Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/273487-889a-43fe-a56e-4b48f59ec155/1/iDk5kvf9pZcTgL1hQKD5lOkO-5Q.roa
File: iDk5kvf9pZcTgL1hQKD5lOkO-5Q.roa (raw, json)
Hash identifier: gK9QiG5i9b0Wyo2O6oVXbwJDVvgO9Ecd9pl3sfuY10U=
Subject key identifier: 88:39:39:92:F7:FD:A5:97:13:80:BD:61:40:A0:F9:94:E9:0E:FB:94
Certificate issuer: /CN=e2f68414fcaca07c813555e53691dba84e3988c8
Certificate serial: 0C373B58
Authority key identifier: E2:F6:84:14:FC:AC:A0:7C:81:35:55:E5:36:91:DB:A8:4E:39:88:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4vaEFPysoHyBNVXlNpHbqE45iMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/273487-889a-43fe-a56e-4b48f59ec155/1/iDk5kvf9pZcTgL1hQKD5lOkO-5Q.roa
Signing time: Mon 14 Mar 2022 07:49:36 +0000
ROA not before: Mon 14 Mar 2022 07:49:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206476
IP address blocks: 185.255.184.0/22 maxlen: 24
185.137.224.0/22 maxlen: 24
2a07:780::/29 maxlen: 48
2a0c:bcc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204946264 (0xc373b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2f68414fcaca07c813555e53691dba84e3988c8
Validity
Not Before: Mar 14 07:49:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88393992f7fda5971380bd6140a0f994e90efb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:f1:91:8b:a6:f3:69:45:d2:4b:75:8d:1c:
47:3f:dc:4a:6d:87:4d:ed:68:b5:c2:85:6f:83:53:
96:6f:3e:b7:50:1b:63:17:ca:39:d5:11:e2:d0:94:
9b:e6:2f:41:41:6a:9d:32:2f:14:45:9f:f7:0d:0f:
33:5a:ee:d9:e2:af:f4:93:87:4b:31:ae:42:5f:a8:
6a:be:2e:54:35:db:b6:e5:be:ea:08:33:83:3e:27:
27:14:36:37:ae:5e:e1:25:8e:7d:30:7b:b1:89:4b:
bf:26:61:20:9a:43:64:1f:44:2a:0d:fa:b4:23:55:
3b:8d:5d:23:e6:a1:93:5b:c0:22:41:92:3b:f3:0a:
67:bd:0a:82:b1:e2:d0:a3:a4:fe:ec:1e:c4:3d:1e:
f3:81:a0:5b:33:06:3f:1e:b9:73:be:b6:4f:e6:ac:
bb:30:b3:e7:63:3b:08:3c:36:ce:4f:9a:16:ca:e8:
4b:4a:88:88:14:2d:04:e6:cb:f4:ac:6b:ba:54:5f:
4f:f7:b2:44:62:27:9a:64:15:05:d0:7f:c1:df:bd:
2b:7c:a0:94:b9:82:a1:33:61:e1:52:7a:b8:3b:d5:
fd:92:9a:c1:f5:62:58:8b:09:1a:47:d0:bc:0a:18:
eb:b6:86:99:02:e2:25:e8:90:95:85:34:69:d3:74:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:39:39:92:F7:FD:A5:97:13:80:BD:61:40:A0:F9:94:E9:0E:FB:94
X509v3 Authority Key Identifier:
keyid:E2:F6:84:14:FC:AC:A0:7C:81:35:55:E5:36:91:DB:A8:4E:39:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4vaEFPysoHyBNVXlNpHbqE45iMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/273487-889a-43fe-a56e-4b48f59ec155/1/iDk5kvf9pZcTgL1hQKD5lOkO-5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/273487-889a-43fe-a56e-4b48f59ec155/1/4vaEFPysoHyBNVXlNpHbqE45iMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.224.0/22
185.255.184.0/22
IPv6:
2a07:780::/29
2a0c:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
64:db:9f:11:5c:fb:bf:15:e3:2d:e4:f7:68:2a:57:59:38:2c:
52:6c:11:fe:c3:f3:01:06:67:b5:68:2d:be:06:32:66:8e:20:
1e:21:45:fc:93:01:a5:99:34:c9:33:85:75:50:29:30:7c:d4:
1b:03:5e:5b:de:5f:c2:6c:28:fc:b3:41:d9:68:00:b4:c8:41:
27:47:d2:47:7a:6c:00:2a:18:6a:49:2e:93:82:d9:ad:06:ec:
bd:13:c9:69:a0:78:d2:2c:9e:0d:60:d8:6c:dd:11:02:e1:ba:
2f:eb:55:99:14:e1:98:39:cd:6a:63:f3:2b:d2:78:e1:ad:3e:
52:a2:c6:6a:9f:98:08:57:d6:7d:12:4f:c0:e7:a7:40:fa:99:
d1:f6:38:7f:c4:33:cd:9b:b0:dd:a8:e6:a3:3a:65:82:23:9a:
a2:d3:ec:b0:07:14:16:fc:ad:df:3b:88:49:ae:e4:65:5c:69:
53:8f:24:20:b2:76:a9:5d:36:78:f7:44:00:44:70:6f:f8:4d:
6f:d3:db:05:f8:75:06:12:a4:d0:8a:d1:d6:10:84:ef:d6:8f:
ab:4a:b0:74:7d:43:8a:61:25:98:7e:18:9f:46:53:b1:ff:f6:
fe:75:a9:71:80:95:c8:26:1a:ec:c0:25:d1:e0:8c:d7:70:00:
ff:b7:5c:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:42 2023 by rpki-client on console-ams.rpki-client.org