Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/B5zbpep25iveTFx2BEkJpGli_38.roa
File: B5zbpep25iveTFx2BEkJpGli_38.roa (raw, json)
Hash identifier: L/Mb8wIR6CM68Sm0Y/RiXsKDFCus4dauGRsqPa/LM/0=
Subject key identifier: 07:9C:DB:A5:EA:76:E6:2B:DE:4C:5C:76:04:49:09:A4:69:62:FF:7F
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 018476D901D0DCDD1838B19DBFB4EE264469
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/B5zbpep25iveTFx2BEkJpGli_38.roa
Signing time: Mon 14 Nov 2022 15:54:04 +0000
ROA not before: Mon 14 Nov 2022 15:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42106
IP address blocks: 185.231.222.0/24 maxlen: 24
185.231.223.0/24 maxlen: 24
185.231.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:d9:01:d0:dc:dd:18:38:b1:9d:bf:b4:ee:26:44:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Nov 14 15:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=079cdba5ea76e62bde4c5c76044909a46962ff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:ca:5e:a3:a1:0f:9f:4d:ec:b4:5d:31:f6:
c0:84:ef:72:9a:4f:45:02:d3:6b:31:00:e1:7d:98:
bc:81:87:d8:71:02:f4:68:4b:fd:87:3c:f4:73:f7:
e3:1f:54:2e:3b:cc:2c:09:86:26:af:d8:20:de:5a:
35:01:9f:ce:c1:91:89:fb:e2:30:a1:35:91:f7:36:
08:b6:9c:8a:18:3b:58:b9:fb:8b:f4:d8:c2:e8:c3:
46:7e:b0:71:98:81:17:5c:bc:dd:18:31:35:b6:27:
d3:b6:43:37:51:21:f0:dc:09:17:40:3a:0a:e8:fc:
e0:51:bc:85:29:f0:bf:b4:12:5f:d8:98:b9:10:ec:
da:dd:69:b5:26:d1:c6:94:f2:a9:09:b4:a2:df:a3:
8d:77:4e:92:6c:09:df:e7:08:4c:12:54:d8:99:6a:
b3:41:5b:ab:89:98:19:c5:c8:4f:c5:db:98:4f:c0:
90:dc:82:0d:66:76:e6:2d:77:ff:71:57:a0:fb:c7:
f6:b6:ef:df:6f:5a:a3:ee:b1:b0:22:19:f3:96:60:
07:2b:39:f1:84:51:23:ac:08:3e:af:f0:bb:9d:8d:
31:79:5d:bf:2a:13:62:01:29:ee:3c:5d:38:20:63:
55:ae:1b:2f:2d:cb:d7:1d:3f:e8:d2:e7:4f:00:33:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9C:DB:A5:EA:76:E6:2B:DE:4C:5C:76:04:49:09:A4:69:62:FF:7F
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/B5zbpep25iveTFx2BEkJpGli_38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.221.0-185.231.223.255
Signature Algorithm: sha256WithRSAEncryption
a1:c8:7d:1d:77:00:a7:fc:bb:03:f2:78:66:7a:aa:cc:2f:88:
f3:2c:5c:1c:6c:c3:8a:3c:0e:cd:1c:9b:de:05:83:34:e2:cd:
56:bc:78:59:0e:10:64:1f:ed:3c:20:b6:f6:64:f6:f7:46:7f:
1f:8a:19:9d:c0:7f:26:8a:66:bc:40:e4:f3:eb:7b:0f:5b:db:
f5:fd:f2:73:f0:5d:c8:c3:c2:46:fc:0a:f1:b1:ed:e8:23:5b:
7e:bb:b4:46:dd:d6:97:69:7a:35:96:74:6e:75:e8:a8:e5:18:
7b:7d:8a:f8:d3:6c:79:4d:68:1b:26:ec:5d:27:93:56:69:33:
db:b2:74:0d:f6:95:f2:33:23:e8:5d:7d:13:90:64:c1:0e:99:
bd:f1:e4:9f:9d:56:23:09:7b:8c:ef:4b:3f:e4:e1:66:f4:be:
fd:af:45:e7:ac:df:bb:09:40:c7:d3:ef:3d:60:98:5d:7f:32:
b7:03:eb:b6:2d:f4:92:28:64:95:d1:a1:1d:9a:58:32:86:3b:
c3:88:cd:23:70:8a:e2:4c:fe:51:0d:d0:67:d4:7e:d1:0b:ae:
62:35:13:25:27:5b:38:0f:42:4c:e7:29:8e:23:71:a5:22:94:
c8:04:4e:36:08:41:63:38:20:db:43:69:17:69:a1:94:ad:94:
e6:09:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:54 2024 by rpki-client on console-fra.rpki-client.org