Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/RvO_FnU0UhF6KQ_kK-kA9jUGLS4.roa
File: RvO_FnU0UhF6KQ_kK-kA9jUGLS4.roa (raw, json)
Hash identifier: +A+sg8kLUOMapVFM3KVyljpN67uYLQ4txM2W0/kzkr4=
Subject key identifier: 46:F3:BF:16:75:34:52:11:7A:29:0F:E4:2B:E9:00:F6:35:06:2D:2E
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 071911A9
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/RvO_FnU0UhF6KQ_kK-kA9jUGLS4.roa
Signing time: Sat 01 Jan 2022 07:56:53 +0000
ROA not before: Sat 01 Jan 2022 07:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205935
IP address blocks: 185.201.132.0/24 maxlen: 24
185.201.135.0/24 maxlen: 24
185.201.134.0/24 maxlen: 24
185.201.133.0/24 maxlen: 24
2a0a:c441::/32 maxlen: 32
2a0a:c445::/32 maxlen: 32
2a0a:c443::/32 maxlen: 32
2a0a:c447::/32 maxlen: 32
2a0a:c444::/32 maxlen: 32
2a0a:c442::/32 maxlen: 32
2a0a:c440::/32 maxlen: 32
2a0a:c446::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119083433 (0x71911a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jan 1 07:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46f3bf16753452117a290fe42be900f635062d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:b0:17:ef:f6:84:1a:15:c1:4b:02:1b:ae:
95:f3:69:4a:29:ca:11:63:9d:a5:94:e7:ec:a7:94:
fd:9f:60:23:cf:88:bc:1d:b1:ee:29:16:5c:38:03:
f9:73:03:75:c2:a9:97:b4:da:77:77:7e:2f:37:5a:
57:a5:ca:c0:cb:02:ca:91:05:a3:cf:15:91:dd:34:
48:f8:a8:3d:4c:68:81:a1:99:4e:5f:62:d5:ac:5c:
ab:66:9c:2a:86:02:67:f3:19:05:67:4b:c6:14:c6:
ac:9f:ad:01:61:a6:0b:d3:ca:b2:4b:f3:20:dc:b6:
2b:fe:37:b9:56:cd:01:df:7f:12:ce:cf:56:43:0c:
b6:17:b8:30:65:1b:e3:93:fc:83:b8:83:5a:62:df:
05:f9:58:7a:a4:bd:8a:fd:39:3d:82:be:64:f6:08:
61:22:bd:8c:bb:77:1f:b3:06:56:7b:c1:05:09:87:
fe:39:0b:4b:bd:8d:f1:80:1c:0c:82:36:4a:5e:69:
de:6e:76:f9:1c:26:45:97:e9:68:e3:92:9a:ee:3d:
17:1f:a4:4b:b0:b8:07:76:77:10:5b:09:13:28:ab:
77:8a:97:00:7f:5c:52:51:ae:07:56:13:b6:12:62:
95:ab:af:44:71:36:fe:94:7d:c8:57:eb:80:00:9b:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F3:BF:16:75:34:52:11:7A:29:0F:E4:2B:E9:00:F6:35:06:2D:2E
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/RvO_FnU0UhF6KQ_kK-kA9jUGLS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.132.0/22
IPv6:
2a0a:c440::/29
Signature Algorithm: sha256WithRSAEncryption
05:56:07:90:16:c6:e2:55:3e:84:5b:a5:fe:71:bb:db:27:b9:
80:99:fd:05:75:a1:37:a1:7d:af:f0:00:f4:15:9b:f7:7f:52:
b0:51:fe:dd:3a:ed:4d:9f:37:5c:16:de:10:86:8c:71:eb:76:
90:24:e9:ec:76:83:f4:b7:98:c7:93:61:3a:5e:32:de:c6:40:
13:51:4f:34:d5:ad:8d:7b:ab:76:0b:60:34:b0:79:dd:14:36:
be:58:cd:9e:84:ed:66:cc:86:21:72:d8:df:05:91:9d:47:55:
f0:09:66:50:f2:d9:25:82:93:e1:5f:d9:18:5f:43:4f:7c:1b:
73:76:fe:90:d7:ed:7c:ed:00:cd:3d:24:13:93:bf:5d:82:b6:
f3:c6:d8:ac:29:b3:5b:3f:48:4e:34:a4:a8:33:9c:1e:7e:bc:
ae:51:26:40:d9:f9:8b:31:6d:94:91:fa:2b:14:02:b6:05:f1:
6f:e3:74:b6:cc:86:7b:29:ae:7d:c3:a7:20:be:4b:c0:f8:8f:
19:24:af:54:ed:6b:0d:d0:c1:f1:7c:9f:b5:03:a0:e7:3b:2d:
ca:b5:7a:3a:56:a3:17:39:f5:cb:a5:e0:de:54:eb:4c:f4:d5:
49:8b:c7:b2:e0:32:36:cb:09:b5:a3:44:5c:0f:f7:79:c4:14:
ee:fc:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:11 2024 by rpki-client on console-ams.rpki-client.org