Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/SycnDPKilBJxaaYhd_o1JH0F1lo.roa
File: SycnDPKilBJxaaYhd_o1JH0F1lo.roa (raw, json)
Hash identifier: JC9EYVtSEgw43IlcPknCTwuuwZjny2XddUpfR0ICmq0=
Subject key identifier: 4B:27:27:0C:F2:A2:94:12:71:69:A6:21:77:FA:35:24:7D:05:D6:5A
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 11569B7B
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/SycnDPKilBJxaaYhd_o1JH0F1lo.roa
Signing time: Sat 01 Jan 2022 08:02:05 +0000
ROA not before: Sat 01 Jan 2022 08:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42205
IP address blocks: 185.214.28.0/22 maxlen: 22
185.202.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290888571 (0x11569b7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Jan 1 08:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b27270cf2a294127169a62177fa35247d05d65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:bd:71:51:ee:65:0c:23:96:87:44:7e:44:
77:7a:70:04:09:2d:1a:b0:25:b6:71:5d:2b:a1:ec:
4d:0e:25:8f:a1:36:ad:2c:f1:3a:1b:61:25:80:a8:
6f:cf:68:80:af:88:bd:f6:29:ee:a9:1e:1e:04:3f:
b6:0d:d1:dd:ad:4d:13:31:3c:e6:17:f6:71:e3:68:
a2:fe:5d:52:fb:36:f4:5e:ff:15:b5:2c:2e:5f:ad:
e7:8f:ab:c0:c7:82:02:88:0f:5f:5b:20:5a:65:57:
94:dc:73:a5:d0:41:9c:b1:f2:24:73:73:3e:45:b7:
15:f4:75:2f:b0:0c:64:93:61:e3:9c:e6:c8:9d:bb:
ef:5a:36:3d:91:be:65:58:42:54:b7:cf:ff:3f:7d:
38:bd:25:f1:89:84:e8:26:8a:ad:d8:79:d2:80:a7:
07:48:64:f5:16:b1:69:e6:47:b3:78:91:f9:8c:1c:
3d:a4:b7:83:cf:56:a6:9c:e9:4a:cd:4b:7d:de:3f:
82:50:e7:6c:75:18:02:d0:d4:58:db:d3:98:7f:3b:
31:94:90:65:60:e2:91:85:44:f6:c9:e4:8e:d1:94:
07:fe:f2:1d:3a:f0:7c:9e:e1:ef:ae:65:b6:2e:fb:
fc:ca:81:60:1c:61:19:39:ba:78:a5:cf:35:a3:c6:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:27:0C:F2:A2:94:12:71:69:A6:21:77:FA:35:24:7D:05:D6:5A
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/SycnDPKilBJxaaYhd_o1JH0F1lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.136.0/22
185.214.28.0/22
Signature Algorithm: sha256WithRSAEncryption
34:af:6c:31:99:15:87:4b:a2:d8:12:76:59:2e:af:35:66:79:
23:6c:1a:f1:21:79:cf:49:08:58:5b:ae:91:0d:0d:42:b4:87:
26:db:48:ef:e7:6b:35:3c:99:64:89:06:ba:52:94:3a:35:48:
38:29:40:84:99:e6:61:de:d5:2a:1d:fd:d2:f5:1c:d4:db:19:
b5:5f:64:8e:c1:a4:76:d2:d0:24:4c:d7:b5:af:00:21:26:72:
56:da:be:29:03:48:d3:a1:a4:c8:ff:d1:30:29:9a:5d:81:26:
22:65:44:7a:70:cd:af:2f:11:76:43:50:31:07:cd:80:cf:f7:
94:46:83:f7:c5:4a:be:19:a9:ff:6d:fe:68:b1:95:a6:12:f7:
a7:61:5c:ba:36:2b:62:9a:eb:6e:ab:98:ee:6f:24:45:be:17:
34:bf:4e:1b:35:4e:e0:17:f7:41:1a:42:f2:10:d6:6f:2a:6a:
f6:42:a9:2c:2c:3d:87:a2:03:20:83:c9:78:0d:80:6a:24:b6:
6e:98:ce:d1:1c:0a:db:fa:3b:41:40:5a:ad:8e:b0:bb:9d:e1:
ed:f4:02:5c:70:ef:c4:9f:dc:17:b4:8e:4d:c3:4e:95:0f:db:
9c:33:6c:82:87:b2:26:9e:b1:9c:a7:41:be:89:b9:8e:ea:50:
73:6d:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:46 2023 by rpki-client on console-ams.rpki-client.org