Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/ByCofyJ2vIk8V9UI2us-DTxfXK0.roa
File: ByCofyJ2vIk8V9UI2us-DTxfXK0.roa (raw, json)
Hash identifier: N89NWYAebVq2NfgdpK2rmwMSzOoGGTA6PLAm2FBl/Zg=
Subject key identifier: 07:20:A8:7F:22:76:BC:89:3C:57:D5:08:DA:EB:3E:0D:3C:5F:5C:AD
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 12ADFA75
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/ByCofyJ2vIk8V9UI2us-DTxfXK0.roa
Signing time: Sat 01 Jan 2022 14:06:24 +0000
ROA not before: Sat 01 Jan 2022 14:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62284
IP address blocks: 185.110.28.0/24 maxlen: 24
185.110.28.0/22 maxlen: 22
185.110.29.0/24 maxlen: 24
185.110.30.0/24 maxlen: 24
185.110.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313391733 (0x12adfa75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jan 1 14:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0720a87f2276bc893c57d508daeb3e0d3c5f5cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:d8:9d:ae:c4:cb:ed:9c:01:05:46:85:9f:
15:ff:83:18:3a:c9:16:21:d2:f9:05:c9:60:ce:d4:
0d:39:99:fc:fb:c3:8e:70:4e:76:cc:4d:c5:7f:33:
49:0a:6e:94:19:25:1b:54:d7:a3:3c:a4:3a:b0:74:
ec:0b:33:a4:c9:c2:d2:cf:22:a5:0e:c1:6f:4f:48:
9e:47:af:a3:6a:71:25:e6:85:77:49:cd:f1:d4:13:
e6:e6:ac:11:b4:ac:67:fc:cc:6a:f5:9d:ea:15:6c:
d1:8d:fd:65:99:08:1a:d1:95:db:2d:d7:c6:d6:cb:
22:7a:34:2d:f2:39:e4:08:4d:49:e0:84:e2:5a:df:
f0:17:cf:9f:9e:8a:ad:23:06:2c:fe:a6:89:d8:3d:
46:2a:2d:e7:08:1d:0b:38:36:58:d7:89:99:0d:2b:
78:d2:41:3a:23:72:16:f1:38:ca:db:d3:12:ae:9b:
5b:b1:0c:6c:ec:6a:e7:ad:48:f7:b3:7e:99:ca:a8:
4e:9f:30:31:de:4a:1b:77:c0:c0:ab:90:87:19:9f:
99:25:63:7f:93:96:9d:d0:69:de:d6:ef:1e:4c:b0:
e8:29:c2:a6:2b:1a:60:17:83:8f:ba:dc:11:31:ce:
2d:7f:8a:0a:03:13:e9:a0:db:e1:ae:44:ed:81:1c:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:20:A8:7F:22:76:BC:89:3C:57:D5:08:DA:EB:3E:0D:3C:5F:5C:AD
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/ByCofyJ2vIk8V9UI2us-DTxfXK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.28.0/22
Signature Algorithm: sha256WithRSAEncryption
40:95:5a:b8:4f:87:01:24:5e:76:13:7b:a9:af:ab:ed:04:ba:
83:4b:e8:a4:92:96:e2:b8:58:73:97:3b:d0:f6:99:e1:11:f9:
02:56:10:7d:13:0c:79:9f:b1:5b:eb:89:fe:1b:eb:d5:ba:72:
49:27:ee:87:14:98:f1:84:b9:35:f2:f5:29:1e:bf:34:23:1a:
ca:0a:4b:24:8d:ae:cc:eb:d8:e1:09:84:6c:12:11:49:2e:36:
c7:73:e8:78:d9:d2:9d:cc:4c:c7:e4:4f:ad:31:99:56:9d:20:
41:bb:31:8e:b8:99:87:98:fa:82:bb:f1:3a:64:8b:cd:f5:de:
6e:fa:36:13:01:24:a9:db:c5:cb:28:3e:60:be:2a:79:47:a8:
86:28:6f:12:19:80:9a:7b:aa:6c:a8:33:01:a5:5a:61:34:3e:
81:91:18:b6:6d:c5:d6:a9:c3:95:8a:98:0c:a8:29:cb:a5:ea:
88:f6:b4:27:fb:cb:7c:48:24:0b:99:97:ec:2e:0f:24:23:f0:
10:b9:ab:b7:3f:68:80:20:57:ed:36:ec:3c:09:44:c1:25:66:
18:27:d8:e0:84:80:aa:eb:d6:0d:b0:1d:08:2b:d3:bc:01:31:
01:55:89:65:e0:d0:b3:93:4b:f1:10:9c:37:b9:e5:9a:c2:67:
48:44:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:32 2023 by rpki-client on console-fra.rpki-client.org