Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/ATPlahh1V_FFYtVrU-pyYMlikbg.roa
File: ATPlahh1V_FFYtVrU-pyYMlikbg.roa (raw, json)
Hash identifier: eWhhMK9H2eIy/PCGCaOMhgmNxpyBZ0Qqkwimt9Yh/vc=
Subject key identifier: 01:33:E5:6A:18:75:57:F1:45:62:D5:6B:53:EA:72:60:C9:62:91:B8
Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial: 0277E9BA
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/ATPlahh1V_FFYtVrU-pyYMlikbg.roa
Signing time: Thu 13 Jan 2022 16:51:48 +0000
ROA not before: Thu 13 Jan 2022 16:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28941
IP address blocks: 185.103.112.0/24 maxlen: 24
185.103.112.0/22 maxlen: 22
185.103.115.0/24 maxlen: 24
185.103.114.0/24 maxlen: 24
185.103.113.0/24 maxlen: 24
2a04:c8c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41413050 (0x277e9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
Validity
Not Before: Jan 13 16:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0133e56a187557f14562d56b53ea7260c96291b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:06:4d:ac:2a:cb:58:f1:1d:11:96:6c:04:
69:23:8c:db:cd:ea:e4:be:53:42:4f:69:72:dd:8d:
54:57:34:f2:6f:ee:09:82:4b:3b:32:19:a1:90:54:
6f:6f:da:10:6c:db:b5:41:d9:88:cb:5a:8c:6e:c1:
42:ae:a0:92:31:9f:73:03:7c:3a:12:a6:53:89:d0:
5f:bc:40:b2:5c:b9:e8:8a:34:3c:a4:3c:e5:61:38:
ee:70:82:15:77:c3:2d:33:ee:0c:41:20:ec:b0:16:
63:be:8f:7a:32:30:9c:f7:11:19:e7:e9:60:44:a1:
96:a6:b5:c8:af:76:1e:72:d7:ad:d2:45:58:94:f5:
42:d5:82:83:29:6b:bf:bd:e9:df:6e:d9:0a:11:24:
58:90:ed:5e:9e:87:2f:3e:da:09:2f:5a:1f:d2:85:
da:b1:75:aa:61:55:db:cf:c5:32:43:af:bd:d3:b5:
b4:f0:8f:df:26:25:bb:6c:b9:7c:68:18:61:3f:45:
60:92:48:7a:e1:ad:23:56:70:ec:78:c8:37:9c:7e:
49:5e:7b:f5:05:a6:0c:e7:68:e2:ba:9b:c7:69:d4:
24:83:f6:ba:cf:b6:62:cc:db:52:37:3f:d0:57:6d:
77:11:d4:8b:d2:bb:33:cb:7b:65:54:d7:76:2d:60:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:33:E5:6A:18:75:57:F1:45:62:D5:6B:53:EA:72:60:C9:62:91:B8
X509v3 Authority Key Identifier:
keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/ATPlahh1V_FFYtVrU-pyYMlikbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.112.0/22
IPv6:
2a04:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:b8:39:dc:14:aa:bb:49:30:4f:81:ec:63:7d:49:e6:a6:6b:
a3:13:bc:02:74:cb:63:84:3d:38:bd:d9:c1:b4:9b:ed:6e:b9:
9e:eb:97:a3:99:8c:61:a2:5d:61:02:cc:13:9b:6a:fd:d7:a2:
2f:e4:14:34:c6:7a:8c:53:39:bb:53:b3:52:93:40:f2:8b:1b:
38:c4:ab:fb:99:2f:13:48:cb:27:20:44:7a:bd:2b:35:cc:1f:
5f:08:9f:3b:77:9f:92:0f:89:58:7d:b8:fe:26:a3:36:e0:2b:
89:2d:50:64:a1:93:22:04:5f:f4:db:26:d8:5d:cb:b2:c9:df:
e7:bb:24:f5:de:df:20:47:de:d8:28:c5:c1:a9:25:b0:93:c3:
a8:b3:04:52:0b:23:1c:ec:f3:5b:91:f4:f5:d8:94:0e:52:61:
a9:1d:8f:7d:9e:5d:69:01:c1:38:ad:12:86:90:f6:57:94:71:
33:f6:95:4a:ed:81:19:8f:b2:b1:1b:b7:f0:c2:3d:a6:e6:5e:
e7:41:88:b2:95:cd:04:b7:d4:b9:07:60:af:25:75:22:d9:3c:
42:ba:fb:b0:d7:19:8b:20:de:e1:ee:71:a7:66:b2:17:b4:7f:
1e:35:f0:b3:ab:5b:6a:14:e7:e7:e5:0b:ea:94:be:be:84:5c:
9c:ac:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:11 2024 by rpki-client on console-fra.rpki-client.org