:91:A8:33
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/2SbdVovlm-GbZBkaSgCifAmRqDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.34.0/23
Signature Algorithm: sha256WithRSAEncryption
47:6a:c0:9c:e6:97:e4:f6:40:69:30:38:64:c1:93:8b:14:ff:
84:1e:45:4e:cf:9b:22:62:80:86:a7:f0:72:d1:1a:bb:8f:66:
ae:72:8b:94:0a:d1:f3:c9:7a:c6:21:96:ae:f3:6b:bd:ac:89:
32:92:13:fb:6b:0e:73:79:d7:f6:5c:ce:34:7f:b7:8e:5b:c1:
35:84:2d:2d:0a:39:29:80:2c:78:bf:d2:19:7b:b2:91:cf:64:
08:30:25:2c:cf:c6:ca:87:5f:b9:fc:83:7f:d6:6e:89:75:7c:
d2:80:fa:13:77:56:c7:ba:6d:e8:3a:c9:5a:6d:28:69:31:61:
60:b1:76:a0:be:7f:14:3f:08:74:69:a9:ed:80:62:4c:c1:67:
fe:7b:8d:02:b6:a2:cb:2d:bc:70:e6:9d:6f:7d:bf:7f:02:8e:
ea:32:48:22:64:4e:9e:0a:f9:50:63:09:4d:82:68:f7:b7:8b:
d1:9f:8d:80:df:fe:20:d8:c6:8a:2d:3a:eb:b6:ef:8e:a4:7a:
9d:85:19:e3:8c:3e:78:5e:15:85:19:16:61:6d:87:98:da:ad:
fc:22:07:b7:f1:42:30:81:3a:56:9b:f5:d4:03:8d:c6:f0:9b:
82:f9:f3:4d:f0:82:6b:74:86:fa:70:a5:d0:dc:cf:3f:87:d9:
c9:36:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:43 2024 by rpki-client on console-ams.rpki-client.org