Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/SkxJIHRvkc4Qfcp_X2dG0EUkpBs.roa
File: SkxJIHRvkc4Qfcp_X2dG0EUkpBs.roa (raw, json)
Hash identifier: wmU6vtSQe0I3Jj0GKtQE/AE9jzLY/OML1VGue+0oIo4=
Subject key identifier: 4A:4C:49:20:74:6F:91:CE:10:7D:CA:7F:5F:67:46:D0:45:24:A4:1B
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 1A533EEB
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/SkxJIHRvkc4Qfcp_X2dG0EUkpBs.roa
Signing time: Sat 01 Jan 2022 06:59:48 +0000
ROA not before: Sat 01 Jan 2022 06:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200049
IP address blocks: 185.38.74.0/24 maxlen: 24
185.38.75.0/24 maxlen: 24
185.38.72.0/24 maxlen: 24
185.38.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441663211 (0x1a533eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Jan 1 06:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a4c4920746f91ce107dca7f5f6746d04524a41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:fd:6c:18:f1:00:f5:cb:52:cf:69:f6:50:
db:5e:90:2a:1c:1c:4b:08:64:37:7f:b3:de:7d:e6:
c6:2e:f1:38:4b:70:57:91:b0:0e:95:b2:a5:85:0f:
a2:5b:f5:6b:20:7a:21:61:66:37:c1:f0:07:07:21:
56:bf:a9:65:54:d4:e2:3f:3c:8f:7b:22:61:36:aa:
2a:bb:10:96:34:3c:12:f3:71:9b:e6:2d:8a:fd:9e:
38:0f:42:72:9f:0e:f1:84:cd:db:b6:75:d2:ae:30:
6a:23:ed:1b:18:e8:ed:7e:89:cd:60:39:0a:33:06:
16:c8:3a:e0:ea:43:fc:85:4c:eb:20:b2:a9:10:72:
05:f0:c6:9e:a4:49:8b:0e:42:e0:cf:07:d0:3c:dc:
c1:ba:36:3b:20:be:db:2b:d6:55:e9:b3:9f:18:3b:
33:5f:77:05:80:37:55:71:35:10:5e:9f:1f:2a:a7:
32:75:84:a1:14:76:f9:e2:af:92:c5:b0:42:8d:51:
f3:83:9d:26:96:a1:4e:00:48:4d:48:b9:b2:ab:6b:
40:64:63:a1:f1:c6:34:1a:70:6b:1d:b9:35:3b:12:
7d:95:d5:a1:eb:02:ac:2a:97:85:f1:4e:6c:0a:3e:
61:81:a8:08:a2:17:c9:33:b5:06:f9:11:99:a3:90:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4C:49:20:74:6F:91:CE:10:7D:CA:7F:5F:67:46:D0:45:24:A4:1B
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/SkxJIHRvkc4Qfcp_X2dG0EUkpBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:2b:87:c2:c4:98:10:b2:30:fb:b4:0a:f0:9c:b1:88:af:14:
54:7d:8e:a1:42:a1:eb:a1:00:93:a7:ed:8a:4f:00:78:4b:63:
a3:0c:4a:53:65:55:d0:96:ed:ce:65:f2:20:92:49:53:01:a1:
05:c8:47:fa:15:04:68:22:18:5b:17:f5:cc:e8:77:0e:73:a9:
5a:c1:bc:c6:e4:9b:da:37:8a:68:88:b6:d7:91:2c:1a:9d:c8:
c4:54:4e:2a:10:05:d5:29:c4:de:a9:08:1c:cf:f3:f0:c2:16:
03:de:1a:8c:b9:db:46:e4:c4:7d:bb:28:b2:dd:a8:dd:bd:65:
32:50:c3:a6:12:9e:36:eb:ec:5c:e4:9d:62:33:fb:e5:7b:33:
90:be:01:b7:a2:44:7b:ee:8f:cb:d6:b5:78:de:e1:98:8b:e9:
2e:3b:44:27:01:28:51:01:38:38:96:b2:af:66:d6:e4:3c:23:
ad:14:47:d6:8d:3f:0b:69:d9:cd:9a:5f:a1:69:c7:8b:f3:2e:
15:dc:01:a1:53:8b:38:90:5f:74:0d:ee:65:30:82:05:52:ca:
a3:98:50:5d:9a:31:09:32:e3:41:53:ab:8d:da:7e:a9:37:c4:
83:d8:74:db:58:1a:f6:61:de:82:bd:a2:f5:d2:45:a3:4f:51:
f6:e4:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:16 2024 by rpki-client on console-fra.rpki-client.org