Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/S2Ai16otmi3ILc5zuRfeD__k-PA.roa
File: S2Ai16otmi3ILc5zuRfeD__k-PA.roa (raw, json)
Hash identifier: xwb6QUqGav4RY9fvE399ik8SMFcmv5WxH1id7EeDI+A=
Subject key identifier: 4B:60:22:D7:AA:2D:9A:2D:C8:2D:CE:73:B9:17:DE:0F:FF:E4:F8:F0
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 13B2C7D9
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/S2Ai16otmi3ILc5zuRfeD__k-PA.roa
Signing time: Thu 13 Jan 2022 16:05:28 +0000
ROA not before: Thu 13 Jan 2022 16:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.1.231.0/24 maxlen: 24
217.29.66.0/23 maxlen: 23
217.29.68.0/23 maxlen: 23
185.1.186.0/24 maxlen: 24
2001:7f8:b:100::/64 maxlen: 64
2001:7f8:101:7::/64 maxlen: 64
2001:7f8:b:101::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330483673 (0x13b2c7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jan 13 16:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b6022d7aa2d9a2dc82dce73b917de0fffe4f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:13:b0:c1:3b:17:12:99:e8:8e:35:79:48:
85:2c:d7:8e:10:dc:9e:f9:97:7f:43:dd:af:3d:f6:
76:26:0d:78:ae:0e:7c:b9:2d:7d:68:a4:4c:a5:ad:
43:11:7a:03:96:46:48:76:84:57:ce:1b:8c:7e:2c:
22:3c:8d:43:c9:ed:6c:5d:d1:94:66:24:84:0e:fd:
2b:ef:ac:c8:ea:2a:da:91:7f:5b:f1:a4:3c:51:12:
d7:1b:77:d3:35:56:d1:39:8c:db:d6:02:ca:8c:41:
06:78:21:46:6c:a9:b5:e5:07:e8:46:81:b4:64:c4:
f6:f2:9a:10:05:a2:b5:b5:aa:a1:8c:fa:50:bb:47:
56:1b:ac:c6:e2:84:8c:88:88:38:44:dd:b1:fa:d3:
16:29:c4:42:5a:1b:31:53:e9:a0:6c:17:ad:20:14:
54:be:24:8c:81:ce:6c:e1:60:ac:52:75:ac:99:37:
75:2f:f8:d7:37:85:3d:f3:10:06:12:05:19:e8:3b:
74:60:39:a5:d0:09:51:26:88:6c:87:07:71:a5:a2:
e4:6b:0d:34:26:27:bf:6b:5a:55:70:6c:b6:db:b1:
04:13:9f:18:68:b5:4a:2a:9a:e5:ed:41:d5:eb:dd:
25:90:23:6b:4e:6c:f4:ed:ee:25:3b:63:70:f9:78:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:60:22:D7:AA:2D:9A:2D:C8:2D:CE:73:B9:17:DE:0F:FF:E4:F8:F0
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/S2Ai16otmi3ILc5zuRfeD__k-PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.186.0/24
185.1.231.0/24
217.29.66.0-217.29.69.255
IPv6:
2001:7f8:b:100::/63
2001:7f8:101:7::/64
Signature Algorithm: sha256WithRSAEncryption
6a:29:ed:d3:ec:3d:a1:6d:17:7e:3a:f2:1c:5d:ec:1d:90:54:
a1:ce:43:fb:13:25:d5:81:91:96:ca:c6:c2:cf:84:37:d5:fc:
a2:08:1e:7e:4a:62:ba:81:7e:87:62:bd:e9:03:8b:5b:5a:a9:
af:35:29:a2:b2:f3:7f:44:f3:5d:6c:5c:87:d5:15:5b:1d:e1:
a4:08:d4:b2:14:32:40:6f:82:11:1a:d5:cd:3c:aa:2b:28:b7:
7c:25:0b:56:35:d9:27:35:0c:ab:13:b6:8a:53:4b:8b:b2:e1:
69:b3:ee:19:8d:6f:04:dc:08:28:18:35:66:81:a6:f5:3c:30:
3f:75:fd:44:ab:4c:a2:0e:fb:3e:5a:f9:09:3c:ea:20:5d:ee:
70:29:c4:f9:38:72:6a:be:50:f8:85:f9:95:42:05:dd:0a:37:
7b:6f:a1:e7:b0:00:37:be:86:23:51:d2:6e:ef:a8:03:26:3a:
6d:03:bc:ea:d9:92:18:0d:ca:da:26:ea:67:5e:9b:06:96:9e:
e3:1c:a1:f9:cb:ba:a5:da:cc:5d:42:d0:40:ac:86:ae:af:25:
c5:ae:89:77:d8:8d:ed:44:0f:0b:93:39:3f:8d:1d:35:a5:d7:
c5:e9:ed:76:69:66:54:b0:d2:34:50:27:e0:24:1c:9f:d1:a6:
c1:6b:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:44 2024 by rpki-client on console-ams.rpki-client.org