Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bO0Rk1LWXFFeopqzhSaxUmFSRJQ.roa
File: bO0Rk1LWXFFeopqzhSaxUmFSRJQ.roa (raw, json)
Hash identifier: x4TMVRarFfL6bVMBkAKw/23UmXw1UGClJgDT+BMYRvg=
Subject key identifier: 6C:ED:11:93:52:D6:5C:51:5E:A2:9A:B3:85:26:B1:52:61:52:44:94
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01852A65B325C54E366FFCFB6E028F47D098
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bO0Rk1LWXFFeopqzhSaxUmFSRJQ.roa
Signing time: Mon 19 Dec 2022 12:39:46 +0000
ROA not before: Mon 19 Dec 2022 12:39:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.131.188.0/22 maxlen: 24
141.98.52.0/22 maxlen: 24
185.123.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:65:b3:25:c5:4e:36:6f:fc:fb:6e:02:8f:47:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 19 12:39:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ced119352d65c515ea29ab38526b15261524494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:76:cf:65:ce:1a:22:a1:3d:11:38:88:57:
bf:87:eb:84:31:3d:7d:bb:b3:28:a3:4e:96:1f:aa:
52:da:e1:f5:4a:bf:06:d4:73:c4:17:5e:1a:fd:a1:
aa:d2:8e:ec:1f:16:3c:3c:5d:b3:29:24:e0:a4:c5:
64:44:69:0d:82:90:ce:64:fc:a4:03:25:d1:91:82:
77:0e:05:18:b7:c6:3d:a6:93:9e:0f:f5:b5:74:0b:
3a:98:a8:b2:36:7c:ad:cf:b1:d4:4a:87:39:ad:5a:
79:c2:cb:fa:5a:d2:05:a0:c8:74:be:87:31:41:97:
33:b1:f1:cb:80:ad:6e:5c:d7:43:59:db:fe:17:79:
4d:d4:7f:c0:5c:ac:b8:19:ec:d1:59:73:cb:50:29:
ef:1d:93:05:8b:bc:d3:ad:52:15:e0:8c:ff:bf:5b:
fd:d5:0a:03:b0:7c:06:b4:4a:b1:58:a5:c7:cf:b7:
8e:2f:fc:79:33:6a:2a:30:15:bc:3a:29:c7:01:19:
f0:d6:a6:97:bb:90:f9:39:26:ab:cb:d0:ee:f1:f6:
7c:e4:37:a7:c0:2c:f6:a4:9d:f9:7f:57:a4:e8:ff:
41:f5:ba:b4:83:5a:d8:b4:28:f8:c7:9b:51:d2:56:
95:81:7c:cd:06:b7:1d:66:8f:3a:63:5d:b1:73:65:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:ED:11:93:52:D6:5C:51:5E:A2:9A:B3:85:26:B1:52:61:52:44:94
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bO0Rk1LWXFFeopqzhSaxUmFSRJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.52.0/22
185.123.136.0/22
185.131.188.0/22
Signature Algorithm: sha256WithRSAEncryption
78:aa:33:5d:20:6a:73:94:6c:ba:8d:e0:d1:ed:8e:63:d7:59:
7c:e7:27:65:bd:e7:d9:a1:0a:38:b5:8f:25:7a:54:5f:7b:c8:
0c:cc:42:64:88:54:66:4d:9e:bc:9d:79:c9:ad:13:6b:a6:0d:
92:d8:5e:60:36:79:b3:ff:6e:79:d6:1f:2c:7e:3f:ec:ef:1e:
65:ca:fd:d1:d6:6a:7f:b1:39:cb:d3:30:d7:7c:a6:a7:96:bb:
22:18:99:54:c0:e6:53:cc:56:16:26:3a:aa:aa:c7:16:e8:47:
6d:5f:ff:d2:7e:c2:2a:ca:b8:51:0d:59:00:ac:8c:17:41:86:
f9:b5:43:19:7c:39:21:3b:27:f5:0e:c8:c1:29:70:28:fe:65:
26:60:a5:97:86:3a:e4:3c:c6:fa:9b:85:49:ad:e6:fc:4c:d7:
df:ef:c7:ce:ea:01:2e:02:e4:64:f7:4e:13:6f:11:f2:ee:71:
d5:6f:22:e1:05:f9:a6:30:28:7f:66:de:26:1d:fd:93:57:52:
16:e8:1f:f3:6c:c7:24:67:5c:48:f8:b8:f6:c6:33:d1:5f:4f:
f9:ec:16:57:b6:ae:95:00:a3:ea:56:90:0b:a5:9d:bc:10:96:
04:80:f5:17:37:b3:74:0d:e0:19:9b:d7:db:a3:36:4d:a5:9c:
f3:44:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org