Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/vf8iy-m1MoOdvJfs3E0t0wBwOeU.roa
File: vf8iy-m1MoOdvJfs3E0t0wBwOeU.roa (raw, json)
Hash identifier: AZpwgb9DTsfGJ4w7vsmQGv+6MoyLlPlH2vzxyWCQ28c=
Subject key identifier: BD:FF:22:CB:E9:B5:32:83:9D:BC:97:EC:DC:4D:2D:D3:00:70:39:E5
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 29948BB4
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/vf8iy-m1MoOdvJfs3E0t0wBwOeU.roa
Signing time: Fri 04 Mar 2022 09:53:50 +0000
ROA not before: Fri 04 Mar 2022 09:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.14.238.0/23 maxlen: 24
185.14.237.0/24 maxlen: 24
185.14.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697600948 (0x29948bb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Mar 4 09:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdff22cbe9b532839dbc97ecdc4d2dd3007039e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:08:1d:c3:ee:3a:64:e0:74:51:25:f0:f6:
df:18:1b:bc:dc:44:59:29:1c:2c:46:7b:e8:ab:cb:
f6:4e:7c:5f:69:99:26:e7:1c:18:21:9f:d8:2a:eb:
b4:a5:a3:7c:53:1d:59:be:b9:97:81:29:a1:59:e4:
eb:1c:92:50:4a:49:69:07:97:e7:c9:33:08:fb:15:
45:d2:35:f1:94:85:f2:54:5d:f1:c3:d8:4f:7a:82:
94:cf:41:4d:3d:ce:e3:a7:95:55:0b:e3:ff:df:3f:
76:d0:93:71:a5:2a:a8:4a:44:95:aa:d8:8c:f1:c9:
70:49:c6:21:f4:cf:0a:30:04:28:9d:14:c1:9f:56:
b2:a7:40:5d:50:aa:2f:d5:59:b5:72:7c:e0:21:e0:
30:5f:48:7b:bd:19:9c:df:50:cd:aa:9c:77:f1:27:
64:3f:0a:64:16:69:5c:27:d1:62:f6:6a:0e:22:99:
06:3b:5e:fd:99:2d:68:af:3e:86:30:75:c4:ec:23:
7c:44:69:c6:7f:87:cf:60:2c:b7:78:9f:7e:bd:32:
01:8a:5a:2b:7b:37:b6:74:53:63:58:db:d4:c7:30:
39:21:5b:46:be:da:38:9c:83:36:f8:04:68:85:70:
bd:32:93:6a:6e:8b:fc:5f:2e:a4:ba:9a:7c:8a:2d:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:22:CB:E9:B5:32:83:9D:BC:97:EC:DC:4D:2D:D3:00:70:39:E5
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/vf8iy-m1MoOdvJfs3E0t0wBwOeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:ec:ce:63:e7:bd:77:a4:34:76:5d:ef:10:81:e0:40:92:5a:
8b:dc:8e:94:c7:c2:5c:94:f4:69:fa:cb:b9:d7:9e:37:d2:03:
89:e8:f0:66:b6:8d:ee:8e:44:29:6c:d9:f6:87:60:36:4e:d7:
c4:c1:ec:5e:8d:bb:b3:f1:58:76:98:93:50:45:a3:f9:af:69:
c1:e5:67:90:19:82:93:4c:b8:8d:7b:7d:b8:f7:71:f7:ee:19:
df:a6:a3:f9:61:4f:3d:e4:72:d4:47:b5:bb:e2:e2:b3:a2:3d:
94:89:47:c3:5d:b8:49:f8:0e:23:1e:b3:b6:ed:ff:10:cb:38:
fe:a7:00:51:cf:82:cb:6d:5c:ac:5f:c2:c6:0a:dc:46:6d:34:
26:ed:a9:fb:b6:5c:ae:14:cb:98:4d:c3:bc:8c:db:b9:3d:6d:
d3:ac:15:5d:e1:86:82:90:8d:72:a3:2c:12:88:3e:a3:73:be:
e6:d0:b0:12:76:76:8b:12:04:50:94:af:9e:0a:7c:d0:a3:2d:
79:bc:ac:64:c5:0d:09:9c:81:34:39:49:f1:e3:47:f5:ba:ca:
5a:08:08:0b:d2:ee:73:7a:e5:0c:d1:a8:01:c0:d7:65:f2:07:
e0:bd:d9:59:37:cc:2d:fd:c8:f4:f0:5e:b4:5c:c6:38:87:f1:
46:27:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:04 2023 by rpki-client on console-fra.rpki-client.org