Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/2Bs-Pc8nGPZfRR5OMu5SfWQ2XDk.roa
File: 2Bs-Pc8nGPZfRR5OMu5SfWQ2XDk.roa (raw, json)
Hash identifier: 0T0VATDczDwNp0IdRKeI+Gi3gURL0dl5WYhKsRBNRC0=
Subject key identifier: D8:1B:3E:3D:CF:27:18:F6:5F:45:1E:4E:32:EE:52:7D:64:36:5C:39
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 06C8C979
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/2Bs-Pc8nGPZfRR5OMu5SfWQ2XDk.roa
Signing time: Sat 01 Jan 2022 07:52:27 +0000
ROA not before: Sat 01 Jan 2022 07:52:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52195
IP address blocks: 185.12.20.0/22 maxlen: 22
46.149.208.0/20 maxlen: 23
185.237.160.0/24 maxlen: 24
2a02:ea80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113822073 (0x6c8c979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Jan 1 07:52:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d81b3e3dcf2718f65f451e4e32ee527d64365c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:70:6e:a1:ff:63:38:33:08:1c:9b:13:2c:
af:f1:65:6a:d1:50:c5:60:e9:1e:f6:2c:ed:56:05:
b7:bc:68:32:a5:80:27:61:35:34:34:2a:56:83:86:
b2:8d:a9:75:55:3b:11:df:b3:41:90:96:c0:02:59:
1b:93:72:b8:54:7b:52:d1:80:0a:6f:f7:50:da:4e:
97:0d:bb:fa:4c:25:04:e8:68:48:c2:fc:07:30:ae:
54:39:be:73:98:b4:3b:88:d1:27:d6:3d:df:b8:5e:
83:40:6f:d1:8a:60:7d:31:1c:ae:d2:4d:8b:e6:b0:
29:0c:7b:b3:12:13:bd:82:b2:21:e5:bf:7e:15:78:
8d:8b:49:f5:45:d4:68:53:1e:ab:c4:ad:c9:52:03:
a8:a7:85:95:4f:ed:de:15:12:29:5d:69:4f:bc:28:
6b:ba:e4:83:bf:70:38:5f:e6:ca:70:3c:ec:ff:28:
1d:10:ed:b4:8e:5c:3f:8d:f6:77:6d:dc:49:2a:d9:
a7:5b:7b:8c:b1:c1:77:8b:d1:d6:16:aa:66:69:bb:
fb:9e:b5:78:0a:a2:f8:7e:a3:96:a7:3a:5e:67:a2:
4c:c7:8d:c8:43:00:9a:3b:f2:b4:ef:65:08:f0:74:
42:b4:a0:9b:87:b2:87:af:a7:1f:a7:93:94:89:00:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:3E:3D:CF:27:18:F6:5F:45:1E:4E:32:EE:52:7D:64:36:5C:39
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/2Bs-Pc8nGPZfRR5OMu5SfWQ2XDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.208.0/20
185.12.20.0/22
185.237.160.0/24
IPv6:
2a02:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
a0:92:b5:75:f4:c8:79:d9:f9:1a:6b:46:c2:4f:ff:21:25:11:
ec:b3:6b:d8:6f:e7:42:c6:9d:1c:9a:8b:fc:57:e1:2b:76:dc:
7f:c3:49:ae:f2:50:d9:b6:72:78:78:00:ac:4a:c3:ff:d4:dd:
d6:ac:63:d1:9e:a1:cf:ba:f7:42:b1:aa:cb:dc:0e:64:5d:10:
bd:70:31:2c:51:eb:0e:ca:6b:78:ba:41:cd:53:fd:ac:bc:dc:
73:bb:b6:7f:30:61:f3:fb:83:d4:95:ff:f3:cb:de:3a:54:c6:
a0:f9:18:d1:bc:ee:51:9d:13:44:fc:75:0d:57:87:fd:ad:8c:
be:dc:21:e1:26:bb:f4:30:cb:64:ab:6e:28:27:90:83:8d:a3:
70:18:ae:3c:c6:ae:13:32:21:05:15:23:50:07:ac:b4:7e:3a:
b2:a9:3e:77:e5:8c:ff:47:49:7b:97:70:6d:b9:b7:2e:f4:7d:
c2:41:e4:5b:f9:e6:4f:6e:42:b6:06:fc:1d:8e:e0:01:c9:93:
2a:fe:92:48:a2:8d:95:7e:b3:ba:ae:04:68:5d:d0:82:30:71:
47:fb:08:8a:ee:d6:92:b8:dc:a9:44:36:51:98:e2:66:0c:c7:
4f:05:2d:41:df:36:47:ab:b8:00:f4:54:f9:00:b4:71:47:45:
d4:7b:46:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:10 2023 by rpki-client on console-fra.rpki-client.org