Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Vo0cgU8JauDYYxn52JIBCtLGcHg.roa
File: Vo0cgU8JauDYYxn52JIBCtLGcHg.roa (raw, json)
Hash identifier: 2gAF6S2gMZk2kJxd8jnwaVpo9eQwgcaAv807M5fdQ18=
Subject key identifier: 56:8D:1C:81:4F:09:6A:E0:D8:63:19:F9:D8:92:01:0A:D2:C6:70:78
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 134DE66B
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Vo0cgU8JauDYYxn52JIBCtLGcHg.roa
Signing time: Sat 01 Jan 2022 05:54:04 +0000
ROA not before: Sat 01 Jan 2022 05:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197834
IP address blocks: 185.13.196.0/22 maxlen: 24
176.32.192.0/23 maxlen: 24
176.32.194.0/23 maxlen: 24
176.32.198.0/23 maxlen: 24
176.32.196.0/23 maxlen: 24
176.32.192.236/32 maxlen: 32
109.75.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323872363 (0x134de66b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 05:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=568d1c814f096ae0d86319f9d892010ad2c67078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:d0:f6:5c:05:5a:85:e5:90:3c:8f:2c:9e:
5a:c2:49:02:66:3f:10:eb:6c:66:7f:55:37:8a:59:
4e:f7:b0:8c:fc:02:0a:06:bc:e9:bc:23:bf:b5:f8:
63:dc:10:df:ec:e4:cf:02:dc:5f:e7:5a:d5:35:c0:
74:ee:33:94:18:82:fb:15:a8:78:0d:73:56:bf:a0:
c9:b3:d8:54:fa:eb:0b:9e:8b:d4:79:c7:4b:96:ad:
82:2e:8c:8f:6e:61:ee:a7:92:db:58:fe:ff:a4:98:
e1:da:ce:4e:8c:3f:81:17:7a:1a:71:17:a5:20:4d:
f3:45:93:20:aa:5f:bb:34:0c:a2:71:0e:ec:39:a2:
8a:40:c3:fa:9c:29:ae:9a:a0:df:5f:0c:0f:69:39:
30:1b:3b:6f:aa:63:b3:e7:8c:d1:a3:ff:be:9e:e3:
be:2e:76:a1:0b:e8:6f:50:52:0d:35:42:c5:11:97:
9a:29:0c:27:ac:98:1d:0a:71:31:c9:1d:8a:86:55:
7d:9f:e5:ae:e1:be:3f:b1:26:11:91:02:50:63:a5:
fc:39:05:84:e9:56:4b:1e:9d:44:47:e5:26:50:64:
fd:23:1a:e0:47:95:5c:4f:33:0e:14:71:7d:12:9a:
8a:b3:16:2d:09:93:98:e1:46:2c:c1:f8:83:e6:5b:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:1C:81:4F:09:6A:E0:D8:63:19:F9:D8:92:01:0A:D2:C6:70:78
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Vo0cgU8JauDYYxn52JIBCtLGcHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.32.0/23
176.32.192.0/21
185.13.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:82:39:5a:a0:4e:f9:df:f0:f7:da:71:e5:c7:85:8a:35:92:
92:a0:ff:a3:a0:aa:84:d9:f6:c2:03:6a:e2:7d:a6:49:ed:88:
c5:24:f1:a5:ab:c1:17:22:c7:8d:b4:3a:ba:a6:be:8c:86:e0:
f2:ae:8c:7d:8d:8c:c6:05:2a:5e:4d:2f:33:d2:f5:20:69:53:
65:94:06:96:c1:4a:d2:33:1d:43:3a:1d:91:f0:78:5a:49:5b:
be:51:02:65:97:95:21:5b:0b:3c:ef:24:14:7b:d0:69:87:9d:
eb:eb:7c:ca:59:9f:e9:09:b5:0f:fe:0f:5d:1c:df:2f:61:e8:
49:34:fa:b4:31:21:14:56:0b:19:6d:30:bd:d7:19:d8:49:63:
67:7a:a7:f8:10:8f:ed:f7:9d:5f:38:65:1e:3e:35:01:2f:3e:
39:e6:39:70:9f:b4:b4:e5:7a:b4:c9:6e:82:09:c6:ba:fd:6b:
62:eb:1f:30:1b:63:46:c1:b0:b4:4a:29:cb:cf:84:b2:b7:9e:
0b:a1:0c:1f:1d:f7:3b:47:d3:4d:cf:0b:8a:47:68:22:a1:b3:
44:90:2b:5e:52:4c:e3:75:16:2b:ce:17:03:ef:f7:d4:76:bf:
c2:48:24:b8:1f:e8:48:0d:a8:b5:d7:e2:4c:e8:c9:4d:68:60:
f1:65:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-ams.rpki-client.org