Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/2zEYDolOuPPJ-OmFv5QPehd7p5M.roa
File: 2zEYDolOuPPJ-OmFv5QPehd7p5M.roa (raw, json)
Hash identifier: erP88c6gLktkyph8XYIB2oB172NIFIsKlGN0IVD/qMc=
Subject key identifier: DB:31:18:0E:89:4E:B8:F3:C9:F8:E9:85:BF:94:0F:7A:17:7B:A7:93
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01F16CA3
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/2zEYDolOuPPJ-OmFv5QPehd7p5M.roa
Signing time: Sat 01 Jan 2022 10:55:01 +0000
ROA not before: Sat 01 Jan 2022 10:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 185.161.150.0/24 maxlen: 24
185.161.151.0/24 maxlen: 24
185.238.177.0/24 maxlen: 24
185.238.179.0/24 maxlen: 24
185.180.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32599203 (0x1f16ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 1 10:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db31180e894eb8f3c9f8e985bf940f7a177ba793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:81:57:b8:5f:e5:01:25:f9:74:5b:30:35:
b1:9d:67:20:10:59:f7:37:48:83:3c:5e:f1:f9:23:
c7:cb:0f:af:10:47:95:66:fd:39:e5:92:f7:e9:1c:
14:8a:80:fd:ad:d0:58:47:0d:b8:7b:d8:a9:0b:b2:
2b:aa:5d:46:c0:dd:a2:38:82:73:81:a0:56:77:5f:
73:58:8f:bc:a0:5d:60:9b:6c:73:73:3f:20:e0:ac:
7b:47:17:23:f0:c0:25:b0:43:40:ef:6d:66:cd:56:
55:f4:d7:8a:6f:95:33:ab:7b:39:af:6b:2a:40:7e:
64:03:a1:b0:84:0d:6e:d7:0c:d4:e1:18:a2:36:4c:
96:0a:5d:3c:da:7c:19:be:9f:fc:1b:12:c9:c2:d5:
3e:7e:98:ff:c3:5a:2e:31:7d:f5:c3:d6:d4:e3:0b:
ca:03:d9:ca:25:24:d1:90:c4:18:c7:22:a4:f6:7f:
38:6d:3b:e4:34:70:32:90:09:d8:00:8b:45:03:43:
0a:5b:c5:7b:74:46:de:6c:10:32:f1:b9:db:0d:0f:
61:4a:d0:56:30:94:bd:63:4c:3e:17:31:be:2a:9c:
f9:d8:0b:0c:5a:c5:b2:e7:b5:84:84:26:d1:36:19:
f5:77:68:f0:f8:4e:5d:b6:5c:8c:2f:a5:5e:ec:ce:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:18:0E:89:4E:B8:F3:C9:F8:E9:85:BF:94:0F:7A:17:7B:A7:93
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/2zEYDolOuPPJ-OmFv5QPehd7p5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.150.0/23
185.180.193.0/24
185.238.177.0/24
185.238.179.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5a:e3:1d:8d:89:de:79:dd:fa:35:78:ea:3f:d4:ac:da:4e:
80:79:d6:93:f0:6e:65:d4:13:a0:9c:ea:8b:1a:43:36:4f:a9:
71:c6:e9:1c:a5:d0:e1:74:a2:f2:5e:31:37:a7:88:e9:7b:25:
1e:35:12:a9:ea:5b:91:03:6f:72:12:3b:86:80:69:bf:57:8c:
2c:bd:b2:bb:ff:64:d4:27:c5:93:c9:2c:cb:45:ab:0e:87:e2:
14:a7:9e:7a:eb:19:ca:41:06:e2:be:04:56:69:00:55:b5:5d:
4a:75:d8:37:c8:9b:34:72:f2:7f:e7:20:ac:a7:0f:03:d1:cc:
ad:41:2a:dc:a4:70:5e:39:61:f7:4f:1c:fc:e6:9d:33:4b:6d:
de:5c:d8:28:de:c0:ad:87:43:5c:6b:a4:46:39:d1:55:02:16:
7a:0e:96:1b:c4:c6:26:a0:8a:df:a4:67:1f:34:4d:3a:cc:71:
6b:fd:8a:04:ad:39:7f:27:6c:2a:2d:f8:7f:5f:02:93:b2:17:
9a:77:47:8a:cb:6d:31:dc:c1:e4:d4:43:3e:e2:c7:79:bf:3d:
86:28:64:dc:9a:90:fd:d1:54:10:34:1b:7a:be:f0:ff:9e:d5:
d0:8e:1a:5e:1a:45:33:f2:b7:a8:88:69:0f:fc:fe:de:f6:3f:
79:51:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org