Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/v-ecpPoUKIlLAbmNGYPUdhlbhlM.roa
File: v-ecpPoUKIlLAbmNGYPUdhlbhlM.roa (raw, json)
Hash identifier: mYVDs0ATqSehU+ZACfaHUiAYD02gEZXGT0y7Urg1A9I=
Subject key identifier: BF:E7:9C:A4:FA:14:28:89:4B:01:B9:8D:19:83:D4:76:19:5B:86:53
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01850FA0C7B425C9716238E49565F737E5F9
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/v-ecpPoUKIlLAbmNGYPUdhlbhlM.roa
Signing time: Wed 14 Dec 2022 07:54:33 +0000
ROA not before: Wed 14 Dec 2022 07:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207724
IP address blocks: 185.239.0.0/24 maxlen: 24
5.159.49.0/24 maxlen: 24
5.159.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:a0:c7:b4:25:c9:71:62:38:e4:95:65:f7:37:e5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 14 07:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe79ca4fa1428894b01b98d1983d476195b8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:48:0d:44:36:e0:e2:8e:a6:79:50:01:5e:
2b:e8:c7:45:bd:c3:10:58:70:a2:fa:e1:cf:62:56:
29:ea:e0:60:81:03:12:46:27:76:a5:39:62:18:dc:
85:aa:d8:1f:a5:40:81:56:da:3d:18:cb:5e:75:f8:
96:5d:0a:35:18:42:2a:9d:2b:7f:e7:6e:7f:3f:57:
47:a4:89:2e:11:e6:80:56:4e:a2:70:81:a3:99:d5:
85:24:fb:0a:36:3b:a6:08:61:a9:02:ee:d3:cf:79:
1a:7f:eb:a5:05:46:e6:52:0b:5b:ea:91:4c:98:4d:
07:16:96:ef:e1:f1:70:a9:66:d7:0d:d2:1b:c6:c1:
e4:79:7e:6d:47:bc:e8:59:66:53:93:9b:80:5e:9f:
36:5d:1f:08:ce:39:3b:35:61:55:43:54:2e:f6:d0:
8f:4a:d5:4a:e0:6f:a4:4f:78:b4:f2:6b:4f:4c:b0:
c8:12:77:54:cf:0b:2d:ca:d3:df:9f:b5:91:01:a3:
57:bf:ad:93:c8:0b:b6:d2:19:86:f8:aa:9b:fe:b8:
32:86:4f:a7:6d:88:55:31:49:4b:f6:fa:57:ee:b8:
6e:12:67:80:d2:3c:df:82:ad:c3:8c:69:98:da:c8:
ac:c8:22:50:b9:8c:28:e5:14:60:b3:a0:08:59:6f:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E7:9C:A4:FA:14:28:89:4B:01:B9:8D:19:83:D4:76:19:5B:86:53
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/v-ecpPoUKIlLAbmNGYPUdhlbhlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
5.159.54.0/24
185.239.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:56:5d:2f:35:80:c8:04:c3:96:2b:45:51:ee:32:b0:a3:7f:
d0:68:b9:b9:44:f4:09:bd:17:80:b9:8e:f5:e0:13:42:34:ef:
e3:a4:53:16:5c:bb:1f:75:1c:17:d3:73:d2:b2:58:6f:58:47:
ee:39:de:49:9c:7c:cb:64:43:2c:d4:f1:3d:01:68:68:74:a2:
a0:4f:22:63:39:62:bb:32:1e:8b:c9:dd:df:09:46:4c:ed:61:
63:8a:3c:57:93:62:4f:6d:da:00:94:da:96:ac:07:a8:d4:69:
ee:71:be:9d:6b:ce:0a:a1:94:55:aa:af:b6:62:0e:1f:db:3f:
4d:a2:ea:93:b6:e5:a9:9b:41:41:1d:3a:f2:51:c1:b9:8a:e3:
8a:cc:f0:0e:4d:57:47:a1:4c:d9:f6:47:14:59:dc:57:f5:90:
91:a6:a5:0a:9c:23:80:51:57:7f:bd:bb:d6:5b:fe:a2:a0:5c:
93:4e:89:63:5a:ff:23:6b:85:17:b8:30:24:0f:1f:f4:20:36:
e6:36:d3:50:c0:46:7a:9a:8f:54:c8:51:3e:7d:7d:02:50:f3:
cb:c8:0c:3e:34:24:f1:55:c1:16:a3:00:0d:71:70:79:77:b1:
d7:8d:61:c8:aa:b5:b7:28:76:59:cb:59:e5:9b:bd:b2:1e:34:
fc:90:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org