Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/vyD4GRmH0WR-PgFZ68N80HMt3Mc.roa
File: vyD4GRmH0WR-PgFZ68N80HMt3Mc.roa (raw, json)
Hash identifier: mrSpSPK6iDPc3rCqcRIEsFIxWCpNsSaj2nqxmkAr4Hk=
Subject key identifier: BF:20:F8:19:19:87:D1:64:7E:3E:01:59:EB:C3:7C:D0:73:2D:DC:C7
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0A877791
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/vyD4GRmH0WR-PgFZ68N80HMt3Mc.roa
Signing time: Sat 29 Jan 2022 12:05:40 +0000
ROA not before: Sat 29 Jan 2022 12:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 194.145.137.0/24 maxlen: 24
185.237.82.0/24 maxlen: 24
185.237.83.0/24 maxlen: 24
194.145.138.0/24 maxlen: 24
185.205.16.0/24 maxlen: 24
185.86.83.0/24 maxlen: 24
185.86.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176650129 (0xa877791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 29 12:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf20f8191987d1647e3e0159ebc37cd0732ddcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:e3:63:d5:b2:18:19:2e:0e:13:db:5d:0e:
29:2c:e2:6f:b0:1d:f4:44:5e:78:76:cb:34:92:22:
b9:bf:73:60:25:4f:77:c1:47:5c:f0:4a:60:6e:75:
8a:bb:90:40:ad:8c:54:4a:56:07:81:41:ba:a8:25:
f7:c8:40:fa:7f:56:45:bb:0b:3d:2f:1b:76:59:67:
72:42:ca:7a:47:27:fb:0d:6f:4f:ef:db:98:e2:f4:
7b:90:c1:19:69:7c:1b:b3:8a:9f:d6:78:46:88:4c:
52:96:48:74:c8:d3:96:2f:f6:e4:9d:c9:de:10:be:
33:20:4f:f9:19:da:d3:fc:b5:71:5b:93:db:3f:7f:
25:90:fc:80:76:17:f9:33:b2:4a:55:1d:47:b1:cd:
87:4c:40:d7:2c:68:4c:a5:7f:2d:0e:35:af:60:3c:
0f:be:0f:bb:35:38:b4:f3:ea:67:ad:e3:00:89:f9:
2f:00:63:28:01:d4:be:3e:00:d9:d5:13:10:fa:45:
0a:18:f1:da:b8:b2:35:dc:04:57:83:3e:d0:f4:e4:
bc:99:fa:25:40:61:04:d2:ae:96:29:24:3b:59:90:
7f:84:c0:44:d1:0a:4e:b8:0c:29:ab:37:bc:8b:b2:
cb:cc:21:db:77:8a:94:6f:fb:0e:ef:c7:76:a3:ce:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:F8:19:19:87:D1:64:7E:3E:01:59:EB:C3:7C:D0:73:2D:DC:C7
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/vyD4GRmH0WR-PgFZ68N80HMt3Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.82.0/23
185.205.16.0/24
185.237.82.0/23
194.145.137.0-194.145.138.255
Signature Algorithm: sha256WithRSAEncryption
81:f3:58:98:44:ae:90:58:62:7a:4b:01:55:e8:63:85:7e:24:
e0:fe:ef:b0:c4:d4:09:43:b5:cc:24:e5:62:27:6c:af:ba:0f:
e8:22:79:64:e0:dc:2c:c7:d4:6f:68:0a:1d:cb:cd:cc:45:dc:
21:58:89:87:d1:05:8f:d3:35:55:21:52:bb:95:ec:42:6f:c6:
18:31:ea:12:9d:64:19:fb:5f:9d:5d:88:ce:7e:3e:bd:42:c7:
29:77:b2:fd:d4:6f:9f:08:88:2b:a1:d5:91:27:d7:69:0f:4e:
62:77:92:47:03:e1:df:df:1d:a6:e0:41:9c:05:36:34:f7:26:
b4:de:ce:02:85:fc:98:7e:08:01:6b:9e:f3:27:43:5b:d0:a7:
41:97:33:cb:64:09:5f:01:90:df:92:fa:4c:11:9d:b2:49:b5:
bd:22:6b:05:86:93:ab:35:8b:f2:d0:9f:76:d3:3d:87:0f:62:
7d:46:ab:e0:6e:b0:d5:7c:ca:0a:50:f6:17:b3:d6:13:d7:9c:
73:99:aa:d7:8a:63:2f:af:1c:20:41:63:62:b7:f4:c2:9b:6e:
c5:52:38:6c:27:53:3d:4a:a5:67:c9:17:24:78:7d:3f:d6:ad:
ce:a4:be:57:bd:fc:8d:71:6c:8a:39:4d:96:a8:37:95:1c:d6:
a2:d2:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org