Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/2cV8En7g9oUeFrb04XhJXGzmqp0.roa
File: 2cV8En7g9oUeFrb04XhJXGzmqp0.roa (raw, json)
Hash identifier: CwdwI3SuYywL4NYZDsF2UzgpoOl3CLqkf9rDaO1eaOg=
Subject key identifier: D9:C5:7C:12:7E:E0:F6:85:1E:16:B6:F4:E1:78:49:5C:6C:E6:AA:9D
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 01825EA848D21554792F238246E185971F28
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/2cV8En7g9oUeFrb04XhJXGzmqp0.roa
Signing time: Tue 02 Aug 2022 13:04:23 +0000
ROA not before: Tue 02 Aug 2022 13:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205609
IP address blocks: 185.133.252.0/22 maxlen: 22
185.133.252.0/23 maxlen: 23
185.133.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:a8:48:d2:15:54:79:2f:23:82:46:e1:85:97:1f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Aug 2 13:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9c57c127ee0f6851e16b6f4e178495c6ce6aa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:ff:9e:8b:f0:74:44:20:9e:54:1b:2e:be:
be:c1:46:40:09:8c:47:67:18:96:29:40:48:2d:a4:
b1:f1:a6:30:61:69:6c:85:80:52:12:6f:87:7d:d3:
c6:68:85:60:6a:9d:8e:59:e0:9a:a1:91:eb:fe:0a:
41:2c:66:f5:09:3d:4a:ec:82:85:9e:99:0e:f2:cb:
86:f1:0f:c2:74:25:d8:7e:e6:f8:f2:12:d6:e9:81:
8b:85:b7:1f:43:88:57:22:51:23:65:7a:02:3d:a7:
0a:83:8b:f0:18:79:fc:a1:5b:ac:a1:2d:d7:36:69:
f8:1d:3a:15:62:23:6e:ca:b1:2f:05:3d:97:2f:b8:
fb:78:3d:66:50:b9:45:69:ed:d1:3c:9f:b5:42:52:
4f:72:47:71:94:ea:d4:b9:a2:57:5a:8f:45:1d:11:
d5:9c:12:db:ac:64:aa:a2:44:cb:0e:6d:47:8e:2a:
97:8f:62:27:f8:5e:6c:08:22:24:76:f2:aa:cc:05:
00:ce:43:2c:cc:42:a5:b1:68:f3:d4:f8:91:ed:4d:
f4:17:d8:c7:c9:d2:68:4b:ae:df:ef:47:c4:24:d9:
ae:ca:a6:02:ef:a0:12:d7:3c:ad:76:62:fa:4e:39:
bb:0a:f7:be:cf:b0:f2:31:42:5b:9b:82:8c:7b:23:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:7C:12:7E:E0:F6:85:1E:16:B6:F4:E1:78:49:5C:6C:E6:AA:9D
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/2cV8En7g9oUeFrb04XhJXGzmqp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:66:1a:5c:55:91:82:f7:bc:e9:05:2e:c6:8a:69:40:f7:3e:
cf:a5:8e:3f:ba:50:1d:89:b8:f7:2a:6c:95:40:e4:7a:c1:2c:
32:0c:2f:c1:4e:87:f5:15:73:57:57:d6:e7:6b:0b:5d:04:b9:
90:fd:db:50:3c:4b:9e:a2:42:e7:b5:29:b4:dc:b1:cc:39:84:
43:9d:5c:8a:15:a5:0c:0f:c5:93:02:bb:d2:48:04:60:7c:38:
97:97:12:94:1e:d0:c2:4e:7a:4f:fb:9c:b0:7f:a1:ae:fc:ab:
19:fb:f0:b2:35:f9:fd:2c:e6:0e:32:a6:7d:60:a1:12:88:57:
9a:25:35:a9:ad:f1:2a:a2:f8:43:b3:39:e5:54:3b:f3:1e:8b:
3a:6a:a3:30:a9:02:3b:4c:f6:88:eb:5b:b6:20:c4:05:cb:f1:
b1:e4:35:b9:c7:6c:aa:1c:f6:41:4b:67:f4:f2:4f:be:39:85:
0f:3b:23:fd:98:8e:bd:17:63:10:1f:c7:1c:05:84:b8:ea:cd:
96:95:63:41:19:a7:e7:ab:af:09:c8:37:14:32:30:1e:81:45:
63:d6:8f:fd:f0:8b:8d:e1:70:06:7b:2f:de:c1:21:96:e0:3d:
c3:d9:99:05:bf:52:80:33:24:b9:ba:58:21:3d:64:98:f4:d1:
c4:6c:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:14 2023 by rpki-client on console-ams.rpki-client.org