Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/2g99kmwRBPTgZZztjeGrE-MwmcE.roa
File: 2g99kmwRBPTgZZztjeGrE-MwmcE.roa (raw, json)
Hash identifier: +YEqYehNfk1Dc2DpmRhcXRoGugCw6U0oBofroB/9Lmc=
Subject key identifier: DA:0F:7D:92:6C:11:04:F4:E0:65:9C:ED:8D:E1:AB:13:E3:30:99:C1
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0182D5513D71F4088B5CA1A059D6506AFA85
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/2g99kmwRBPTgZZztjeGrE-MwmcE.roa
Signing time: Thu 25 Aug 2022 14:04:07 +0000
ROA not before: Thu 25 Aug 2022 14:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204139
IP address blocks: 185.129.22.0/23 maxlen: 23
185.129.20.0/23 maxlen: 23
185.128.178.0/23 maxlen: 23
185.128.176.0/23 maxlen: 23
185.122.124.0/23 maxlen: 23
185.122.128.0/23 maxlen: 23
185.122.126.0/23 maxlen: 23
185.116.174.0/24 maxlen: 24
185.128.132.0/23 maxlen: 23
185.128.134.0/23 maxlen: 23
185.123.240.0/23 maxlen: 23
185.123.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:51:3d:71:f4:08:8b:5c:a1:a0:59:d6:50:6a:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Aug 25 14:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da0f7d926c1104f4e0659ced8de1ab13e33099c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3e:0f:78:65:ff:c9:e0:82:bb:d5:b0:22:01:
dc:40:91:0a:0a:bb:b8:1d:6f:aa:93:4e:ae:10:a3:
32:df:1d:d7:81:36:e6:57:8f:36:34:98:28:a9:bc:
e7:8f:7b:1e:c7:b4:f2:8e:f3:94:20:f8:54:db:7a:
01:76:8a:cf:03:f7:fc:ec:58:a4:d2:83:07:df:f3:
7d:cb:2c:e3:5d:0c:99:af:21:b6:d7:92:42:7a:6c:
f8:86:40:43:a5:58:c7:48:ad:c3:0d:9a:41:83:70:
15:2c:c6:34:f3:c7:39:06:45:db:4e:d0:b0:27:c7:
c7:50:2d:44:18:78:57:24:2e:63:91:05:b0:25:55:
5c:67:46:e7:d3:31:99:74:16:cb:80:0d:80:42:f6:
76:58:da:7f:8e:f6:4f:e4:24:c4:86:ec:81:60:69:
56:b4:a3:99:2a:17:a4:e1:42:a2:f1:6a:f9:f8:36:
3c:8d:19:4d:f7:a2:e9:e6:62:8e:7d:77:0a:49:53:
b6:b2:32:f0:e2:52:06:d8:e1:13:75:db:51:fc:2e:
08:ed:a5:a4:de:61:51:dc:e7:f8:21:61:4a:cc:46:
d1:4e:ef:25:5b:70:1c:b7:83:25:67:1e:da:1a:fa:
82:d3:d6:ea:ed:20:7e:11:3a:74:7a:a1:4a:76:54:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0F:7D:92:6C:11:04:F4:E0:65:9C:ED:8D:E1:AB:13:E3:30:99:C1
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/2g99kmwRBPTgZZztjeGrE-MwmcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.174.0/24
185.122.124.0-185.122.129.255
185.123.240.0/22
185.128.132.0/22
185.128.176.0/22
185.129.20.0/22
Signature Algorithm: sha256WithRSAEncryption
41:78:a3:56:04:3d:d1:32:b1:c5:d2:bb:bb:6d:58:71:60:d8:
92:e6:64:4f:e5:81:f1:60:76:7e:f7:32:f3:a9:f1:30:2c:fd:
69:84:76:6c:af:3c:a1:b9:76:d5:c3:1d:9a:80:1c:83:1b:46:
ed:6c:cd:84:7b:b1:09:69:af:f6:53:d8:5c:0c:b2:2d:60:02:
4c:ff:38:57:7c:22:84:99:a6:06:70:b3:3b:58:3d:85:90:55:
79:92:79:91:28:a2:55:b7:65:d5:f9:8a:d6:42:3e:da:f6:42:
8a:b5:dd:9c:0b:84:9c:79:ca:d5:f9:03:c3:c4:73:41:89:06:
19:fd:eb:3b:5e:2c:40:0b:b0:f0:77:6d:3e:18:97:35:e1:99:
f3:79:b9:82:8b:89:bd:47:d1:b3:e3:b2:fe:1b:dd:76:38:2c:
63:72:23:36:2f:b8:f4:2c:50:85:d3:3b:6b:80:bc:6a:e5:86:
d8:e0:c7:9a:b6:f6:9b:66:c9:4e:24:e4:39:b0:15:f1:ec:f9:
8e:f3:75:2f:5f:08:b0:4b:37:ca:e6:d4:b4:02:21:95:56:f0:
df:64:cf:83:bf:df:1a:bb:bd:3d:5c:14:f2:d5:bb:b0:a0:ae:
73:a7:47:b3:2e:c6:bc:7f:de:be:0f:10:1c:bd:53:36:4f:5b:
c0:2a:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:50 2023 by rpki-client on console-fra.rpki-client.org