Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/y_e2BeDzUFSoLoZMxebW-22kOeM.roa
File: y_e2BeDzUFSoLoZMxebW-22kOeM.roa (raw, json)
Hash identifier: EXilNgKQhaPDC2bjp2S1qctsvlriGVfcKREubHfpTOY=
Subject key identifier: CB:F7:B6:05:E0:F3:50:54:A8:2E:86:4C:C5:E6:D6:FB:6D:A4:39:E3
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01852A2EC54DA901283FC3E770AE48C61539
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/y_e2BeDzUFSoLoZMxebW-22kOeM.roa
Signing time: Mon 19 Dec 2022 11:39:46 +0000
ROA not before: Mon 19 Dec 2022 11:39:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206208
IP address blocks: 185.158.52.0/22 maxlen: 24
95.178.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:2e:c5:4d:a9:01:28:3f:c3:e7:70:ae:48:c6:15:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 19 11:39:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbf7b605e0f35054a82e864cc5e6d6fb6da439e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:b5:92:33:4d:fe:4e:10:f4:c8:8b:75:87:
c4:e3:c2:f5:f0:ec:39:9e:70:84:14:33:52:61:86:
6b:aa:19:58:24:32:28:73:6e:08:7e:5a:57:ea:73:
5f:e7:1a:0e:05:28:1b:3c:e0:94:80:e2:cd:78:20:
30:e3:ab:af:38:89:50:b9:82:9a:79:fd:c4:01:75:
97:35:58:c9:a1:ae:44:70:63:28:6d:bc:be:e5:39:
13:72:94:40:4e:39:25:a6:2e:5b:05:01:84:b2:91:
ad:b2:f5:8a:24:9a:9f:b5:e4:d9:1b:9b:a5:3d:4c:
3c:e9:45:4f:ce:5c:c9:7a:27:06:e2:2a:d8:cb:15:
a2:92:2d:71:17:74:f7:84:73:23:5d:d3:5d:43:86:
25:bb:39:42:be:23:8a:b1:6e:28:58:a4:78:73:95:
21:43:37:32:a1:55:b0:4b:ec:26:9e:f5:44:20:9e:
78:53:ca:62:4c:00:2c:51:ad:d9:2b:51:c4:81:03:
3e:e2:0a:0e:d9:33:73:c4:0c:91:24:5f:b3:3a:1d:
00:cf:b2:67:3b:32:b5:a1:3e:2c:48:81:6e:49:9c:
4d:76:ce:10:0b:9f:5c:e1:96:ea:76:8e:c1:04:fd:
45:29:1b:5c:0a:fd:ca:4b:66:c0:cb:ae:00:5e:8a:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:B6:05:E0:F3:50:54:A8:2E:86:4C:C5:E6:D6:FB:6D:A4:39:E3
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/y_e2BeDzUFSoLoZMxebW-22kOeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.39.0/24
185.158.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:59:7b:c5:8a:66:ec:b6:43:c3:8b:45:4e:dd:70:bc:cc:c0:
d0:ec:a2:db:37:5f:8f:a9:fe:9f:70:d7:ce:5f:0a:21:7a:e2:
6e:01:e2:f4:7e:8d:3e:f2:57:53:b5:98:fd:c0:2f:60:b9:07:
43:10:59:af:d3:85:4e:4e:0d:09:c3:9b:15:db:90:ca:0e:de:
e2:36:43:7d:6b:d5:62:80:02:e0:e6:80:e5:10:4d:fb:6f:44:
49:64:12:70:d2:39:41:39:8a:bd:eb:cd:0c:ff:d8:0a:31:f9:
9f:ea:61:a8:1c:ae:64:ec:29:1a:e2:1b:7f:e6:a3:55:24:c4:
72:3c:62:49:2a:82:ba:f2:c1:12:df:65:c6:86:c7:5f:a6:d9:
30:4f:4d:db:bb:a9:e2:3f:df:6d:98:3b:8c:62:e5:63:cf:8d:
96:52:12:9e:73:ea:bc:22:88:08:79:b6:3f:e7:fe:e0:83:15:
d3:5f:c3:df:8e:0d:b6:7e:36:cd:9d:9f:9e:dd:d6:a6:fb:5d:
cb:04:bf:af:0b:1f:27:d9:10:fe:a4:c5:20:57:53:48:9f:81:
e2:6e:3a:52:e5:7e:63:30:0e:16:92:84:3c:e8:d9:6d:72:1b:
0b:c0:26:45:1b:cb:41:60:f2:25:ce:d4:42:63:94:49:d8:3e:
a5:fb:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org