Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/R7AqDDmySsX6CDJoDs24_BnYsUY.roa
File: R7AqDDmySsX6CDJoDs24_BnYsUY.roa (raw, json)
Hash identifier: r+Aq+8AtnEWuN8UFRp4x8twOSxJ/YbyqdB/hrqph2og=
Subject key identifier: 47:B0:2A:0C:39:B2:4A:C5:FA:08:32:68:0E:CD:B8:FC:19:D8:B1:46
Certificate issuer: /CN=5b00790bae3cd85a50e4f934388361763ebfbe5a
Certificate serial: 04D2FFF4
Authority key identifier: 5B:00:79:0B:AE:3C:D8:5A:50:E4:F9:34:38:83:61:76:3E:BF:BE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwB5C6482FpQ5Pk0OINhdj6_vlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/R7AqDDmySsX6CDJoDs24_BnYsUY.roa
Signing time: Sat 01 Jan 2022 06:03:13 +0000
ROA not before: Sat 01 Jan 2022 06:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 185.225.161.0/24 maxlen: 24
212.11.79.0/24 maxlen: 24
185.249.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80936948 (0x4d2fff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b00790bae3cd85a50e4f934388361763ebfbe5a
Validity
Not Before: Jan 1 06:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47b02a0c39b24ac5fa0832680ecdb8fc19d8b146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:8c:72:36:1a:7a:e2:f9:b3:6a:12:53:38:
86:db:ac:bb:7d:df:ab:e6:b6:8c:ae:1b:5d:8d:87:
42:c8:5e:93:82:93:c8:60:9b:0b:9d:c0:db:1c:9f:
fa:7f:fe:b2:36:a0:a9:6a:a9:dd:8c:b0:60:12:48:
c7:25:9e:f4:92:89:89:e9:b6:db:cb:0d:8b:f5:93:
36:d3:5c:76:ef:e6:e1:c2:4d:2c:72:1e:36:e6:d5:
43:e2:fd:d6:d7:c7:23:5d:10:0c:22:48:85:4e:7d:
df:2c:13:fd:8f:61:0e:8a:0b:dd:3d:2c:96:74:e9:
5a:b9:26:4c:7b:9b:c7:b7:a2:11:5c:48:0c:cd:c9:
1c:43:e9:96:bb:77:ca:d3:ca:02:61:bf:99:98:3d:
cd:d1:5a:34:5a:55:aa:17:1e:3d:4b:38:e5:e1:dd:
0a:39:25:8b:bf:b6:49:13:32:cf:d1:c2:2d:f7:df:
16:ca:80:1b:8e:9a:40:77:86:35:ed:a3:9a:c6:75:
b6:de:17:75:35:4e:fe:31:2f:59:e6:45:61:9b:09:
b2:c1:08:58:f6:d9:82:a0:2a:d4:f8:0d:66:63:55:
a3:6c:c1:74:ed:e8:e3:36:56:76:c9:bf:97:a9:7e:
2e:dc:e0:96:08:9a:3b:b4:f6:02:17:5a:80:76:6b:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:2A:0C:39:B2:4A:C5:FA:08:32:68:0E:CD:B8:FC:19:D8:B1:46
X509v3 Authority Key Identifier:
keyid:5B:00:79:0B:AE:3C:D8:5A:50:E4:F9:34:38:83:61:76:3E:BF:BE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwB5C6482FpQ5Pk0OINhdj6_vlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/R7AqDDmySsX6CDJoDs24_BnYsUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/WwB5C6482FpQ5Pk0OINhdj6_vlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.161.0/24
185.249.220.0/24
212.11.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0d:58:91:15:75:ab:e6:09:e6:20:fb:cb:ee:1c:08:89:09:
6d:43:cf:ac:ea:1b:bf:0e:ab:c5:16:72:8d:43:48:6d:25:c8:
01:61:90:98:65:73:5f:0a:36:91:b4:0a:c9:56:5f:b1:c8:cf:
e6:14:b0:15:2b:78:78:f9:2e:b8:e6:81:6c:b6:7c:fd:1d:f3:
8e:98:89:9f:db:ec:0f:21:17:b8:cc:16:4c:42:83:18:4c:5e:
96:e2:3b:e9:25:61:96:3f:45:fa:da:9d:14:51:70:c0:76:db:
2d:67:95:29:8a:b7:39:b8:9c:db:07:4e:d5:67:d1:4e:58:bc:
90:ec:b5:bc:09:47:7b:e8:9d:58:cd:82:7b:3e:f0:d3:69:b4:
39:a2:d8:d7:47:de:2e:81:ee:dd:5f:ae:a8:68:31:d6:6a:c8:
83:aa:af:f3:a4:ff:31:8e:47:ab:c2:79:5e:63:01:04:2a:32:
fe:32:11:e0:a1:4d:a2:62:b9:cf:0b:dd:ed:9d:84:8b:b5:d5:
d5:51:54:1b:51:36:d9:47:5b:fc:bb:f5:87:7a:26:5d:75:4a:
53:b0:1f:dc:d6:f1:c3:e3:32:08:ff:ea:e5:9f:d2:ab:41:3a:
7e:98:db:fe:ca:c5:31:5a:8b:d7:a8:ba:d7:b5:c2:aa:3d:da:
00:73:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:59 2023 by rpki-client on console-fra.rpki-client.org