Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pDDpaHHxbfI-_xU1wA2JsNQvR6c.roa
File: pDDpaHHxbfI-_xU1wA2JsNQvR6c.roa (raw, json)
Hash identifier: L9HW65G2ef/23IqwgaYbu5hNEHVSJlI10EiKVrBDjPA=
Subject key identifier: A4:30:E9:68:71:F1:6D:F2:3E:FF:15:35:C0:0D:89:B0:D4:2F:47:A7
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 798CEF
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pDDpaHHxbfI-_xU1wA2JsNQvR6c.roa
Signing time: Thu 24 Mar 2022 08:03:50 +0000
ROA not before: Thu 24 Mar 2022 08:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200420
IP address blocks: 212.110.157.0/24 maxlen: 24
192.109.248.0/24 maxlen: 24
185.76.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7965935 (0x798cef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Mar 24 08:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a430e96871f16df23eff1535c00d89b0d42f47a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:8c:2e:8b:48:6e:ab:e1:05:54:d3:2e:da:
a3:bf:be:4e:a9:b0:f4:c1:c3:37:1f:0f:1e:93:06:
40:61:b5:38:72:d4:a3:55:e6:ea:95:d2:45:7b:78:
9b:a0:91:8b:bc:38:97:07:a3:76:5d:2c:7f:9f:2e:
78:98:4e:da:c1:48:f5:39:91:54:97:ae:e2:2e:7f:
01:ab:f4:ea:ff:34:17:16:93:7c:b5:d4:a2:c3:fd:
f1:19:ed:1d:08:63:b0:2b:d9:86:5a:4c:b9:f7:ab:
a0:c2:10:30:bd:b0:44:38:c9:38:25:51:54:c3:2b:
07:54:3b:a2:fd:e3:cb:0d:8d:e7:74:04:78:14:e3:
ec:d8:a9:2e:b3:8e:75:17:db:aa:7a:c3:12:97:e6:
2f:b0:5a:e9:ce:8a:6d:68:d9:a7:8b:0b:f1:df:f7:
b3:f6:f9:d1:9c:17:f2:71:88:a4:69:c5:10:42:6d:
49:e4:ec:3c:f3:a3:f1:82:02:57:38:57:7e:94:9b:
9a:49:00:21:55:1e:1d:45:5f:76:8e:92:83:a2:4e:
01:ff:ac:1f:a2:20:1b:2f:8e:c7:42:88:ab:69:40:
58:a8:e6:a8:1f:6a:dc:12:29:39:55:66:1d:10:54:
5c:3b:2c:e9:fd:5a:9c:16:c2:09:67:6a:68:67:10:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:E9:68:71:F1:6D:F2:3E:FF:15:35:C0:0D:89:B0:D4:2F:47:A7
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pDDpaHHxbfI-_xU1wA2JsNQvR6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.82.0/24
192.109.248.0/24
212.110.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c7:4d:65:ee:fe:19:69:6c:f3:37:72:29:a4:09:3e:f0:b6:
a0:5c:e7:ad:f7:22:20:f0:b3:5e:79:18:4b:a0:a1:f2:58:b0:
0c:b4:cc:e1:cf:44:e9:bc:95:00:cb:77:18:72:6f:30:1a:be:
d2:e5:a0:3c:4b:85:64:d9:f0:a0:d6:28:09:c9:62:70:f5:23:
fb:f1:33:7b:c6:b4:33:1b:60:00:aa:9d:72:9b:83:00:98:ad:
0c:d3:f0:c1:11:97:b9:97:44:3a:e7:75:5b:4a:c9:8a:42:0b:
cb:7c:e0:63:f9:b3:f7:7f:5e:b9:8c:05:68:ec:c0:71:f3:17:
58:82:10:f3:1b:61:30:9d:23:cb:02:2a:15:b9:3c:31:b4:5b:
c7:4e:19:f2:a4:a0:32:b0:a4:7b:8f:65:e3:e1:60:54:6b:15:
30:94:cc:dd:74:af:ab:60:9f:9c:67:27:69:55:65:73:e6:35:
4d:4d:28:91:e1:06:24:07:d2:9b:a3:d2:03:46:92:b6:53:59:
49:11:6c:04:d9:3c:8c:db:15:ff:d8:e4:70:18:85:ce:31:80:
82:43:9b:fe:1a:b5:fc:83:f1:85:b8:86:f5:b9:b3:bb:35:68:
af:65:d3:1e:ba:64:ad:82:16:32:ac:87:df:13:7d:cf:38:7d:
50:1e:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:56 2023 by rpki-client on console-ams.rpki-client.org