Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/cWF-GNq2lGGgpJjgAyeTvXvPhpY.roa
File: cWF-GNq2lGGgpJjgAyeTvXvPhpY.roa (raw, json)
Hash identifier: qhKAjRhh+JHA8xX54+tuG0amo7xJtd+ddE4bXamK1ug=
Subject key identifier: 71:61:7E:18:DA:B6:94:61:A0:A4:98:E0:03:27:93:BD:7B:CF:86:96
Certificate issuer: /CN=3bc88e93d895033164bcef97539d8c89d6717dab
Certificate serial: 0801B590
Authority key identifier: 3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/cWF-GNq2lGGgpJjgAyeTvXvPhpY.roa
Signing time: Sat 01 Jan 2022 02:58:30 +0000
ROA not before: Sat 01 Jan 2022 02:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48347
IP address blocks: 185.148.36.0/24 maxlen: 24
185.148.37.0/24 maxlen: 24
185.148.38.0/24 maxlen: 24
185.148.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134329744 (0x801b590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc88e93d895033164bcef97539d8c89d6717dab
Validity
Not Before: Jan 1 02:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71617e18dab69461a0a498e0032793bd7bcf8696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:f8:a5:31:2a:24:c9:75:d4:04:6a:2a:8a:
ce:ce:a2:8d:4c:93:39:df:95:13:16:c4:cb:ef:2f:
fe:84:23:e2:a8:50:6b:e6:93:b8:4f:29:fa:7c:c0:
f8:69:1a:1e:49:8a:07:c8:12:5d:37:a5:fc:26:c3:
56:59:5a:a9:9a:95:b5:cc:22:f8:8e:67:43:c1:d1:
29:a7:64:5f:89:e7:58:69:63:db:97:09:02:a6:dd:
cf:89:45:70:dd:49:fd:af:a2:fd:61:69:1d:5c:0e:
cf:90:6c:00:3b:fe:6b:51:8a:79:3a:b3:0b:37:f4:
23:a6:61:21:df:01:c4:47:8e:38:a2:af:7d:fc:0e:
46:fc:25:75:ab:49:d5:92:ea:7c:9e:5e:d0:e4:e7:
c6:5c:ee:e0:4a:cc:9a:b8:96:ff:d6:2f:5f:2f:9f:
3a:32:52:3d:c2:38:f9:c6:96:56:e0:24:c8:3a:d1:
39:a7:b3:9f:75:33:3a:ac:c4:cd:45:37:6c:0e:2a:
91:28:9c:72:d7:0a:30:9c:0a:e6:5f:40:ed:96:44:
0f:fe:ef:37:2d:c4:3b:a1:f1:2b:ca:43:8c:77:a7:
2d:ce:a8:7e:23:0b:16:98:1b:d5:ae:b4:40:9f:fc:
c9:1a:7a:b0:84:61:f7:46:5c:85:4f:48:3c:0c:61:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:61:7E:18:DA:B6:94:61:A0:A4:98:E0:03:27:93:BD:7B:CF:86:96
X509v3 Authority Key Identifier:
keyid:3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/cWF-GNq2lGGgpJjgAyeTvXvPhpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.36.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:c7:5b:fd:d2:e0:01:12:1d:b1:01:16:3b:90:49:83:40:67:
78:e6:3d:ba:4e:70:0d:23:5b:6e:fb:f0:e0:39:46:d1:cc:8b:
91:19:45:6f:b2:9d:6c:fe:16:ad:4b:74:90:43:aa:84:b0:1b:
82:a8:ce:cf:10:80:6b:b9:5b:62:0a:cc:b2:e5:be:cc:ac:7a:
05:af:a1:99:f6:28:2a:f3:83:b9:fe:df:55:b5:44:13:b6:39:
50:b6:70:e6:dc:45:cc:5b:d1:f0:ac:62:c0:bb:43:b3:b3:03:
90:65:e9:43:39:ec:09:1c:33:14:81:e6:43:0e:02:be:b1:14:
2e:f1:19:86:17:48:a2:64:bc:0a:2f:3f:90:48:70:a8:a4:a1:
05:fa:3b:d2:ca:26:29:f5:a4:78:8f:94:5a:2b:ad:68:17:fb:
c4:ed:0b:58:b3:1d:29:c5:23:6d:59:0b:94:97:c7:53:74:18:
b7:2a:33:cd:7f:c9:13:31:c9:e0:c0:7e:d4:ca:ce:23:cf:72:
d8:cc:b6:dd:39:45:af:23:4b:dc:96:e7:33:e6:7c:b1:ab:9a:
12:7c:d5:c2:0b:43:ca:1a:61:58:92:5b:95:a4:8d:0e:6b:bd:
76:f4:c0:70:1d:1d:b4:e6:97:a3:f9:88:b0:70:83:11:f9:3c:
65:d6:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:09 2024 by rpki-client on console-fra.rpki-client.org