Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/AxUNsBDTNPZn7-G9fGfwKQ1TFa4.roa
File: AxUNsBDTNPZn7-G9fGfwKQ1TFa4.roa (raw, json)
Hash identifier: NkGuxhF43gfufExUVnPDRl1qEYz+4mfDQiLnKxLEX98=
Subject key identifier: 03:15:0D:B0:10:D3:34:F6:67:EF:E1:BD:7C:67:F0:29:0D:53:15:AE
Certificate issuer: /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial: 32AA3950
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/AxUNsBDTNPZn7-G9fGfwKQ1TFa4.roa
Signing time: Sat 01 Jan 2022 02:56:23 +0000
ROA not before: Sat 01 Jan 2022 02:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208729
IP address blocks: 185.75.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850016592 (0x32aa3950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Validity
Not Before: Jan 1 02:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03150db010d334f667efe1bd7c67f0290d5315ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:c3:50:6c:e7:61:d7:a5:3d:e6:9a:5c:6c:
a6:46:d0:1e:f7:f8:4f:e0:b5:f3:e7:19:2d:81:89:
4a:a9:4d:0b:bd:fd:af:87:11:2a:ff:e0:6c:e9:f6:
72:42:94:fc:ab:d1:5c:dd:29:4d:ed:4d:32:5d:80:
70:69:f2:df:6d:5a:eb:ef:b0:c7:ba:6e:ab:e4:c5:
cf:5d:c6:92:21:72:3a:b0:12:04:0b:f2:18:c7:43:
12:bc:71:0d:1a:51:e7:33:24:e4:4f:3d:66:00:b4:
fc:04:2d:b9:21:f9:e5:af:6a:0e:1a:23:00:9c:27:
f1:96:26:98:ea:fd:93:06:de:e4:d7:23:32:0e:87:
51:b8:36:a6:11:32:77:ee:3d:90:b2:bd:ee:5d:48:
0c:9c:39:aa:e3:a1:03:92:64:7f:b0:d5:0d:8b:3c:
09:f2:93:84:52:cb:59:a8:cd:70:29:05:da:6c:ad:
a5:c8:0a:2c:24:b2:f4:a7:88:23:fb:ef:3f:4b:b4:
7c:f4:5a:02:fa:f0:ad:dd:20:13:30:1a:5b:d5:1a:
37:10:3f:fc:92:97:2d:0b:51:f5:f0:da:54:25:6a:
a2:2b:6f:cd:da:7f:bd:1d:11:f1:51:4d:f8:f4:e3:
a5:fd:6c:60:64:ca:66:03:07:16:80:88:9f:66:6a:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:0D:B0:10:D3:34:F6:67:EF:E1:BD:7C:67:F0:29:0D:53:15:AE
X509v3 Authority Key Identifier:
keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/AxUNsBDTNPZn7-G9fGfwKQ1TFa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.84.0/22
Signature Algorithm: sha256WithRSAEncryption
03:8d:26:a5:75:c3:d1:0f:9a:80:61:22:45:ff:db:45:c4:7a:
75:0d:de:6a:2c:ab:ce:78:a2:46:56:f1:77:b8:50:84:5d:32:
1a:5a:ff:29:93:f6:5f:a2:f8:90:69:66:0d:3d:0c:9c:05:5d:
05:40:33:b7:d9:9e:b8:f9:10:c6:1a:3c:f5:a2:4c:b5:0b:4d:
55:78:09:e5:4a:86:6f:cb:3f:cb:2b:cb:a1:91:1d:7c:9a:01:
d5:2e:11:eb:a8:a9:b8:fa:cc:16:21:80:5e:b4:86:ce:8b:a0:
c1:7a:c4:4b:68:9b:56:92:3b:34:c4:6f:f1:12:2e:e1:6a:d5:
ab:6b:06:8b:99:e7:3e:7b:e1:ac:9c:20:fc:87:6f:4e:f6:09:
9f:de:61:e8:e8:69:22:c6:f2:49:2b:f7:fd:4a:c2:df:d7:4d:
51:b0:89:e4:5e:27:09:a7:75:27:35:93:9c:a3:cb:c6:0c:fd:
a1:c7:e7:7c:eb:9f:20:d2:e5:0d:ee:26:5e:09:f9:a0:bb:2a:
08:8f:9d:99:fa:2f:b1:68:e7:0f:50:b2:f2:9f:16:ea:27:69:
2c:f1:41:6e:3e:6e:42:88:e4:2c:c9:4e:1d:46:fc:68:c4:ff:
f4:a5:a6:cc:9d:71:d8:d6:ce:1b:66:86:87:e2:bc:b6:e9:2e:
cd:c3:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:23 2024 by rpki-client on console-fra.rpki-client.org