Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/ipxT-6U-m60fy2B0uAX9T_iTO0w.roa
File: ipxT-6U-m60fy2B0uAX9T_iTO0w.roa (raw, json)
Hash identifier: apT/fL127cL30mz6sEi50YjsRGZJ0xKcuyY3KSSjlZQ=
Subject key identifier: 8A:9C:53:FB:A5:3E:9B:AD:1F:CB:60:74:B8:05:FD:4F:F8:93:3B:4C
Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial: 057F3E99
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/ipxT-6U-m60fy2B0uAX9T_iTO0w.roa
Signing time: Sat 01 Jan 2022 10:58:16 +0000
ROA not before: Sat 01 Jan 2022 10:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200460
IP address blocks: 185.97.33.0/24 maxlen: 24
185.97.34.0/24 maxlen: 24
185.97.35.0/24 maxlen: 24
185.97.32.0/24 maxlen: 24
2a00:66c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92225177 (0x57f3e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
Validity
Not Before: Jan 1 10:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a9c53fba53e9bad1fcb6074b805fd4ff8933b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:2c:bc:fc:0b:b3:81:11:b7:ed:36:87:bd:
9d:6c:dc:10:7a:b3:92:2c:a9:ca:57:93:8b:26:2f:
18:fb:0a:04:7c:f7:a0:b5:ed:a4:56:ec:25:5f:dc:
04:a9:2f:0a:dd:46:35:d3:12:58:eb:72:64:a0:be:
2b:19:8a:25:32:62:90:c4:1a:21:1e:d4:02:73:fb:
51:10:1f:86:b2:9b:83:0d:4b:a2:e6:28:d3:9e:f0:
18:9c:8b:f0:62:92:8d:3d:34:08:d7:b6:54:ff:36:
12:31:c3:43:c3:11:84:26:1c:98:12:44:59:61:8d:
86:54:3c:42:60:cb:e9:d3:cf:c3:80:e6:35:53:c9:
65:88:2c:a6:da:3a:84:d8:8e:21:21:92:26:c3:25:
f4:c5:a5:4a:01:a2:f6:a1:5a:28:1c:57:04:b1:29:
f1:03:9f:69:41:00:a9:c4:9f:40:95:50:57:fe:98:
e5:c2:d2:2b:02:91:63:7a:77:be:a7:1a:9b:89:d0:
dd:92:f6:fa:d2:65:35:58:4b:b4:93:72:38:c2:83:
b8:37:21:27:f0:bb:29:48:66:18:85:d0:41:fa:c3:
1f:f4:d5:b6:5e:ec:4f:b1:c5:6c:96:53:13:c7:7f:
9c:75:5f:69:a0:1a:90:16:1a:27:3b:75:71:e7:69:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:53:FB:A5:3E:9B:AD:1F:CB:60:74:B8:05:FD:4F:F8:93:3B:4C
X509v3 Authority Key Identifier:
keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/ipxT-6U-m60fy2B0uAX9T_iTO0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.32.0/22
IPv6:
2a00:66c0::/32
Signature Algorithm: sha256WithRSAEncryption
82:2a:13:21:88:60:99:49:ee:5d:f5:53:22:c1:68:fb:c7:f1:
76:19:d6:b6:d0:ed:24:94:89:ea:d0:a2:2c:75:30:27:f5:64:
77:48:94:b3:98:77:84:5e:f6:98:88:3c:6e:04:96:a6:41:d9:
fd:b8:77:b0:89:1c:23:ad:4a:5e:c5:f2:ab:c2:7b:3b:c8:42:
f2:24:71:ae:69:1e:2b:f0:51:6a:ce:e9:5b:96:89:f3:b9:7e:
dc:6f:f5:cc:cf:ad:ac:98:a1:6f:70:f2:67:2e:d4:ee:9c:f4:
16:47:ab:1f:ec:42:95:8f:6e:19:43:85:16:65:ad:86:0b:11:
f5:ff:fd:9a:7c:82:97:5f:0a:44:b9:26:e0:2a:92:29:dd:bc:
3b:e8:87:07:21:53:6d:66:8a:e1:92:1d:05:9a:12:c3:d8:1b:
99:69:75:a2:21:24:93:47:13:04:d2:c6:97:ea:83:e4:87:21:
11:f0:1b:9a:9e:9c:56:c0:fc:d2:82:06:a1:69:1f:64:5d:05:
37:84:5e:19:33:49:e5:08:0e:3c:34:b5:82:53:45:96:cb:5d:
81:f0:b8:cf:b1:31:3c:ff:fc:8f:9e:cd:9e:bb:af:46:bd:b4:
d2:2b:98:d7:eb:bd:cd:dd:16:6f:b2:19:27:05:27:ef:7a:e2:
f0:1c:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:55 2023 by rpki-client on console-ams.rpki-client.org