Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/B2FHXpyscRT0qUUWVK4d4tveg7M.roa
File: B2FHXpyscRT0qUUWVK4d4tveg7M.roa (raw, json)
Hash identifier: Z3eMGdoTCguOzQMsP3UaXCjpbGNcUaJLh+KSS1zhAEw=
Subject key identifier: 07:61:47:5E:9C:AC:71:14:F4:A9:45:16:54:AE:1D:E2:DB:DE:83:B3
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0932EA5E
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/B2FHXpyscRT0qUUWVK4d4tveg7M.roa
Signing time: Sat 01 Jan 2022 10:05:21 +0000
ROA not before: Sat 01 Jan 2022 10:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201210
IP address blocks: 185.82.37.0/24 maxlen: 32
185.82.38.0/24 maxlen: 32
185.82.36.0/22 maxlen: 24
185.82.36.0/24 maxlen: 32
185.82.39.0/24 maxlen: 32
2a05:8cc0::/29 maxlen: 29
2001:4d70::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154331742 (0x932ea5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jan 1 10:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0761475e9cac7114f4a9451654ae1de2dbde83b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:04:4f:9b:8d:fd:a5:bf:22:2c:f1:73:66:
0e:84:54:9f:52:d0:63:57:b1:f3:4d:df:f9:fb:95:
98:cf:50:87:e1:c1:fa:79:04:39:b7:f3:56:86:f6:
7e:d8:a6:74:ce:1c:16:26:b4:ec:63:6e:ec:b8:e3:
e9:0b:d0:25:af:08:28:3f:2a:b3:53:60:61:20:f8:
f1:03:fb:51:12:0f:8a:b2:ed:18:38:73:ab:57:f6:
c1:92:70:6a:4a:6f:37:a0:64:8e:3a:64:03:52:4f:
c3:47:a2:2f:22:5b:36:fa:3d:35:f5:58:b7:12:04:
1a:dd:e8:a0:5d:ba:0a:69:c4:7a:0a:8b:8a:47:9b:
4b:83:db:c2:c4:00:59:d8:2f:34:e9:a9:fe:d5:d0:
14:fd:d5:3d:ea:db:49:f3:5f:a4:94:ac:27:b8:e0:
6b:1f:39:de:f8:c1:15:62:3f:e8:8b:b0:1f:8d:91:
05:82:dc:a5:9f:52:79:cc:97:71:8a:94:47:0e:cb:
50:ca:60:a3:f8:a9:9d:41:d3:d0:2b:22:85:c4:4e:
19:ed:6e:56:20:6f:00:be:d2:f4:14:c3:57:43:8f:
83:76:94:1b:f6:d1:2d:56:db:03:ed:ee:4d:a8:c1:
59:01:30:73:dd:ca:50:8d:32:ac:e2:54:ed:03:9c:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:47:5E:9C:AC:71:14:F4:A9:45:16:54:AE:1D:E2:DB:DE:83:B3
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/B2FHXpyscRT0qUUWVK4d4tveg7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.36.0/22
IPv6:
2001:4d70::/32
2a05:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
84:9a:67:2a:13:3b:9b:9f:d2:5a:a7:df:b9:2d:53:2a:64:30:
c1:c4:b7:5d:e8:4e:d2:2a:aa:a9:18:0e:2d:5e:76:24:1e:c3:
22:be:5b:3a:72:41:23:2d:4a:e2:86:ca:2c:b2:25:06:6e:6e:
09:3c:04:17:e7:65:08:c0:fc:59:4a:01:0e:18:b7:9b:2c:d4:
23:29:49:28:74:9d:89:83:b5:83:55:98:9e:60:f7:15:3a:83:
a1:db:2c:22:4d:09:2a:6c:88:cc:c8:e5:b9:2e:38:a4:5f:71:
ef:0a:e7:c9:ba:06:d7:34:60:35:2c:91:e7:e4:7d:c9:a4:ec:
43:dd:c8:7e:10:d2:6d:03:3f:12:c0:78:81:44:93:51:44:ef:
6f:57:24:11:c2:a7:ba:ef:29:6f:c1:c7:9b:e2:4e:40:3c:0f:
4c:db:5d:d4:44:af:41:b4:12:02:78:80:dd:97:2f:1b:43:a2:
65:ce:1f:03:52:5f:b9:82:4d:31:f8:a8:5c:c9:22:dd:0e:4c:
c8:3e:0a:27:81:2d:a3:1a:1d:26:b2:73:a2:6d:df:3f:ed:64:
34:82:fc:7d:04:e0:ab:de:ec:bd:4d:79:27:3a:33:14:67:1a:
04:7c:41:fb:7f:f2:15:09:fe:22:aa:74:71:b1:36:2f:3d:8d:
28:19:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:07 2024 by rpki-client on console-fra.rpki-client.org