Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/jTTF_85yCkCQ8ebKgKlkBMDZUlk.roa
File: jTTF_85yCkCQ8ebKgKlkBMDZUlk.roa (raw, json)
Hash identifier: +HuLTWlkRzxja5epuMI9cIFmQiB6YDG85U5gKunatmw=
Subject key identifier: 8D:34:C5:FF:CE:72:0A:40:90:F1:E6:CA:80:A9:64:04:C0:D9:52:59
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0AD2CC0D
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/jTTF_85yCkCQ8ebKgKlkBMDZUlk.roa
Signing time: Fri 25 Feb 2022 14:41:46 +0000
ROA not before: Fri 25 Feb 2022 14:41:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.237.82.0/24 maxlen: 24
185.237.81.0/24 maxlen: 24
185.237.83.0/24 maxlen: 24
185.205.16.0/24 maxlen: 24
185.86.83.0/24 maxlen: 24
185.86.82.0/24 maxlen: 24
185.205.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181586957 (0xad2cc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Feb 25 14:41:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d34c5ffce720a4090f1e6ca80a96404c0d95259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:79:2c:6a:5c:67:18:6f:09:21:42:9e:54:
38:e7:a2:45:aa:9e:51:8d:50:79:b5:af:2d:41:fd:
2e:1e:b4:88:2a:28:a3:2c:e3:42:77:ee:c6:51:3b:
29:80:d6:42:d0:15:26:2a:97:e1:1e:5c:b4:c1:00:
c3:d2:1d:01:4e:e5:76:e3:f5:b6:03:93:5b:8c:65:
6e:da:9a:1c:6d:fd:5d:78:ac:c7:a4:95:fd:f1:d9:
26:7a:66:63:cf:1f:83:b4:92:69:61:c6:59:e5:64:
b2:80:38:c0:d5:b2:7b:22:08:d0:df:f3:98:52:8c:
c5:26:d1:e0:cb:06:80:c3:98:ed:78:e2:74:7f:93:
7c:7a:1b:b0:97:b7:17:15:13:1e:15:d7:58:f0:e4:
26:c6:23:25:63:0c:23:e3:01:0b:9d:6b:de:99:f5:
4d:ab:aa:cf:28:2c:13:95:97:cd:06:eb:5a:dd:32:
93:ed:b4:16:4e:f5:2c:0b:2d:ee:a9:01:45:50:0b:
ce:5c:68:c7:dc:e5:1a:2a:63:ad:03:f0:bb:a4:59:
f2:93:72:1e:f8:06:68:2f:a6:70:61:69:65:45:b4:
ac:63:e0:3a:bb:80:67:cf:fb:40:9c:5a:fa:12:1a:
25:36:65:33:45:bd:fc:87:61:57:9f:36:d3:3c:fe:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:C5:FF:CE:72:0A:40:90:F1:E6:CA:80:A9:64:04:C0:D9:52:59
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/jTTF_85yCkCQ8ebKgKlkBMDZUlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.82.0/23
185.205.16.0/24
185.205.19.0/24
185.237.81.0-185.237.83.255
Signature Algorithm: sha256WithRSAEncryption
5d:c9:4c:4f:b0:c6:bb:a7:6a:63:67:36:77:b5:68:68:78:81:
ea:f1:96:89:c9:e4:9b:d5:75:1d:d0:12:f7:8a:a3:f7:a3:dc:
4d:42:6f:d4:e4:40:26:d6:47:36:37:23:c0:68:89:e1:63:6e:
61:c7:6b:fa:7d:3f:f1:62:08:ee:9d:33:5b:ca:48:28:81:12:
e8:1b:f7:98:dc:ea:6f:b8:5e:30:22:8f:9f:e5:ac:23:e9:2b:
3d:29:fe:58:db:33:4e:fb:72:cd:e1:ae:2f:2c:79:b9:75:1e:
d8:af:18:03:8f:cb:9e:f0:37:94:6e:f3:74:44:86:63:3a:f0:
bc:62:20:b2:0e:f9:ea:30:f4:c0:16:06:c5:97:83:13:5c:58:
cb:d4:47:8e:58:ed:f0:18:70:dc:0b:3f:f3:ec:34:07:51:3f:
d7:f5:46:06:d6:93:c7:7f:f1:c7:cc:bf:70:8a:31:ca:e6:6b:
8b:01:01:9e:30:24:03:a6:06:fa:96:5f:46:6b:7a:7c:4c:07:
dc:9a:bf:b2:46:de:21:23:58:56:37:46:27:20:4c:ab:6d:1d:
12:cf:80:5a:93:e6:f8:67:6c:dc:74:49:80:44:ee:b7:80:c5:
c4:5e:d0:57:dd:58:10:92:81:b9:df:42:ec:ac:ad:61:7b:ca:
3f:3a:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org