Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/cD4XlK0or3THtK2mi7stB_Lk5u4.roa
File: cD4XlK0or3THtK2mi7stB_Lk5u4.roa (raw, json)
Hash identifier: lkVy4UVuKqzi6mHhlIHLZev9jYiDdCBTOjKxe80odlU=
Subject key identifier: 70:3E:17:94:AD:28:AF:74:C7:B4:AD:A6:8B:BB:2D:07:F2:E4:E6:EE
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 382F411E
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/cD4XlK0or3THtK2mi7stB_Lk5u4.roa
Signing time: Sat 01 Jan 2022 13:59:46 +0000
ROA not before: Sat 01 Jan 2022 13:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24904
IP address blocks: 185.172.232.0/22 maxlen: 22
185.172.233.0/24 maxlen: 24
185.172.234.0/24 maxlen: 24
178.250.208.128/28 maxlen: 28
185.109.200.0/22 maxlen: 24
185.4.76.0/22 maxlen: 24
81.28.192.0/20 maxlen: 24
185.144.44.0/22 maxlen: 24
185.207.80.0/22 maxlen: 24
185.73.232.0/22 maxlen: 24
185.164.232.0/22 maxlen: 24
178.250.208.64/27 maxlen: 27
178.250.208.0/21 maxlen: 24
185.66.100.0/22 maxlen: 24
185.45.32.0/22 maxlen: 24
2a03:4980::/32 maxlen: 32
2a03:4980:100::/40 maxlen: 40
2a03:4980::/40 maxlen: 40
2a03:4980:200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942620958 (0x382f411e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Jan 1 13:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=703e1794ad28af74c7b4ada68bbb2d07f2e4e6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:7a:0d:03:39:7d:d4:da:7c:a8:9e:bc:ea:
8b:cc:e9:5e:f0:01:6c:81:71:46:96:db:74:90:1e:
8c:8f:51:7b:76:9d:74:4c:0b:e4:04:bf:fb:63:8a:
37:8c:92:c0:c0:ba:24:f7:62:de:54:28:f5:d4:c7:
88:4c:7f:c3:49:76:16:fb:43:a6:18:cd:be:d3:db:
07:dc:f9:8f:4e:10:e5:d8:26:c7:71:25:b6:e4:5a:
46:31:66:99:af:c6:3f:6d:c9:6b:f8:72:37:0b:3d:
38:d9:b2:f9:17:03:f1:e4:f7:97:14:78:f1:e1:31:
fe:bd:65:ad:aa:be:d6:40:e9:05:10:2a:30:5f:cc:
86:ab:02:84:a2:e1:19:19:6e:69:b3:00:14:b0:0b:
cb:09:61:eb:41:d1:52:dc:06:ac:37:1b:e2:3f:ff:
ce:b8:63:18:51:7b:99:97:76:58:3e:d5:16:33:46:
cc:8b:df:24:48:45:9c:d5:49:90:6b:2a:10:07:4c:
32:be:b7:3d:4a:0b:83:4c:0e:85:40:6b:e4:ec:7d:
ea:2d:60:e4:4c:3e:94:92:08:2b:0f:e4:fd:7f:60:
f8:e3:5f:5e:bc:c8:4e:3b:ce:34:b0:10:34:1c:89:
51:7a:a2:29:07:b7:67:44:45:d3:09:f7:0f:6f:e7:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:17:94:AD:28:AF:74:C7:B4:AD:A6:8B:BB:2D:07:F2:E4:E6:EE
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/cD4XlK0or3THtK2mi7stB_Lk5u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.192.0/20
178.250.208.0/21
185.4.76.0/22
185.45.32.0/22
185.66.100.0/22
185.73.232.0/22
185.109.200.0/22
185.144.44.0/22
185.164.232.0/22
185.172.232.0/22
185.207.80.0/22
IPv6:
2a03:4980::/32
Signature Algorithm: sha256WithRSAEncryption
38:7c:51:48:14:44:47:7b:dd:ad:4d:44:e9:47:91:ee:63:6c:
da:62:4e:1b:57:88:e5:a6:87:60:47:c1:91:0b:eb:36:3e:ac:
22:aa:e4:fd:04:df:a2:66:9e:fc:cd:8d:10:7d:0a:91:ea:eb:
0b:06:f6:58:49:28:8c:79:06:4d:a7:9f:20:8f:41:39:0e:ec:
99:1b:28:07:5d:7b:de:d8:72:c5:37:f8:38:0f:4e:c5:14:e8:
cf:14:bb:25:b7:5c:da:c5:4f:e0:ad:1e:d1:3f:4d:fb:f2:f9:
a1:31:b4:6f:4e:c5:86:f0:ba:2a:5c:68:c7:ad:9a:c5:69:54:
ed:ef:05:fd:1f:ca:cf:06:46:1b:0a:0f:32:0c:82:99:9d:a1:
d1:52:29:45:26:45:c5:a2:3d:c8:8d:5a:a4:14:aa:9c:b5:83:
d8:9a:1e:96:d8:14:7e:50:ae:b1:23:ba:4a:2a:8c:02:8d:9f:
93:4c:c0:8f:ab:e7:21:59:a4:dd:73:c7:d8:26:5b:63:e9:8a:
59:66:61:cc:1d:20:b1:a7:c9:06:0b:d7:63:bd:64:a6:ab:b3:
a1:00:f7:11:ed:9c:ac:4f:d8:86:b6:f6:19:17:31:62:f2:b7:
f1:89:7e:70:68:85:d8:e4:96:b1:da:6f:23:70:76:4f:db:01:
a0:f3:b3:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:06 2024 by rpki-client on console-ams.rpki-client.org