Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/8TcXEZwHm2cMNDFSObldnPa4mv8.roa
File: 8TcXEZwHm2cMNDFSObldnPa4mv8.roa (raw, json)
Hash identifier: BWyxRZ0tfRnjx6946rwsaeKT8f2M62cTVjrlqEIOW+w=
Subject key identifier: F1:37:17:11:9C:07:9B:67:0C:34:31:52:39:B9:5D:9C:F6:B8:9A:FF
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 03CBCFB3
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/8TcXEZwHm2cMNDFSObldnPa4mv8.roa
Signing time: Sat 01 Jan 2022 11:04:32 +0000
ROA not before: Sat 01 Jan 2022 11:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.184.172.0/23 maxlen: 23
185.184.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63688627 (0x3cbcfb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jan 1 11:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f13717119c079b670c34315239b95d9cf6b89aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:92:3a:29:9f:62:21:7f:0f:bf:6a:d6:21:
7a:a2:62:79:3b:e3:5c:c4:77:55:24:f3:87:4a:41:
63:6f:38:61:2e:d1:1e:13:6b:48:5e:d2:69:2d:20:
c6:a0:dc:8d:06:85:ad:19:01:12:37:de:81:5a:cf:
c5:c8:cd:39:b5:56:2a:f1:fc:dd:49:bd:ca:99:e2:
94:9d:fb:20:7f:38:3a:95:a6:66:97:b6:7d:97:95:
b0:a4:56:38:c2:84:94:32:68:eb:1b:80:e3:d8:ab:
1f:10:03:13:4f:e1:8b:8f:33:c4:60:e8:bf:c2:c4:
32:d2:27:85:29:fa:d2:72:23:d4:8c:af:8e:c5:42:
98:44:be:92:87:b7:06:7e:a4:77:f8:3a:b9:3d:24:
f4:25:88:ac:cb:77:fc:b1:5a:1a:2a:41:ef:ec:7f:
f1:3b:24:cf:2c:c0:db:3a:19:2a:ce:24:47:5f:31:
2d:b4:da:db:b1:99:6c:92:c5:2a:9b:bc:62:b7:f4:
8e:73:1a:4b:e1:22:0b:75:6c:8d:02:14:79:97:8f:
48:7a:4a:64:e9:60:db:ea:e5:bc:2f:1b:7b:59:d1:
2b:86:61:09:6c:ab:7b:db:ef:7e:ac:0d:5c:41:67:
7a:d1:1a:c6:9a:39:db:69:73:37:2a:0c:cf:56:a2:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:37:17:11:9C:07:9B:67:0C:34:31:52:39:B9:5D:9C:F6:B8:9A:FF
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/8TcXEZwHm2cMNDFSObldnPa4mv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:70:82:4c:fc:0e:e1:0c:3b:ec:40:b8:e8:cb:06:b8:2c:6d:
94:0d:e3:07:c1:bb:fe:ba:80:7f:bc:72:20:d9:a0:39:d8:e6:
95:f6:b5:38:b6:a2:69:96:c1:90:f5:21:84:5b:9b:b8:70:1c:
97:eb:ea:80:cc:6d:d7:6a:5d:7d:9b:02:60:7d:e1:9a:e4:7e:
23:dd:37:23:1a:76:d2:2c:12:b8:13:9b:54:c1:71:b3:46:d1:
c9:6b:d8:a4:9a:23:60:97:27:25:28:96:0e:5e:8c:7d:15:02:
4a:ec:b7:97:d8:97:4c:76:a8:ed:93:b5:28:f8:61:11:39:99:
0e:b4:f0:df:55:d4:10:20:3d:c8:54:d3:94:41:0a:e0:92:2b:
09:61:8c:8b:b0:f6:14:f1:39:0e:6c:ce:82:10:71:8c:51:e7:
cc:d2:91:59:b1:e3:b4:c9:1e:e1:91:ce:5f:30:4d:45:a3:73:
ec:d0:0c:b5:e0:4f:3a:87:8f:13:02:58:11:9b:76:91:8c:cb:
fd:28:ef:57:d0:da:92:31:64:72:e8:bd:02:04:81:f5:fc:6e:
5b:93:4f:37:48:b1:b8:3a:f8:ba:ca:85:9c:58:06:60:46:91:
8e:9f:80:a6:b3:31:85:ff:2b:93:96:5d:e7:9b:fe:a8:7f:9d:
98:a7:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:54 2024 by rpki-client on console-fra.rpki-client.org