Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/byly7P5VSxe_kBOeWLKseMY9Bes.roa
File: byly7P5VSxe_kBOeWLKseMY9Bes.roa (raw, json)
Hash identifier: f2uLr/5V0IH3zEUuJt+sJ2MQF+zS1nJKfT/m2MUm04g=
Subject key identifier: 6F:29:72:EC:FE:55:4B:17:BF:90:13:9E:58:B2:AC:78:C6:3D:05:EB
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 01848606816B40D6034C0EFD7A7D6CAD254C
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/byly7P5VSxe_kBOeWLKseMY9Bes.roa
Signing time: Thu 17 Nov 2022 14:38:03 +0000
ROA not before: Thu 17 Nov 2022 14:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200735
IP address blocks: 185.140.253.0/24 maxlen: 24
185.140.252.0/24 maxlen: 24
185.140.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:06:81:6b:40:d6:03:4c:0e:fd:7a:7d:6c:ad:25:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Nov 17 14:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f2972ecfe554b17bf90139e58b2ac78c63d05eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:41:5f:bf:ca:00:85:6c:70:ac:7d:a9:28:
f1:37:12:56:ad:44:40:2c:fd:f3:d1:c5:2f:2f:4c:
ef:7f:63:4a:7f:a8:d4:78:20:6c:65:9b:3f:6b:c8:
b4:0e:17:ab:9c:81:34:db:21:e9:3d:11:e2:88:8e:
e9:9d:77:eb:18:7a:91:0d:27:b1:4e:40:05:16:5a:
3c:4c:c7:34:03:2c:15:9e:b4:8f:7e:31:21:9b:e7:
fa:79:e1:82:0b:18:b4:b5:ed:2b:9a:5b:ba:5f:37:
98:15:68:e2:e6:9e:62:d3:7a:ea:c4:3b:f7:2b:09:
86:d2:c9:26:e9:f8:2f:3a:28:0d:0d:f8:98:e4:9b:
0f:ab:c9:cc:09:99:ab:9b:f9:d5:ee:bb:91:fd:77:
a0:4e:af:18:ba:49:13:15:c0:7e:16:9c:c0:a6:53:
ec:05:56:1e:ea:b2:3e:41:0f:69:a2:65:32:e5:66:
98:12:9b:5e:61:54:d5:51:1b:70:cf:76:b8:12:11:
8d:9c:0d:0e:57:f8:e7:f6:58:0f:a6:dc:b4:f9:82:
d0:79:41:88:2f:48:53:a1:e9:cb:38:f0:c3:bf:c4:
5c:90:86:7c:3f:50:00:12:80:62:eb:51:83:33:e4:
96:be:74:72:79:b5:1e:fe:21:5f:ab:77:45:ca:af:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:29:72:EC:FE:55:4B:17:BF:90:13:9E:58:B2:AC:78:C6:3D:05:EB
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/byly7P5VSxe_kBOeWLKseMY9Bes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.252.0/23
185.140.255.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1f:d0:d8:43:26:94:32:2d:6f:0d:5c:b8:cd:ad:6a:bc:25:
0b:a2:42:e0:5e:32:fc:13:bf:1a:f7:e5:cb:0e:0b:93:72:8f:
bb:b2:7f:28:15:32:6e:f0:fd:de:59:15:a4:e9:71:81:1b:77:
87:d0:df:d5:b9:d8:e2:aa:7c:99:b6:8d:a2:e8:f0:fe:b0:4f:
a3:94:07:bb:f7:a6:2c:ed:09:33:9b:9a:b8:9f:2b:87:24:47:
9e:72:dd:a1:c8:31:7e:49:05:e5:59:b1:be:24:c1:07:a3:aa:
f3:27:23:ae:8b:cc:30:ac:95:d5:41:db:e6:b4:84:f7:8a:9c:
dd:b5:15:55:6c:eb:12:ed:d6:50:c6:cc:5f:a9:c3:25:47:7b:
29:07:b8:2e:b9:ab:ae:7b:1a:2d:d1:eb:8a:0f:72:a1:93:57:
a2:44:07:f9:99:ed:78:32:1f:e5:bb:35:ca:f3:b9:f0:70:ad:
fd:bb:0c:9f:5b:7f:92:29:be:4d:ad:30:54:52:56:05:5a:04:
55:0f:90:7b:65:25:9c:c8:ab:67:a8:f7:e0:bd:32:7b:b3:67:
54:0d:24:3f:c6:4a:be:01:9d:f9:f6:9f:05:cd:a4:a8:62:7d:
67:a2:38:88:e9:a4:6d:4b:78:79:bc:90:5c:3b:fd:e2:b2:1a:
56:50:f0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:48 2023 by rpki-client on console.sobornost.net