Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/BS80yuSLdzZO_IMsq7Pw_u85IuY.roa
File: BS80yuSLdzZO_IMsq7Pw_u85IuY.roa (raw, json)
Hash identifier: utyBco2HdeR+VM03jVVjYT/cn9ilQzZh77BN5bgKF2Q=
Subject key identifier: 05:2F:34:CA:E4:8B:77:36:4E:FC:83:2C:AB:B3:F0:FE:EF:39:22:E6
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 0182C9476AC0E1E08D71769C1679F5127F7C
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/BS80yuSLdzZO_IMsq7Pw_u85IuY.roa
Signing time: Tue 23 Aug 2022 05:57:56 +0000
ROA not before: Tue 23 Aug 2022 05:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.14.239.0/24 maxlen: 24
185.14.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:47:6a:c0:e1:e0:8d:71:76:9c:16:79:f5:12:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Aug 23 05:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=052f34cae48b77364efc832cabb3f0feef3922e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:7d:10:09:7e:39:be:f3:05:a5:08:79:c1:
03:05:24:95:fb:41:86:5c:90:27:c4:fa:f2:57:96:
fc:d5:55:9d:7e:7b:66:45:0a:6d:b5:f1:6c:ad:92:
c7:90:1e:bd:9f:e7:77:72:54:4b:db:4c:a7:34:62:
aa:9f:2a:e2:f1:7b:28:fc:5b:87:2b:79:ca:2b:d6:
25:18:e1:bd:5b:ee:5b:e1:27:31:2e:3a:68:f8:2f:
52:42:8c:8c:eb:bb:04:32:4e:b6:f0:4b:49:6d:a0:
c4:75:2d:41:71:38:30:e1:fa:a1:a8:b6:2f:48:0f:
99:3b:6b:53:4f:54:b6:c8:0a:21:07:9b:28:9a:50:
0b:0f:b1:61:09:97:37:59:3d:d5:22:90:cd:cf:4d:
d7:74:68:ca:1b:85:71:53:53:99:9a:8f:ef:ba:a5:
5d:d3:f5:0e:d0:fd:8c:b6:cc:e6:84:bc:8b:e9:71:
11:cc:41:ba:ee:2f:de:01:c6:14:fd:77:96:32:a9:
5d:53:c5:cb:96:c4:d1:9f:31:25:e8:09:cf:d3:01:
ed:51:d9:29:02:c4:d4:ed:9c:d1:54:32:6e:5d:a1:
be:4d:22:2a:50:a8:e9:f3:81:d6:18:75:87:0b:76:
b2:ad:38:ae:a0:ae:97:bc:ad:bb:5b:88:e4:2d:10:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2F:34:CA:E4:8B:77:36:4E:FC:83:2C:AB:B3:F0:FE:EF:39:22:E6
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/BS80yuSLdzZO_IMsq7Pw_u85IuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.237.0/24
185.14.239.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4f:07:df:e5:95:ab:e2:f2:e2:00:fd:78:f6:3b:e2:ad:d0:
fe:c5:56:76:73:cc:fb:20:c6:bd:db:fd:8b:00:7f:40:d2:bf:
22:89:53:b4:ea:f4:68:3e:48:78:05:c6:55:f7:63:b0:80:d2:
76:c2:1b:59:67:ea:e2:07:74:de:67:66:04:49:5a:07:f7:34:
2e:12:cf:5f:0e:22:54:3d:44:7f:1d:4a:8a:0a:fd:f0:22:8e:
4a:d8:77:5f:c3:7a:76:02:ec:f6:73:1b:fc:88:ae:14:da:28:
62:b0:a9:40:c3:20:e9:88:1e:d4:58:02:79:ad:20:8b:db:b7:
f0:b4:51:20:a2:f9:2a:f2:74:ae:1a:a5:95:47:33:24:af:8f:
92:5e:fb:38:eb:c7:70:ed:50:2c:62:1a:44:7f:88:99:ee:c7:
9d:7d:ed:ba:4b:29:d0:bc:ac:89:1d:76:78:04:03:43:71:76:
ec:c0:7d:4d:cb:45:38:88:f4:f2:11:2e:8f:5e:03:50:e2:f5:
ca:1a:5a:25:5d:a5:2d:4b:22:60:81:61:ae:fa:05:86:57:f8:
ec:66:01:dc:7c:af:d3:07:17:2b:ce:1f:f2:51:a2:af:4d:18:
62:f4:75:bc:c1:21:de:46:11:34:90:a4:1f:70:16:d3:a4:b6:
52:63:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-fra.rpki-client.org