Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/2y1X2ze-QexAyiyV5saRB1quaGQ.roa
File: 2y1X2ze-QexAyiyV5saRB1quaGQ.roa (raw, json)
Hash identifier: EMdL/cwJphHfgdDq2GZ4pFGF9fy/cD12K/vwYB0QsNs=
Subject key identifier: DB:2D:57:DB:37:BE:41:EC:40:CA:2C:95:E6:C6:91:07:5A:AE:68:64
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 0407CEC5
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/2y1X2ze-QexAyiyV5saRB1quaGQ.roa
Signing time: Sat 01 Jan 2022 02:01:48 +0000
ROA not before: Sat 01 Jan 2022 02:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205258
IP address blocks: 185.104.216.0/22 maxlen: 24
185.24.232.0/22 maxlen: 24
185.24.234.0/24 maxlen: 24
2a04:2e06::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67620549 (0x407cec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Jan 1 02:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db2d57db37be41ec40ca2c95e6c691075aae6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:8b:98:45:70:c6:ac:5f:5d:87:c3:0e:bc:
24:be:af:85:b1:5a:0e:c7:db:02:6f:a6:2f:ed:2c:
b8:67:30:91:54:14:55:7f:9d:a3:4e:d2:5f:45:4e:
3f:61:62:3b:e3:51:5f:9d:15:4f:b3:77:bb:d4:43:
f8:d3:a5:12:ab:d3:0e:ef:2d:dd:4e:38:17:f7:2f:
5f:1f:94:61:e9:19:54:dc:3a:64:5b:d0:a7:a5:05:
ee:f7:79:b3:c9:8b:9d:c2:a8:e9:44:e2:d2:a8:bd:
22:57:f4:fe:72:83:ba:c6:39:92:45:4b:97:c8:69:
86:42:9c:0f:60:9e:99:8b:50:d4:49:0d:fb:19:95:
f1:58:d2:74:05:d2:ce:fd:4b:12:a2:f3:d8:c4:25:
87:8c:3c:38:15:11:44:5c:5a:2b:3b:82:e6:e4:6c:
a8:92:65:d8:dc:7a:d0:69:33:93:f4:c5:d7:d3:23:
10:6b:79:09:04:16:ba:af:91:89:b3:c0:dc:14:68:
9e:e5:ea:8c:37:34:bc:71:58:2b:bc:34:de:82:41:
6a:1a:fb:82:ca:e7:56:e0:be:7c:67:26:2c:06:7a:
12:03:c1:0a:d3:c5:c1:dc:a5:96:c3:bc:a8:0b:d7:
b2:f1:32:1e:b2:d8:8a:1f:0f:f1:7e:89:df:c2:b2:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:57:DB:37:BE:41:EC:40:CA:2C:95:E6:C6:91:07:5A:AE:68:64
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/2y1X2ze-QexAyiyV5saRB1quaGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.232.0/22
185.104.216.0/22
IPv6:
2a04:2e06::/32
Signature Algorithm: sha256WithRSAEncryption
1e:ef:74:cb:03:4b:be:97:5e:a4:7c:aa:e9:33:12:f4:83:ff:
2d:bc:58:d4:a4:5c:a1:25:19:84:07:34:da:70:17:93:c0:6b:
41:ce:1f:92:0d:cf:5c:d9:a2:bd:8a:8c:87:01:00:91:71:d8:
26:6d:51:7d:70:87:df:d8:6a:66:21:7d:55:87:f6:cd:2c:55:
2a:93:2c:de:92:d2:43:04:01:6f:31:05:46:85:91:6c:07:4d:
6f:64:3f:0e:77:1b:bd:99:ce:f9:88:0b:ad:35:89:77:e0:c0:
51:09:33:41:3a:eb:be:c3:4f:d7:88:f0:c2:53:46:a6:07:2e:
0a:13:17:69:37:f0:4d:92:c2:5e:7f:6c:ab:81:5c:61:1d:49:
c2:1f:07:7f:c3:07:51:bb:f6:16:14:65:a0:a8:3d:31:1a:8f:
12:09:8b:31:13:d9:00:03:92:c8:00:0a:1b:b1:54:cb:87:db:
76:a0:7f:d3:cd:4a:a5:7d:0d:f2:01:bd:74:c6:f2:3e:b7:77:
3b:8d:bb:0e:03:b7:58:3d:ab:7d:7a:dd:06:59:49:9f:10:a9:
28:59:99:d7:f9:d4:a1:cc:6c:5e:19:a8:8a:5a:df:78:5a:78:
2d:34:c6:89:42:c6:24:6c:27:97:39:fa:e9:9d:a9:4a:f6:03:
07:a0:96:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-fra.rpki-client.org