Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/vYb_mM62lST9EEDRv34zje22HPg.roa
File: vYb_mM62lST9EEDRv34zje22HPg.roa (raw, json)
Hash identifier: xN2lfBPZdFeOZeHIgKYj/DM6zgqMQMfxFd2G81H2Wl8=
Subject key identifier: BD:86:FF:98:CE:B6:95:24:FD:10:40:D1:BF:7E:33:8D:ED:B6:1C:F8
Certificate issuer: /CN=ce8d92ace08011c4d0aec8f22865715bd91a0122
Certificate serial: 11A3A59C
Authority key identifier: CE:8D:92:AC:E0:80:11:C4:D0:AE:C8:F2:28:65:71:5B:D9:1A:01:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo2SrOCAEcTQrsjyKGVxW9kaASI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/vYb_mM62lST9EEDRv34zje22HPg.roa
Signing time: Sat 01 Jan 2022 11:03:29 +0000
ROA not before: Sat 01 Jan 2022 11:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202657
IP address blocks: 185.158.64.0/22 maxlen: 32
2a07:aa80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295937436 (0x11a3a59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8d92ace08011c4d0aec8f22865715bd91a0122
Validity
Not Before: Jan 1 11:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd86ff98ceb69524fd1040d1bf7e338dedb61cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:59:18:28:13:4d:f5:b5:5d:e2:ad:70:0e:
5a:9b:48:75:4b:82:44:02:4d:99:2a:a2:33:0a:dd:
2a:f8:4f:47:cd:77:0a:57:b9:a0:c9:cd:5b:af:52:
06:eb:98:54:d6:7f:3b:f4:83:f8:bb:d3:d7:4a:97:
02:77:1a:35:0a:51:76:f7:76:d4:13:8c:a6:8f:f1:
38:4d:c7:e8:20:eb:2f:cc:2e:8a:51:81:21:a6:c0:
e5:cc:d2:32:74:5a:3a:c8:34:fa:cd:1c:6c:7e:bd:
75:73:4b:91:f0:8f:90:99:ba:7d:5e:56:d1:20:c0:
12:3c:6f:24:f2:03:f1:69:49:a8:34:1b:6d:f0:15:
cc:3e:80:33:b2:3b:19:fb:d6:7c:73:f6:89:71:a9:
5b:ca:a6:8e:80:ae:6c:07:fa:77:d8:36:f2:7c:ae:
1d:ad:aa:73:5e:08:af:f8:92:d8:6e:db:29:54:6d:
fd:46:c5:a2:be:f9:9f:4b:e4:7d:a7:03:6e:1a:5b:
07:0e:13:57:fd:bf:b4:a7:99:05:3d:5f:0d:3b:6c:
df:cf:07:b4:1e:75:f7:9f:85:b7:8a:e9:c8:b0:09:
d1:81:29:9f:74:8c:49:e5:aa:71:80:cf:10:43:92:
93:ad:fb:8a:6c:c3:bf:91:5e:e4:bd:fc:2b:33:9a:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:FF:98:CE:B6:95:24:FD:10:40:D1:BF:7E:33:8D:ED:B6:1C:F8
X509v3 Authority Key Identifier:
keyid:CE:8D:92:AC:E0:80:11:C4:D0:AE:C8:F2:28:65:71:5B:D9:1A:01:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo2SrOCAEcTQrsjyKGVxW9kaASI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/vYb_mM62lST9EEDRv34zje22HPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.64.0/22
IPv6:
2a07:aa80::/29
Signature Algorithm: sha256WithRSAEncryption
05:64:e4:c5:c1:8d:cf:bd:3b:7d:50:a1:7d:b3:e8:81:7e:2f:
9a:36:a3:15:f1:82:b0:60:18:10:39:b7:9f:c9:b7:dd:88:54:
7b:24:b9:eb:7f:81:1b:d4:3f:f7:0b:eb:94:23:41:2c:76:2e:
94:16:6d:85:20:fd:af:24:27:c9:7b:be:0d:d6:b9:07:8a:7c:
97:eb:1c:83:27:c2:2f:37:52:0e:12:36:7d:43:8e:7f:46:24:
4a:2f:d9:09:38:5f:18:ce:af:c1:40:75:04:b1:c9:a8:90:0e:
82:4a:b2:82:18:15:6d:ad:88:05:39:0c:19:1d:9b:67:88:77:
99:9e:dc:cf:4b:4b:4c:62:bb:42:37:e5:71:de:9b:72:90:49:
8d:49:1a:dc:6d:5f:cf:ca:5f:24:26:8c:30:46:05:db:5a:ec:
31:b0:fd:a8:43:5f:9e:0e:a9:c5:f0:ca:13:6a:0e:f7:a8:07:
b1:90:d2:ef:81:e7:a8:2a:92:09:53:c9:ab:57:5b:c5:8e:0f:
d8:3d:4b:4e:01:24:61:9f:5c:b3:ee:76:5d:17:bb:ff:1f:71:
d7:12:a9:21:3e:2e:4a:3c:d0:ea:78:5e:e7:46:2b:03:61:6d:
16:90:e3:ca:4c:f5:d3:81:7b:5c:f6:bd:a3:67:df:14:f8:32:
b2:d8:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:52 2024 by rpki-client on console-fra.rpki-client.org