Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/tyLrwMRdXPD74PEK_vmAzagILhg.roa
File: tyLrwMRdXPD74PEK_vmAzagILhg.roa (raw, json)
Hash identifier: s4FN83pEOqsOnROFOj6UTua5zmcvMo41Gq7WMZgNLqU=
Subject key identifier: B7:22:EB:C0:C4:5D:5C:F0:FB:E0:F1:0A:FE:F9:80:CD:A8:08:2E:18
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 018389707A54F2A7BE0AD1DA8B86971E7C1E
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/tyLrwMRdXPD74PEK_vmAzagILhg.roa
Signing time: Thu 29 Sep 2022 13:29:53 +0000
ROA not before: Thu 29 Sep 2022 13:29:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.81.0/24 maxlen: 24
185.131.80.0/24 maxlen: 24
185.131.80.0/22 maxlen: 22
185.131.83.0/24 maxlen: 24
185.131.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:70:7a:54:f2:a7:be:0a:d1:da:8b:86:97:1e:7c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Sep 29 13:29:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b722ebc0c45d5cf0fbe0f10afef980cda8082e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:59:8f:97:f4:55:a2:d7:b7:6b:14:cf:c4:
67:2d:cb:c4:ed:6a:12:dc:5b:d1:9b:2e:aa:ff:31:
9e:98:54:98:bb:31:85:d5:6f:82:c3:c1:a3:e6:ec:
83:6f:f1:38:09:31:1e:37:37:eb:15:0d:47:58:4b:
79:39:6f:f0:3d:9c:75:24:fa:bc:ed:86:a9:f7:6f:
7c:e5:31:82:1d:51:08:2c:e7:c2:52:b0:ef:96:fa:
76:62:af:3b:38:ee:7b:62:8e:7e:bb:bd:27:4b:2f:
94:8d:2d:7e:b9:0c:52:7b:9b:35:cd:7e:e6:d4:a0:
06:f9:ca:80:87:e5:7e:aa:36:f4:c3:07:c9:34:24:
84:ee:33:3d:44:1f:a5:99:01:02:dc:b5:10:53:97:
52:77:fc:2b:01:2a:12:7c:c1:24:dc:44:44:b7:36:
6b:84:33:ed:a8:f2:d2:e0:71:41:a2:6d:4e:9e:70:
f0:17:c8:23:22:c1:8d:24:fb:ce:e7:02:e6:5c:df:
ef:39:2c:de:a7:9e:e0:57:b1:41:90:ba:d7:a6:2f:
76:7d:03:bc:f1:ef:0e:7d:29:83:0a:7a:f4:48:86:
c4:e2:d2:dc:82:81:2f:2d:42:d6:0b:dd:27:b8:0c:
c1:a5:b8:34:47:87:90:1a:40:31:a3:41:a0:22:07:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:EB:C0:C4:5D:5C:F0:FB:E0:F1:0A:FE:F9:80:CD:A8:08:2E:18
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/tyLrwMRdXPD74PEK_vmAzagILhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
Signature Algorithm: sha256WithRSAEncryption
22:91:80:44:32:62:2e:6c:dd:c7:b6:b5:6c:41:63:7c:d0:06:
d6:6a:09:75:d1:ce:87:22:ea:b4:2a:33:ea:91:da:60:ab:79:
b8:0a:a6:01:5d:c8:c4:5e:38:9f:3f:93:81:25:a5:4b:90:9b:
33:0a:1a:76:06:ad:72:40:58:00:73:d3:37:89:c2:ec:59:51:
64:88:bf:1a:85:2b:8b:db:13:c9:ec:bc:e1:d4:85:3b:5c:77:
b1:ae:f7:75:83:5c:90:8c:f2:86:74:0a:ea:c4:f7:42:e1:c3:
1f:24:76:05:f7:27:2c:b6:18:5d:80:8e:c7:16:bb:e4:35:04:
23:f6:8c:7d:f7:c4:0c:8d:d9:f3:b3:52:4b:fb:44:ac:c7:b7:
f8:a6:33:21:1f:e3:3a:33:16:b2:db:83:cd:2e:81:e9:d5:6a:
f7:91:c4:f7:0d:7e:9c:11:31:db:01:05:55:ba:92:3a:7a:03:
50:53:57:6d:05:42:5e:3a:61:29:57:6c:cd:3d:5e:38:e6:e9:
7c:3f:57:c5:22:eb:45:03:8a:7d:2d:62:d8:25:1c:21:42:f1:
91:d0:db:3c:8f:0a:03:84:05:94:70:40:03:e8:44:13:11:e5:
2f:bd:76:f2:35:dd:93:0e:2d:db:16:8c:1c:1a:cf:bd:82:19:
14:ec:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org