Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/2BsX_8DkSHj80B2E3EJmPpxLxVo.roa
File: 2BsX_8DkSHj80B2E3EJmPpxLxVo.roa (raw, json)
Hash identifier: 93G8GWWweLccTZi+noKz+D/K4U+44w2by0/QQd9LvGI=
Subject key identifier: D8:1B:17:FF:C0:E4:48:78:FC:D0:1D:84:DC:42:66:3E:9C:4B:C5:5A
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 03F44002
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/2BsX_8DkSHj80B2E3EJmPpxLxVo.roa
Signing time: Sat 01 Jan 2022 11:59:27 +0000
ROA not before: Sat 01 Jan 2022 11:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30936
IP address blocks: 185.39.116.0/22 maxlen: 22
82.116.32.0/19 maxlen: 19
87.238.232.0/21 maxlen: 21
2a01:4420::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66338818 (0x3f44002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Jan 1 11:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d81b17ffc0e44878fcd01d84dc42663e9c4bc55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:9e:84:7c:3f:18:ba:a9:b1:0b:a7:d5:a2:
7e:d6:d3:55:2e:97:d6:56:3e:d9:5f:dd:17:58:ee:
9b:9a:fa:6f:19:b4:7c:e4:9b:32:23:1e:68:23:e0:
8b:ce:0b:74:2e:86:56:50:c3:15:e8:1f:3f:21:c4:
79:60:5e:a0:00:99:63:c3:91:47:36:83:14:e5:d0:
a2:52:36:97:ac:5c:fc:84:e5:86:6f:45:1a:34:5c:
59:95:a5:82:bb:04:8f:a9:ce:89:28:40:25:13:50:
aa:f5:95:fa:20:35:88:04:0a:88:3e:56:50:38:1d:
79:00:45:ef:57:27:93:78:19:cd:ed:f3:33:96:1f:
02:62:55:e6:a3:9f:ef:52:00:f4:3f:bf:c2:18:5c:
b7:9a:5b:c4:a6:74:06:18:95:88:21:e5:ea:65:b0:
43:8d:b6:2f:3d:67:05:1b:8f:9d:9f:c4:b6:97:81:
71:7a:e9:ce:b5:4d:c4:cb:4c:73:95:9b:a5:64:3b:
31:75:77:4e:dc:fc:7b:86:e0:1e:02:55:ad:69:f0:
15:bc:60:bb:13:11:db:ed:b7:0f:99:af:9f:20:87:
7d:29:98:c8:36:18:fa:f9:6b:e3:67:9c:68:3c:09:
00:b2:82:ff:b8:02:be:6d:d8:5e:c9:09:6b:1a:1e:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:17:FF:C0:E4:48:78:FC:D0:1D:84:DC:42:66:3E:9C:4B:C5:5A
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/2BsX_8DkSHj80B2E3EJmPpxLxVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.32.0/19
87.238.232.0/21
185.39.116.0/22
IPv6:
2a01:4420::/32
Signature Algorithm: sha256WithRSAEncryption
90:c1:a9:27:0c:22:fb:98:b8:6c:60:90:3f:f7:72:1d:96:60:
a7:9b:a8:ee:fe:ca:c8:7d:43:45:60:dc:0c:e9:6e:bd:e4:e9:
8e:a2:e7:67:b6:98:58:77:05:06:4c:df:2f:fa:31:d8:42:42:
a4:47:92:6e:c5:93:86:b0:b1:d2:ce:69:d1:76:af:b4:f6:45:
76:ac:7b:ff:6a:f5:56:c2:f2:90:01:53:ab:b5:7a:ba:59:46:
42:62:02:a8:cb:f5:93:99:1d:50:8e:aa:c8:c0:23:20:9a:86:
23:3c:a3:48:5a:da:be:56:51:d1:6c:07:cf:58:d6:ce:71:1b:
f9:88:6a:ca:b0:f9:26:6a:f0:6a:e4:dc:3b:ff:5d:1d:92:e4:
87:00:35:0f:68:3a:09:ba:c2:b4:89:9f:39:f3:4e:82:8a:62:
9a:69:84:9a:b1:ec:5b:c0:28:22:27:74:47:50:5b:6c:c5:2e:
e4:d7:76:13:06:32:93:67:0a:b1:57:73:95:66:6c:ef:3b:3f:
58:47:d3:f1:84:fb:11:09:9b:c1:a1:b8:43:62:f3:2d:3e:da:
6b:01:82:8f:d1:db:83:73:cf:52:73:1c:df:b7:bf:fb:61:ae:
db:13:c3:04:b6:6c:a1:ba:1d:39:d4:ac:3c:2e:8d:27:c0:97:
11:d5:bd:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org