Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/pOBDMOBwhBVGdKoIAbQuRppgmX4.roa
File: pOBDMOBwhBVGdKoIAbQuRppgmX4.roa (raw, json)
Hash identifier: BhrVH6Ju2W+L4xKzFIWE4Q077F1EHgjb+hLa9E8/P0U=
Subject key identifier: A4:E0:43:30:E0:70:84:15:46:74:AA:08:01:B4:2E:46:9A:60:99:7E
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 0EE1F13E
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/pOBDMOBwhBVGdKoIAbQuRppgmX4.roa
Signing time: Sat 01 Jan 2022 13:56:01 +0000
ROA not before: Sat 01 Jan 2022 13:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 185.161.233.0/24 maxlen: 24
185.161.232.0/22 maxlen: 24
185.68.44.0/22 maxlen: 24
185.68.44.0/24 maxlen: 24
185.68.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249688382 (0xee1f13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 13:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4e04330e07084154674aa0801b42e469a60997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:2c:17:8e:f6:58:19:62:d7:4a:90:83:1b:
84:38:13:fe:74:fd:ac:02:bc:51:58:42:c5:dd:1f:
31:31:74:12:ff:88:4a:6f:c7:08:73:33:bf:77:2b:
75:49:e8:35:ff:24:1c:2d:d0:ef:e3:6d:85:6b:d2:
13:c8:82:2c:f9:22:c0:58:2a:f9:5d:2b:e7:c5:75:
52:b8:79:32:54:da:b4:31:0b:27:b6:f2:09:17:b8:
69:81:e4:6b:31:1a:a0:12:92:06:c3:af:46:74:31:
30:28:8e:67:28:36:ae:59:12:c6:bc:36:64:7b:76:
b1:98:64:4e:b4:35:2a:9a:e3:20:85:81:16:a5:c9:
1e:b0:c2:78:20:86:35:f1:9b:93:ea:fb:c2:3a:93:
a5:e6:5e:6e:73:e9:d1:2c:e4:db:ca:73:16:a0:e0:
33:c1:a8:e4:5e:1d:91:22:9c:ca:ed:aa:58:e5:89:
69:c0:01:76:04:8e:84:42:94:de:73:da:1d:7c:c6:
97:cf:a5:76:57:d1:c2:02:df:0b:f5:67:1e:a7:e3:
83:9c:90:f8:45:d2:a4:61:49:84:78:9e:4b:26:63:
ec:b2:68:6e:d1:fe:ce:49:9c:b2:c4:0f:7b:7f:b7:
10:fe:0d:e8:be:cf:fc:3a:9c:50:81:80:14:ad:09:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:43:30:E0:70:84:15:46:74:AA:08:01:B4:2E:46:9A:60:99:7E
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/pOBDMOBwhBVGdKoIAbQuRppgmX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.44.0/22
185.161.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:16:e8:04:21:bb:a1:3e:b2:03:68:9a:4a:f1:4d:45:d0:18:
7a:70:ab:e6:26:03:a2:33:95:68:64:c1:7b:ff:4a:78:9c:eb:
2b:f2:81:36:18:8e:26:d5:87:36:6f:ce:73:a1:84:5c:0a:ae:
d6:72:99:22:13:8b:aa:59:ce:56:cd:df:0e:bf:59:85:17:9c:
80:a5:f7:b7:f3:77:ce:62:95:70:ad:7f:7f:c1:5a:78:ee:8d:
e3:5f:b9:5f:8a:05:f7:21:a3:f5:88:90:69:76:b6:80:a2:11:
d1:2b:a0:71:be:32:8a:85:ae:f7:26:bd:ca:d3:d6:5b:cc:ba:
07:64:2d:e3:c1:88:33:d2:10:35:03:02:48:04:11:27:b1:6d:
56:1f:ea:09:21:b8:47:fe:02:f9:70:9e:15:32:b6:26:33:0b:
28:da:50:82:46:17:d6:32:67:6e:05:b5:ee:85:60:99:e2:42:
91:07:84:be:60:c7:2d:5d:6d:89:94:52:70:8d:36:24:1c:3d:
21:b2:d8:54:34:ca:b8:8f:8a:50:33:6a:2b:91:3d:4a:22:9d:
a1:f9:c5:92:65:3f:29:2c:74:00:7f:58:30:b8:54:2d:89:a3:
c6:1e:ff:14:ce:1e:ca:b1:97:48:4c:fa:f3:1a:54:b0:78:e9:
f6:17:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:39 2024 by rpki-client on console-fra.rpki-client.org