Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/2LI1FZgokvqKQ_5g0UskrqFYMOU.roa
File: 2LI1FZgokvqKQ_5g0UskrqFYMOU.roa (raw, json)
Hash identifier: FT5I/81A6L3vM2Jdvcueupk9yytsbYvma/ghD0TGCrM=
Subject key identifier: D8:B2:35:15:98:28:92:FA:8A:43:FE:60:D1:4B:24:AE:A1:58:30:E5
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 0183C1DF3CC1B23B6713FAC1AF5BE44E010A
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/2LI1FZgokvqKQ_5g0UskrqFYMOU.roa
Signing time: Mon 10 Oct 2022 12:29:36 +0000
ROA not before: Mon 10 Oct 2022 12:29:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202829
IP address blocks: 185.152.188.0/22 maxlen: 24
194.11.83.0/24 maxlen: 24
194.11.16.0/24 maxlen: 24
194.11.19.0/24 maxlen: 24
194.11.25.0/24 maxlen: 24
2a07:80c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:df:3c:c1:b2:3b:67:13:fa:c1:af:5b:e4:4e:01:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Oct 10 12:29:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8b23515982892fa8a43fe60d14b24aea15830e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:0c:95:05:34:c9:7b:34:87:94:bf:38:4f:
6f:a4:f7:00:3b:4d:12:06:11:4a:c3:22:d8:46:05:
44:de:97:78:04:6b:7e:3e:1a:cd:61:f2:45:4f:af:
b1:51:f6:bb:dc:60:e5:b1:de:b4:ee:5f:70:52:09:
ae:d6:65:63:35:72:06:9d:1e:e8:fe:f8:da:92:af:
47:08:bd:c0:c6:f2:89:66:12:9e:ae:9c:9e:2e:98:
e3:36:76:2c:47:8d:47:78:fd:7e:6d:dd:d9:2d:8d:
11:91:a6:6e:7f:6a:a8:02:c7:4d:4d:f9:48:84:d0:
1c:65:39:f3:1e:2a:de:7c:de:00:3d:76:e4:f8:e2:
bb:43:65:8a:43:9f:a4:40:12:32:19:af:84:2e:df:
25:ba:b1:18:cc:e1:72:81:d3:87:c1:e2:8e:bf:2b:
b1:52:94:cc:e4:81:0f:db:37:67:4e:49:55:ce:de:
f9:0b:4f:41:a4:66:43:b7:0c:4e:67:6d:2e:3b:24:
0d:42:96:8a:d6:40:f6:b4:c1:7b:73:e6:c7:ef:d4:
66:b7:54:08:81:14:98:86:95:67:47:9d:11:70:be:
d3:af:44:b6:d3:12:0e:e4:e2:14:6e:1b:6e:d1:91:
37:10:fb:ef:2a:e2:87:2f:15:bd:27:ad:8f:96:6b:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B2:35:15:98:28:92:FA:8A:43:FE:60:D1:4B:24:AE:A1:58:30:E5
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/2LI1FZgokvqKQ_5g0UskrqFYMOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.188.0/22
194.11.16.0/24
194.11.19.0/24
194.11.25.0/24
194.11.83.0/24
IPv6:
2a07:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
41:6d:9b:a3:c0:ad:ce:22:66:9d:b0:60:ce:40:37:18:3d:01:
74:63:cd:22:4c:13:e9:c4:11:3b:b0:fc:2f:5a:86:57:6c:97:
73:cd:9d:bd:0f:23:5d:52:e9:10:a3:38:18:2e:86:bc:f1:c8:
f0:fc:e5:19:64:c0:1f:c3:68:59:da:55:ed:34:68:6a:0d:09:
fd:72:fc:ac:54:1b:09:89:df:c1:9e:0e:e5:cd:d6:56:9c:b7:
47:83:a6:8a:68:62:fd:9e:10:ee:e6:2b:33:26:75:ad:2d:0e:
25:42:6d:5d:69:01:77:14:74:78:a7:b6:ec:c9:7d:da:85:2c:
d6:02:a2:70:c1:a8:a2:c5:cb:42:b0:10:fb:05:70:42:29:6d:
77:31:f6:7d:2f:de:6a:dc:e6:fe:fa:e3:f6:aa:31:a9:71:a4:
c1:c6:b7:e8:3c:41:82:c2:b7:35:dc:d1:bb:84:4b:4d:d2:cc:
2b:74:74:8d:1f:12:83:dd:a6:8d:2a:db:14:a6:f6:46:1e:ae:
43:6d:f2:17:4b:67:bc:6b:b8:04:e1:58:58:aa:db:ee:5b:2b:
d9:47:e7:0d:7d:9f:a2:5b:04:6d:2d:01:ab:7d:f4:35:24:b7:
50:8e:6d:8a:07:bb:16:77:63:90:61:34:9d:80:e7:93:5a:c1:
53:99:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:10 2024 by rpki-client on console-ams.rpki-client.org