Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/rlnFdOHGVOJIqMfLgwOzEJtmDn0.roa
File: rlnFdOHGVOJIqMfLgwOzEJtmDn0.roa (raw, json)
Hash identifier: IcoGU+EKsaTbJNScnVoyRDDxyswuM9+HJw2EoZaZWqA=
Subject key identifier: AE:59:C5:74:E1:C6:54:E2:48:A8:C7:CB:83:03:B3:10:9B:66:0E:7D
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 0735BE61
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/rlnFdOHGVOJIqMfLgwOzEJtmDn0.roa
Signing time: Sat 01 Jan 2022 12:56:13 +0000
ROA not before: Sat 01 Jan 2022 12:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197033
IP address blocks: 185.149.216.0/22 maxlen: 22
185.232.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120962657 (0x735be61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Jan 1 12:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae59c574e1c654e248a8c7cb8303b3109b660e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:54:c2:99:f3:84:f6:04:71:4e:d8:ec:e5:
63:a3:d9:3b:3b:6b:f8:a3:dd:6e:0e:bf:a4:ee:6a:
fd:8a:7e:ee:80:f6:b8:0c:6e:e7:06:4b:c2:5e:28:
27:b1:7a:fa:6f:85:7a:99:0d:73:22:9e:41:1f:a8:
46:03:f9:90:04:08:48:43:1c:48:77:07:95:79:e7:
d6:9b:2a:ba:8b:33:12:02:fd:1a:32:91:fd:ad:35:
1d:c6:08:63:ce:41:a9:46:c4:e1:7c:bd:db:8e:66:
d9:24:c3:49:16:d5:46:fc:d9:32:5c:5b:e7:3f:fc:
3f:8a:b3:dd:0c:45:76:f6:0a:f0:3b:ad:d8:41:bc:
47:89:19:1e:fb:02:ea:dd:ba:e1:23:42:88:1c:92:
f1:23:85:e5:b1:14:5f:0c:21:52:b4:f5:df:3b:48:
a5:44:f5:5f:62:cb:07:00:49:69:4a:12:03:19:4e:
1a:97:9c:1e:ce:d6:ec:0c:4f:0f:e5:92:3b:de:de:
9c:44:3d:0a:df:a4:8c:72:9b:22:f5:5f:d6:7d:5e:
37:df:00:a0:81:7d:7b:9c:05:fd:68:d1:4c:be:c4:
d4:dc:cd:f2:6f:3e:3b:4f:89:ac:26:ea:d5:d8:ac:
38:0c:d7:94:73:55:4e:4b:f8:78:8c:de:12:04:f9:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:C5:74:E1:C6:54:E2:48:A8:C7:CB:83:03:B3:10:9B:66:0E:7D
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/rlnFdOHGVOJIqMfLgwOzEJtmDn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.216.0/22
185.232.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:e5:91:15:cc:88:8a:f3:d7:38:1a:88:fa:fa:42:4e:a3:b8:
e5:18:47:01:6f:56:71:fe:41:ba:4b:e0:05:7a:69:12:6d:46:
e0:08:3c:23:6e:65:4e:e9:9b:ad:c7:2c:82:77:24:dd:4b:9c:
00:74:cd:1b:e5:f1:50:f2:2a:8c:51:c5:d0:d9:7d:18:7e:0b:
35:b4:d1:12:2f:65:a3:fb:87:49:dd:2c:f6:ce:cc:83:e7:d1:
50:1f:31:18:4b:a0:87:bb:07:1e:6a:3d:c3:ba:9f:04:70:2f:
37:08:8b:39:6e:2f:3c:a9:22:74:b6:ad:e3:1d:06:c1:4f:d1:
7a:0b:02:f7:53:3c:f3:a9:c8:1a:68:9d:c4:d9:2f:fa:42:bb:
b7:c7:d5:37:e1:18:d0:a7:9f:b0:f7:27:a3:4e:41:45:31:c1:
1e:a4:d1:b0:7a:eb:92:46:ae:55:8a:4d:6e:89:28:cc:f0:18:
9b:b7:97:62:7c:c6:16:8d:cd:a2:1e:76:48:a5:2a:c6:24:d8:
43:ba:97:50:2d:85:0f:82:25:da:b5:73:b3:f9:d2:94:b4:be:
5a:44:a3:3c:4d:06:95:a3:d5:93:8c:e1:99:0e:a5:60:c2:09:
f5:a9:d0:82:0e:ef:1e:d7:20:fb:a6:e7:2c:26:26:fe:95:cd:
aa:f0:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org