Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/I8rsbxuXoqrP3-soo0EJkGJ7EQg.roa
File: I8rsbxuXoqrP3-soo0EJkGJ7EQg.roa (raw, json)
Hash identifier: WiVBeK4gq+ls9BR+7XpsSYBeGs7s63W1z546G91Cihw=
Subject key identifier: 23:CA:EC:6F:1B:97:A2:AA:CF:DF:EB:28:A3:41:09:90:62:7B:11:08
Certificate issuer: /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial: 12F2F8F3
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/I8rsbxuXoqrP3-soo0EJkGJ7EQg.roa
Signing time: Sat 01 Jan 2022 05:03:06 +0000
ROA not before: Sat 01 Jan 2022 05:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39702
IP address blocks: 185.133.12.0/22 maxlen: 22
2a05:fe80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317913331 (0x12f2f8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Validity
Not Before: Jan 1 05:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23caec6f1b97a2aacfdfeb28a3410990627b1108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:10:b0:59:7d:be:c0:8e:8f:db:96:e5:4d:
91:c5:ca:98:8b:b9:85:d7:5a:31:90:11:01:1b:8e:
71:24:e8:b9:24:fb:b8:7c:72:aa:f7:3a:e4:2c:2c:
80:89:57:a4:9e:3e:94:80:ea:f0:8d:14:02:bb:e1:
17:b6:cc:1f:7b:83:ba:9a:46:f0:a6:6a:90:79:82:
cd:db:e8:73:03:a4:30:11:51:dd:d3:2e:24:2d:15:
a6:c0:a6:f1:1e:f5:a2:36:de:71:2f:ec:22:3d:a0:
4d:ff:ae:98:0e:f2:4e:cd:7a:f1:67:37:49:72:42:
a7:f1:6d:ea:58:bb:73:bd:04:ea:86:74:a8:93:24:
f9:7c:63:1e:e0:4a:82:83:8f:ed:73:f5:27:7e:08:
bc:ee:5c:a8:b5:7f:13:49:43:e3:ef:11:81:51:0b:
74:6f:3e:9b:85:90:97:8c:b7:3f:ca:02:a7:3f:91:
8c:20:aa:12:cb:2c:eb:59:14:81:c8:6c:c3:e2:f6:
7a:79:44:c4:75:1d:12:4b:ef:a4:68:60:a3:ba:e0:
71:02:0f:df:a9:88:78:2b:4a:91:51:3e:ef:ac:53:
0d:a6:26:b6:fb:0a:71:78:3a:8f:9b:ab:b9:2a:0f:
b9:10:f8:e6:aa:57:69:25:3a:12:43:a9:bc:4d:f7:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:EC:6F:1B:97:A2:AA:CF:DF:EB:28:A3:41:09:90:62:7B:11:08
X509v3 Authority Key Identifier:
keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/I8rsbxuXoqrP3-soo0EJkGJ7EQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.12.0/22
IPv6:
2a05:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
2f:7a:83:a6:1d:ad:79:6f:29:23:bf:01:71:35:84:76:72:46:
83:64:e6:5f:0e:b8:ee:0e:9b:05:61:83:08:93:ab:d2:2d:ef:
2c:93:87:35:6c:f7:5f:c8:28:0f:53:64:25:10:68:b3:e1:e8:
5d:6a:15:63:a3:49:79:cf:53:31:82:1b:b4:e0:eb:22:02:f3:
10:5f:2c:e3:c7:4d:ea:cd:b6:20:ee:06:84:77:cb:c1:46:3f:
26:d3:15:1f:8e:fb:03:2f:d6:e2:6f:75:4f:ae:58:0e:d6:95:
bf:3f:de:59:f8:38:72:e0:f8:de:dc:0c:fb:ae:9c:4c:43:b7:
cd:06:d5:04:28:51:df:7d:0c:d4:99:aa:4e:1a:62:f7:0d:0a:
7f:cf:89:80:0a:42:55:12:2e:c6:74:aa:b6:03:a2:9e:c2:3e:
f1:9e:7d:4b:30:c9:85:60:48:18:d4:1a:43:d6:63:da:b6:50:
dd:fd:85:99:24:ac:79:0f:61:62:09:23:60:6b:37:03:6c:df:
b4:2d:58:80:d7:3a:82:e9:9d:98:f6:0d:16:53:f5:27:2b:5a:
4e:76:1f:23:01:32:ce:1e:63:4c:33:cd:0c:c3:35:a1:54:e9:
9f:c8:c4:ef:f9:bf:8d:c5:1f:f4:06:1d:c3:3b:19:46:a7:fe:
74:56:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:53 2024 by rpki-client on console-fra.rpki-client.org