Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/bAELYYpgLLSxa5N7m42Ofeyf9CE.roa
File: bAELYYpgLLSxa5N7m42Ofeyf9CE.roa (raw, json)
Hash identifier: mcTRLaT0NRFBQeWm2FdfXdVCkM12JsIEjAWVzqR76L0=
Subject key identifier: 6C:01:0B:61:8A:60:2C:B4:B1:6B:93:7B:9B:8D:8E:7D:EC:9F:F4:21
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 0183B276B41C0AA1E6726BC5B9DD954AD9DA
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/bAELYYpgLLSxa5N7m42Ofeyf9CE.roa
Signing time: Fri 07 Oct 2022 12:41:07 +0000
ROA not before: Fri 07 Oct 2022 12:41:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.80.0/22 maxlen: 24
2a06:97c0::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:76:b4:1c:0a:a1:e6:72:6b:c5:b9:dd:95:4a:d9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Oct 7 12:41:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c010b618a602cb4b16b937b9b8d8e7dec9ff421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:9d:a4:7e:15:8c:94:71:f2:45:76:6b:5b:
de:8f:79:8b:eb:ce:88:2c:e2:27:44:ac:40:40:ad:
ea:d1:4e:e2:d5:f8:3d:7c:6b:e9:46:c1:57:01:0d:
14:71:56:23:d9:d8:84:b1:76:15:ef:14:97:36:c3:
04:af:0d:ea:e9:7a:9d:8b:35:d9:92:70:ee:66:01:
93:15:a2:8d:56:0d:6f:06:80:0f:87:35:14:93:64:
80:da:c5:93:67:fb:16:0c:1b:9c:b1:b3:4d:9f:57:
cf:33:cc:66:3d:93:72:9e:04:a0:71:18:ac:74:37:
5b:ef:89:bc:33:f4:ad:0f:fe:f7:86:31:fe:c1:d7:
09:01:07:6a:bf:5e:d8:74:fb:63:78:f2:a0:fc:eb:
14:e8:72:85:98:0e:27:f3:ac:ba:d8:8a:9a:e8:c1:
19:9e:1b:10:89:6f:39:1b:de:75:26:04:fd:f0:74:
b7:45:98:5f:f9:de:82:a4:a4:a6:e4:79:70:75:a1:
58:47:11:43:88:1e:d1:90:bb:f4:de:4b:e1:16:07:
77:9d:85:aa:91:08:34:26:45:75:24:5d:d9:8c:12:
49:e3:5a:a8:ac:d0:00:43:54:f0:39:d3:ae:3a:d3:
c0:0c:8c:bc:93:83:c3:a4:96:a2:95:0e:56:91:b4:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:0B:61:8A:60:2C:B4:B1:6B:93:7B:9B:8D:8E:7D:EC:9F:F4:21
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/bAELYYpgLLSxa5N7m42Ofeyf9CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
IPv6:
2a06:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
a2:77:9b:55:0c:33:de:ee:01:b1:31:84:94:77:79:65:05:4e:
e1:ec:09:c9:17:81:b2:2a:a0:fb:96:75:ba:6a:d4:f3:6d:08:
bb:98:e5:92:d8:35:b6:8a:d9:99:04:3b:7c:fd:1b:2b:70:c3:
64:c2:fc:87:5e:50:07:55:c7:9f:3d:13:e5:64:95:80:c8:4a:
3e:2c:20:3b:61:ac:2c:23:2f:44:1e:22:aa:41:30:9c:6e:a0:
b9:3e:c2:fa:f9:e7:d4:08:4c:ba:36:eb:52:34:9c:56:b2:c8:
f1:48:37:a5:7a:54:d5:b1:8e:3f:cc:fa:d3:de:51:74:f2:de:
cd:6f:bc:0f:73:ca:f1:b0:87:af:53:8e:b2:18:95:24:1a:ba:
54:e0:85:06:91:18:4b:62:2d:dc:c3:11:30:34:32:60:c7:07:
1d:c4:d5:42:51:e0:7e:0a:3c:44:ce:25:44:95:a5:00:5b:3a:
69:9a:09:5b:b5:fd:db:c2:1f:2e:cc:72:ee:ba:d4:f4:25:80:
a3:00:6b:e9:64:ee:4b:45:fd:7f:da:14:02:97:d1:5c:42:c5:
8b:a0:0e:c4:fb:78:d2:f8:76:e1:69:a2:27:36:bb:96:96:e7:
a1:82:f3:43:2d:8e:04:78:c1:d7:70:d8:74:55:3e:73:52:88:
d0:5b:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org