Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ve84Z2UUH0qMrqTPUhjl0iaV4II.roa
File: ve84Z2UUH0qMrqTPUhjl0iaV4II.roa (raw, json)
Hash identifier: bTcty/VV+Qm/UNktfidGLDXnHVMqGa6lK7NLPUZcy9w=
Subject key identifier: BD:EF:38:67:65:14:1F:4A:8C:AE:A4:CF:52:18:E5:D2:26:95:E0:82
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183080A6620622D2ECBC3C6A9A9D935296C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ve84Z2UUH0qMrqTPUhjl0iaV4II.roa
Signing time: Sun 04 Sep 2022 10:27:22 +0000
ROA not before: Sun 04 Sep 2022 10:27:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206425
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:0a:66:20:62:2d:2e:cb:c3:c6:a9:a9:d9:35:29:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 4 10:27:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdef386765141f4a8caea4cf5218e5d22695e082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:93:bb:fd:85:21:22:47:06:4f:46:d6:c5:a4:
3b:5d:20:0e:70:75:a7:e7:e7:9b:eb:8a:4f:74:06:
15:e3:df:0b:aa:1e:0c:90:9b:20:ee:ea:47:7e:73:
b9:78:75:5f:90:89:a8:b3:f9:ab:8a:4f:f0:cd:49:
f4:10:62:03:55:b1:7f:94:c9:b4:ec:bc:52:2b:0b:
f2:36:f7:ff:fa:a0:b9:37:2b:97:59:05:52:f2:ec:
20:41:fd:57:51:55:28:5d:45:45:6c:4c:ff:62:d5:
bd:b7:7b:d8:9c:7f:60:ae:b9:50:7c:f2:52:5a:b1:
16:bb:c5:d8:d7:3a:fd:ab:a7:b4:60:8f:c0:13:b0:
cc:dc:ea:11:af:e8:97:19:f3:dd:ae:1d:38:61:4f:
83:07:88:a4:15:e5:3c:c0:d7:5b:b8:ea:6c:7e:ca:
6b:ef:9b:8b:b2:69:36:54:5b:e0:64:26:25:2c:4e:
5f:bf:27:cd:37:13:8d:b8:47:19:68:b4:38:12:d5:
20:cb:58:31:2f:db:c4:ac:3d:2f:f3:58:ea:ed:d2:
b4:d9:69:c8:10:69:94:31:87:b8:56:d8:3f:8c:3d:
4b:87:15:e5:32:cc:e8:d0:1a:3c:8f:f8:6f:ba:4b:
55:16:5a:9d:b6:f4:58:b6:ee:f3:1f:74:77:64:f5:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:38:67:65:14:1F:4A:8C:AE:A4:CF:52:18:E5:D2:26:95:E0:82
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ve84Z2UUH0qMrqTPUhjl0iaV4II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.222.0/23
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f4:91:19:52:b6:ef:1e:c3:83:cd:ea:28:8f:77:01:d1:5e:
9e:9d:cb:56:55:1a:3f:79:07:4f:16:9e:44:02:1c:d3:77:f7:
d3:5e:ff:0b:d4:73:a8:6d:da:2f:df:ad:b3:e2:ab:4b:dd:d3:
93:bc:ad:b1:76:28:ec:41:1c:5c:79:cd:93:d5:f5:a2:23:64:
64:23:a1:b7:d8:ce:e9:eb:b7:74:1c:0e:eb:bd:7b:6a:f1:e3:
12:56:1a:62:bf:b5:e6:2b:1d:7b:37:76:08:4f:dd:c7:26:cd:
41:ba:8f:4f:ae:1e:cf:f1:8b:e5:2a:df:e6:7f:dd:a1:1a:a4:
bf:21:83:55:2c:b3:d4:16:85:cc:c3:4e:cd:1b:55:da:41:0f:
d2:4a:1d:44:6c:94:50:a2:bf:02:5e:01:39:8e:5a:7a:1f:4e:
3b:8b:bf:83:e3:d7:1b:43:f3:55:5b:d1:ec:cc:02:ab:dd:d5:
4d:4e:cc:fc:f6:c5:29:6c:14:56:db:8a:3f:48:91:00:67:61:
7a:48:26:c7:68:c2:50:3d:a3:ec:ef:8a:46:c3:98:d2:15:30:
80:c6:e2:6f:a7:9c:b9:81:6d:da:db:b9:e9:0e:d8:44:37:1d:
eb:5c:1c:f7:de:b2:c0:92:a7:af:ec:b5:50:77:c6:98:a4:70:
ef:6d:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org