Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/F3lsyvuOXMo-a9SPmN2is9B5DBM.roa
File: F3lsyvuOXMo-a9SPmN2is9B5DBM.roa (raw, json)
Hash identifier: rMA6pDhrzEjTi2rwtbTKX2U56UtYTkpj6HvCXCJIGKk=
Subject key identifier: 17:79:6C:CA:FB:8E:5C:CA:3E:6B:D4:8F:98:DD:A2:B3:D0:79:0C:13
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: AD4565
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/F3lsyvuOXMo-a9SPmN2is9B5DBM.roa
Signing time: Thu 23 Jun 2022 15:29:30 +0000
ROA not before: Thu 23 Jun 2022 15:29:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200023
IP address blocks: 194.176.127.0/24 maxlen: 24
45.82.184.0/22 maxlen: 22
2a0e:7180::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11355493 (0xad4565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Jun 23 15:29:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17796ccafb8e5cca3e6bd48f98dda2b3d0790c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:0c:5a:cb:80:87:fb:c9:94:74:6b:dc:62:
a5:a2:aa:b5:b4:8f:85:89:01:83:c9:31:0f:1b:a7:
e6:33:ae:d8:ca:a9:2c:8e:11:6b:42:ef:f9:34:8c:
c3:0a:8b:ed:fb:2e:41:38:db:95:58:76:73:ad:c4:
5e:9f:ed:5d:aa:f2:39:8d:78:8c:53:45:38:84:fd:
86:63:21:f4:36:ca:6e:67:de:86:25:76:cb:06:e5:
09:6f:4a:e5:2c:ac:e0:5b:eb:05:db:23:85:04:fa:
7c:6f:df:aa:d6:3b:87:78:be:dc:90:5f:8c:61:17:
03:13:b8:24:40:80:f2:22:82:27:4d:ef:bf:c4:10:
94:d2:cb:32:1a:cb:24:77:70:02:cd:b5:dd:42:ce:
8e:41:5f:79:f0:e8:d6:68:2e:71:8d:f2:dc:5f:7b:
2d:ef:1a:a3:1c:23:13:be:6b:bb:0c:44:87:cb:b4:
a7:bd:7a:76:43:d4:4e:92:20:95:6f:a3:81:83:fe:
f4:b1:78:79:c0:c5:43:df:88:17:57:46:7c:1f:1c:
c4:34:69:a4:0d:ac:48:87:e9:ec:9c:05:79:9d:15:
5c:e6:e9:6a:1f:49:b7:c5:1b:fa:dc:f8:80:59:b5:
57:bc:aa:64:40:56:58:dd:cb:75:71:92:cf:b7:d5:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:6C:CA:FB:8E:5C:CA:3E:6B:D4:8F:98:DD:A2:B3:D0:79:0C:13
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/F3lsyvuOXMo-a9SPmN2is9B5DBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.184.0/22
194.176.127.0/24
IPv6:
2a0e:7180::/29
Signature Algorithm: sha256WithRSAEncryption
37:ef:42:6e:2b:9f:02:c6:7c:3f:91:40:71:be:ea:cb:0c:1c:
9c:b1:13:04:1a:c4:ea:d6:7b:de:01:77:fa:b8:6f:fa:84:d9:
db:89:c9:53:d3:88:f4:5c:bb:dd:7f:e9:82:ad:42:03:01:9f:
8f:3a:08:18:56:16:78:a6:85:7b:a1:5f:db:c0:e2:4a:13:99:
ef:2e:8c:11:01:6c:b6:ed:0c:0f:c8:6a:5e:81:a8:2c:f1:49:
3c:5e:c5:9a:eb:e1:30:cc:8e:a0:9e:9e:68:15:84:69:23:75:
81:cd:41:93:0d:30:8e:4c:77:ef:4f:c3:c3:6f:44:a8:fc:8b:
0f:d7:db:d5:c0:a2:21:a9:87:e0:0a:54:59:9a:5b:f6:1c:57:
0d:a9:03:28:45:0c:10:7d:fc:43:cd:f9:4a:cb:17:c1:ac:f8:
cc:57:a0:33:76:2e:bc:08:28:cf:1d:fd:17:f0:5a:5d:5f:a5:
62:28:4e:96:53:1e:f7:c6:10:1e:b2:c5:8e:a0:78:e5:73:35:
3e:a2:c9:fb:3c:15:2f:f3:b2:2c:09:67:88:90:e8:78:4f:31:
7e:32:5e:98:61:22:9d:ee:81:a6:6d:ae:1d:1e:bd:dc:ed:68:
1f:18:8e:76:f4:83:6c:a0:04:8c:5d:73:c8:b9:b8:f7:8a:7d:
a1:6c:55:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org