Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/aJzUwIr-J2G4c4oO1rA3mH2EXTs.roa
File: aJzUwIr-J2G4c4oO1rA3mH2EXTs.roa (raw, json)
Hash identifier: r/Db/sz7oIIzBxRiLZfhk3bN2uBNibJN+iSwBwJ3Lwc=
Subject key identifier: 68:9C:D4:C0:8A:FE:27:61:B8:73:8A:0E:D6:B0:37:98:7D:84:5D:3B
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 07A9B5EE
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/aJzUwIr-J2G4c4oO1rA3mH2EXTs.roa
Signing time: Sat 01 Jan 2022 05:06:21 +0000
ROA not before: Sat 01 Jan 2022 05:06:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205889
IP address blocks: 185.203.55.0/24 maxlen: 24
185.203.54.0/23 maxlen: 23
185.203.52.0/24 maxlen: 24
185.203.53.0/24 maxlen: 24
185.203.52.0/22 maxlen: 22
185.203.52.0/23 maxlen: 23
185.203.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128562670 (0x7a9b5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jan 1 05:06:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=689cd4c08afe2761b8738a0ed6b037987d845d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:a5:97:ba:c0:43:d2:8d:7b:cd:f4:71:cb:
38:4d:d2:2b:22:4a:3e:24:57:e9:f1:90:fb:32:48:
8f:15:5f:2c:5c:a7:4a:e0:19:78:13:b4:81:27:38:
2e:e0:f0:1f:be:aa:b7:c6:4f:75:2b:08:57:57:4a:
34:0f:e2:2e:a7:71:7e:10:a8:32:16:0f:bc:d9:7e:
7e:0d:02:69:69:6f:9e:7d:b9:ed:91:95:eb:0d:9d:
97:c9:a8:8a:ec:b5:d7:8b:82:f3:2f:7c:a8:3b:d9:
ab:5f:cd:ad:dd:d1:30:e5:26:b8:7b:f5:bd:18:7c:
1c:56:13:3a:c0:e1:e4:20:7b:f2:15:59:fe:2a:a5:
3a:ae:6d:9f:33:16:fc:6e:8b:d6:b0:ff:cc:7f:85:
e0:55:4a:7b:4f:82:46:ba:a1:fc:d8:e1:81:37:3d:
07:7d:65:8d:ad:4e:b0:49:6c:7b:ad:fc:f1:fa:78:
04:da:cf:f4:29:f2:62:63:6a:c9:39:a2:8b:85:23:
fa:ac:5c:b4:ed:e2:4a:90:87:4c:a8:b9:f2:d6:ee:
e4:f8:e5:61:0f:8b:f7:49:b4:3e:a0:35:d7:b8:57:
11:88:3d:d5:a5:d3:12:9e:90:4f:21:ec:16:c0:10:
61:0a:1c:50:ab:73:ea:6c:ee:bd:63:6a:82:df:4d:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:D4:C0:8A:FE:27:61:B8:73:8A:0E:D6:B0:37:98:7D:84:5D:3B
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/aJzUwIr-J2G4c4oO1rA3mH2EXTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:c1:55:f5:97:e2:11:22:e7:4c:f8:7e:b1:56:2b:d9:90:d1:
f8:3c:47:e9:c9:4f:29:84:fc:b7:2b:98:b7:bc:fc:94:b1:a1:
e6:7e:ba:3d:b2:e6:cb:a3:01:a8:f5:d0:0d:50:12:bd:e6:93:
98:5f:f8:7a:c7:55:4c:18:fc:87:2e:68:d9:ab:27:24:3e:65:
61:06:0a:11:c4:97:4a:d9:b3:2e:e6:0c:c1:f9:c6:de:83:19:
68:f8:aa:ca:8e:8e:40:52:d2:40:f4:aa:14:c6:64:c7:6f:dd:
48:e4:d1:0e:97:74:52:30:d6:ff:b7:3b:d2:f3:3f:24:c7:b6:
90:9d:22:6c:f2:16:56:76:92:f7:72:e3:98:af:d8:59:88:4d:
b0:52:b5:49:cd:68:70:40:ad:d7:03:58:f7:99:0d:10:e8:9e:
63:94:62:7a:89:1c:cf:cf:67:b0:66:a1:61:ca:05:ad:37:1a:
47:df:72:d9:7d:cf:9e:1b:cb:d1:ce:f1:0a:b9:ea:20:d1:11:
12:5d:1e:fb:a6:bb:d3:30:c0:79:4c:87:4d:39:d1:05:7d:c4:
3c:6e:63:7d:3a:c7:83:f4:33:1f:9e:93:37:20:01:f4:be:50:
a0:53:f2:f2:1b:75:cc:13:e5:5a:da:90:01:fa:62:db:b9:9e:
17:e6:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:26 2023 by rpki-client on console-fra.rpki-client.org