Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/2ibkSXh2tytfk2bLN0CxmXHJNbk.roa
File: 2ibkSXh2tytfk2bLN0CxmXHJNbk.roa (raw, json)
Hash identifier: j/WFB4VMqPfd4hAAvXjHviBKBnqUlUxiQW6t77n2y1U=
Subject key identifier: DA:26:E4:49:78:76:B7:2B:5F:93:66:CB:37:40:B1:99:71:C9:35:B9
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 018298F3AAB2049DD2B2F59A162910296A99
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/2ibkSXh2tytfk2bLN0CxmXHJNbk.roa
Signing time: Sat 13 Aug 2022 20:44:41 +0000
ROA not before: Sat 13 Aug 2022 20:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201086
IP address blocks: 185.205.19.0/24 maxlen: 24
193.36.63.0/24 maxlen: 24
185.254.94.0/24 maxlen: 24
2a05:b700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:98:f3:aa:b2:04:9d:d2:b2:f5:9a:16:29:10:29:6a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Aug 13 20:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da26e4497876b72b5f9366cb3740b19971c935b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:71:9e:ae:88:cb:8a:49:27:d0:40:43:4a:
6b:90:72:ab:0a:5b:fb:27:7e:95:19:20:10:b1:00:
12:14:a8:f1:49:6f:68:97:82:80:c3:c6:6a:4d:ee:
36:e2:60:96:11:25:c6:db:99:b4:2e:d1:c8:b5:18:
13:be:ff:c8:23:71:f1:a8:d4:c6:0d:0f:27:df:f9:
9f:72:2a:81:48:df:31:7b:ec:58:19:a2:f2:33:8a:
af:67:cc:a5:25:1b:83:2c:37:af:ba:24:03:76:a8:
a4:8a:9e:a0:de:b0:ed:3c:05:f4:6f:66:ea:e6:59:
05:f7:78:e3:8f:2e:3b:a7:40:2d:18:34:f4:62:b7:
58:60:1f:c1:fd:34:cb:08:65:44:47:18:35:06:26:
b5:b3:95:b4:af:62:fb:06:70:d2:df:f4:f5:10:46:
fd:5f:83:15:aa:5a:0d:31:ae:ad:d7:58:4e:5d:b0:
41:82:27:72:6a:8f:41:61:9b:db:be:5a:66:ff:21:
f9:df:05:fe:b9:33:ae:42:0d:9d:cb:2a:6e:3a:cf:
79:43:71:0a:ef:4f:b5:a0:42:e5:20:cc:3e:e1:35:
e6:d6:39:41:2e:b3:bc:80:ae:ef:a6:f6:08:aa:c5:
d0:bb:df:e6:42:4e:ba:a6:b6:65:e2:04:26:50:08:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:E4:49:78:76:B7:2B:5F:93:66:CB:37:40:B1:99:71:C9:35:B9
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/2ibkSXh2tytfk2bLN0CxmXHJNbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.19.0/24
185.254.94.0/24
193.36.63.0/24
IPv6:
2a05:b700::/29
Signature Algorithm: sha256WithRSAEncryption
38:d8:bb:8c:62:2d:e1:0f:c5:f4:a0:d7:3e:de:85:f6:b9:93:
1a:47:40:af:c8:89:df:af:3b:72:09:40:3c:7f:35:77:48:c3:
c8:2e:21:21:4d:16:f7:1f:8e:e8:71:c0:27:ea:e2:95:79:23:
71:a4:bb:5c:83:90:65:fe:1a:0f:74:29:61:c4:62:fc:1a:41:
45:43:49:a0:92:c4:16:72:80:61:07:b2:d7:d8:4b:9c:3f:eb:
49:92:a3:e7:6a:fc:5d:3d:51:40:bb:6d:c6:de:68:36:d9:1a:
85:f0:b8:54:cc:68:26:6b:e7:d0:16:1b:53:eb:5e:fd:28:5e:
3e:96:2d:50:ee:9e:41:bc:66:25:90:92:a4:42:50:26:b4:7e:
b3:36:32:de:23:fb:09:fc:0e:ae:51:37:91:66:78:6b:3e:33:
94:c4:98:cb:88:05:06:fd:7f:d3:e0:57:ef:80:bb:cf:4e:ea:
5d:bd:40:e8:1a:d4:5a:b5:9d:ea:c7:e7:8a:f0:1f:22:0d:f8:
5d:27:2d:ba:32:66:d5:a3:19:cd:8e:c4:a0:ea:3a:c8:b0:74:
7f:31:53:a9:b7:d0:26:77:2a:75:89:30:26:ed:71:90:cc:91:
6a:88:9d:2d:5f:51:2b:50:4b:db:9e:47:53:cb:75:6c:4b:a6:
de:6f:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org