Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ln4EM0KZUNM86ojjDU6OVDV4wuo.roa
File: ln4EM0KZUNM86ojjDU6OVDV4wuo.roa (raw, json)
Hash identifier: dPTUCAfqxXPRDznK8903SELukDVdHsmyTIHYuSVGpvg=
Subject key identifier: 96:7E:04:33:42:99:50:D3:3C:EA:88:E3:0D:4E:8E:54:35:78:C2:EA
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 018298F3AA4116A60354290319A0E8180B28
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ln4EM0KZUNM86ojjDU6OVDV4wuo.roa
Signing time: Sat 13 Aug 2022 20:44:41 +0000
ROA not before: Sat 13 Aug 2022 20:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.237.82.0/24 maxlen: 24
185.237.81.0/24 maxlen: 24
185.237.83.0/24 maxlen: 24
185.86.81.0/24 maxlen: 24
185.86.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:98:f3:aa:41:16:a6:03:54:29:03:19:a0:e8:18:0b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Aug 13 20:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967e0433429950d33cea88e30d4e8e543578c2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:91:0a:e6:05:84:41:7a:1d:a6:65:ed:02:
8d:39:1b:8b:13:33:0a:ec:8f:93:2b:8d:e9:d8:7a:
70:a4:d1:19:39:3d:ec:b8:f9:33:db:07:66:bd:a8:
6a:9c:f7:68:83:09:29:4f:58:b0:01:ac:49:44:07:
c5:57:34:ce:72:e6:3f:9f:cd:c0:c2:26:b8:2c:16:
07:3b:50:68:c4:8a:c4:2e:c0:a2:60:e3:10:62:24:
c1:50:3d:d0:de:64:d1:35:93:5e:9e:19:11:32:3b:
de:65:83:53:4c:7d:91:54:6b:ba:84:03:4d:76:33:
c0:8c:db:cf:0c:91:45:83:1b:1c:57:35:cd:a2:62:
cf:d0:fc:c1:f1:7f:4f:e5:5f:0e:b4:7a:d5:47:41:
e2:d7:9b:61:ce:0f:d5:c7:df:b2:1d:16:d4:6a:6a:
9a:6f:23:9b:62:0f:d0:bd:94:41:14:18:e2:cd:20:
72:41:f7:2a:ed:69:c7:5a:34:ea:22:b9:36:ee:26:
6a:d5:e6:cf:05:dd:35:75:9f:01:68:a7:e5:64:0c:
d0:f7:e3:d1:5f:3e:7d:20:f6:1c:89:98:5d:40:b9:
04:85:30:66:80:d8:84:7f:a2:9c:fd:44:ef:54:46:
92:1f:c2:e4:84:f6:a6:e7:15:ec:d3:c3:11:03:cd:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:04:33:42:99:50:D3:3C:EA:88:E3:0D:4E:8E:54:35:78:C2:EA
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ln4EM0KZUNM86ojjDU6OVDV4wuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.80.0/23
185.237.81.0-185.237.83.255
Signature Algorithm: sha256WithRSAEncryption
b3:7b:85:c6:19:85:7b:58:72:33:36:21:50:50:ce:ef:43:08:
71:64:91:7f:c8:33:68:1f:31:b0:cd:9a:5e:03:8e:9b:e8:18:
da:16:29:62:2b:c3:6f:d1:73:ec:6c:77:35:6f:e0:ef:9e:c3:
fc:2c:53:d5:11:69:eb:d4:7c:7d:78:fa:7c:00:37:cb:e5:fe:
f8:7b:52:86:8d:ba:04:fe:89:c6:22:1c:f6:a7:58:fb:51:63:
91:e0:38:4d:7b:ca:59:80:bd:92:a6:3c:26:0c:e9:4d:24:33:
10:3f:42:94:d2:2d:1b:f0:cd:49:d3:2a:9f:ae:f0:20:6a:18:
96:be:62:b5:bc:39:cc:08:fc:58:99:56:d5:d1:a8:a4:cb:af:
72:70:5a:60:ec:a5:60:96:46:15:aa:aa:03:30:6c:5e:41:34:
cd:4b:f0:2c:40:f2:11:d8:39:3a:92:ef:ba:66:e0:c6:fb:7d:
6e:0d:56:f4:b2:cf:c9:32:e6:d1:c6:6b:45:e6:30:af:eb:62:
2c:ec:e5:97:f5:02:f5:ea:37:a7:93:7a:18:32:da:35:16:17:
cc:7a:74:46:48:ef:95:41:c3:cc:03:01:4a:ce:4e:a7:52:05:
dd:10:b6:81:ef:69:ae:43:e9:f0:39:a4:4b:0a:ec:57:18:68:
c8:a7:1e:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org