Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/syxgoqclvYqHftBwZiSP9O9zytE.roa
File: syxgoqclvYqHftBwZiSP9O9zytE.roa (raw, json)
Hash identifier: KwJAnPeq2NbSGLAgWM+b3tPqjUoufMwSRj2rXBrNxcw=
Subject key identifier: B3:2C:60:A2:A7:25:BD:8A:87:7E:D0:70:66:24:8F:F4:EF:73:CA:D1
Certificate issuer: /CN=7e181bf07a13efc8a3430b4264c9152141d0cd64
Certificate serial: 0CD7FE4B
Authority key identifier: 7E:18:1B:F0:7A:13:EF:C8:A3:43:0B:42:64:C9:15:21:41:D0:CD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhgb8HoT78ijQwtCZMkVIUHQzWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/syxgoqclvYqHftBwZiSP9O9zytE.roa
Signing time: Sat 01 Jan 2022 05:01:45 +0000
ROA not before: Sat 01 Jan 2022 05:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24904
IP address blocks: 185.215.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215481931 (0xcd7fe4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e181bf07a13efc8a3430b4264c9152141d0cd64
Validity
Not Before: Jan 1 05:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b32c60a2a725bd8a877ed07066248ff4ef73cad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:14:b2:60:b1:0d:42:8f:a9:5e:89:16:ef:
07:14:9b:b4:d6:b4:77:b0:80:94:8c:00:d3:6d:c9:
94:18:38:50:c3:81:db:f8:d9:db:f3:e9:0e:36:8c:
61:90:da:83:b8:f6:4c:d2:2f:63:d1:f5:fa:26:7f:
2d:99:26:4a:a8:ea:d6:c7:32:60:ba:89:f4:fc:5b:
7c:83:c2:fa:86:16:cc:02:f2:e6:d4:6b:22:78:19:
a7:cc:cb:de:a8:4f:4b:99:42:b1:18:98:99:19:bb:
4f:1d:c3:27:99:df:ee:4a:34:85:4f:3e:e1:77:4d:
c5:f1:d6:15:ef:83:99:5f:0f:05:f1:43:f1:36:c1:
5b:02:18:06:b1:95:92:bd:be:4d:5a:30:91:99:09:
bd:3f:a3:ff:b2:bb:d5:d0:e1:1b:2c:20:42:4f:e9:
a1:85:f8:fd:8b:ef:91:d8:ab:1e:c8:ee:db:46:db:
ef:1d:1f:2b:c8:d1:3f:ce:07:c1:56:26:7b:ea:1d:
1c:e6:9b:6e:79:f0:72:79:f7:d7:2e:4f:0b:0d:ce:
d8:44:50:83:fd:83:98:1a:04:10:85:3f:03:3a:c5:
3e:b0:ba:70:3a:08:2d:25:f3:a5:bc:35:20:fb:93:
7a:27:22:88:c4:15:97:ea:28:ce:cd:96:52:af:b9:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:60:A2:A7:25:BD:8A:87:7E:D0:70:66:24:8F:F4:EF:73:CA:D1
X509v3 Authority Key Identifier:
keyid:7E:18:1B:F0:7A:13:EF:C8:A3:43:0B:42:64:C9:15:21:41:D0:CD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhgb8HoT78ijQwtCZMkVIUHQzWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/syxgoqclvYqHftBwZiSP9O9zytE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/fhgb8HoT78ijQwtCZMkVIUHQzWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:9c:14:42:a1:f9:ba:02:46:f2:f2:7e:d1:02:fc:b8:55:19:
01:90:3d:9e:a5:61:eb:b1:5e:97:ca:8f:7c:a0:b9:08:c1:07:
4e:63:99:d1:71:27:86:9f:54:1d:a4:92:74:8c:92:f6:f0:68:
22:03:9d:fb:53:3f:dc:38:ea:f5:c9:d5:99:94:a4:12:91:1f:
80:35:bc:86:81:3c:f9:33:5d:9a:50:44:a9:e8:ca:77:20:61:
17:d6:e3:b0:63:92:d0:34:b8:11:31:2a:67:37:27:84:0b:63:
3f:5f:78:41:d3:d9:a7:2f:a7:0b:e9:ac:9c:ed:2c:6e:a4:ad:
6e:22:ed:fc:80:63:a0:9c:54:88:90:33:41:9b:5d:7d:4b:ed:
12:bc:f0:f7:0d:f7:06:26:8f:ec:3d:a3:8c:16:e3:45:47:8f:
31:09:97:43:00:5e:99:6b:da:c6:d1:bb:b1:c5:a3:23:34:13:
84:7d:77:99:80:9a:81:4e:ef:c4:0c:e0:d1:09:4f:9e:29:c7:
40:88:e2:74:01:65:2e:ee:e4:11:34:a7:a4:63:62:ba:42:c4:
46:4e:7d:8f:01:2f:18:70:1d:bc:8a:e3:0c:45:ee:b5:e7:90:
6c:25:a0:ba:b4:71:61:66:ff:71:0f:3a:a3:42:5b:77:1b:e4:
24:83:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:32 2024 by rpki-client on console-ams.rpki-client.org