Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/ciWDkcVn1BBSRrvztDhAfJ5fvzw.roa
File: ciWDkcVn1BBSRrvztDhAfJ5fvzw.roa (raw, json)
Hash identifier: dRDFLeR54uZz4nz0EoMFrlFJgQJ7sgae6R3CQrW8V6c=
Subject key identifier: 72:25:83:91:C5:67:D4:10:52:46:BB:F3:B4:38:40:7C:9E:5F:BF:3C
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 0AC56AFA
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/ciWDkcVn1BBSRrvztDhAfJ5fvzw.roa
Signing time: Sat 01 Jan 2022 09:02:28 +0000
ROA not before: Sat 01 Jan 2022 09:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206281
IP address blocks: 185.220.172.0/24 maxlen: 24
185.220.175.0/24 maxlen: 24
185.220.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180710138 (0xac56afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Jan 1 09:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72258391c567d4105246bbf3b438407c9e5fbf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:c0:bb:64:01:3b:d5:ed:e5:f1:59:64:53:
c4:2f:df:f3:88:33:4b:18:d2:8f:74:d4:91:ca:a5:
b5:69:0d:05:5a:e7:27:40:50:17:94:91:69:5f:e4:
b4:7d:5e:0b:b2:82:94:5a:56:6d:91:2c:12:34:af:
c4:17:77:24:06:a8:17:c0:b9:1e:a5:86:d7:af:45:
04:9b:4e:2a:fb:db:ca:7e:f8:18:42:8c:78:41:cd:
56:d4:11:f2:0b:43:ec:04:ac:6f:13:de:80:de:d5:
6a:6e:77:81:b5:29:bd:f3:27:df:7d:45:d1:71:5e:
7c:0c:57:59:ce:9c:fa:31:1b:76:bb:47:7b:13:c7:
56:9d:da:ff:64:ec:8e:c1:fc:98:84:3d:4e:db:8a:
76:f2:f7:d0:9f:6f:d8:45:97:2c:c7:c4:b8:1e:02:
10:b0:e5:7f:a8:69:a1:f5:b8:e9:ff:dc:17:c4:a8:
00:63:d0:95:af:a5:77:36:2a:45:9d:fd:68:b6:9e:
7b:3d:bf:f8:dd:c3:12:bf:bb:a2:52:26:b7:4c:de:
0f:34:87:a3:e0:04:3d:83:8e:1b:93:09:13:be:b4:
ad:78:a6:6b:ba:4b:63:39:71:99:1d:ed:8b:fa:cc:
1b:fb:3b:97:57:58:90:fa:33:d7:c0:f7:98:b9:ef:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:83:91:C5:67:D4:10:52:46:BB:F3:B4:38:40:7C:9E:5F:BF:3C
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/ciWDkcVn1BBSRrvztDhAfJ5fvzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.172.0/24
185.220.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:00:00:d6:f8:42:57:dc:f3:88:54:ac:89:5c:15:83:ab:0f:
a6:3c:24:fa:8d:79:00:b3:64:f8:42:28:df:f3:aa:53:56:a7:
d8:5c:84:1d:f6:2f:2b:27:fd:ba:c0:2f:76:d9:f0:4b:71:36:
24:1a:6e:00:14:04:f5:5f:93:29:1d:20:47:b5:77:ac:87:c8:
ce:66:9d:0d:b4:1c:95:50:ca:71:32:ab:88:cf:f0:b8:14:24:
e2:1f:e9:3e:d0:a3:09:76:56:ec:2c:c0:af:7e:a9:18:3c:06:
60:81:17:a9:a1:76:5a:2d:a5:89:c3:e5:ed:c6:49:62:b9:f9:
56:2f:5d:60:35:1a:74:22:3e:bd:42:b7:e0:b7:af:9e:09:83:
a1:11:5e:68:93:05:af:20:b4:d1:71:0a:6e:20:37:ad:c5:94:
2e:5f:ed:12:1c:a9:e2:5d:fa:8c:e4:27:a8:ab:bc:cd:5a:4e:
7b:da:19:d4:d6:18:6c:1e:a0:39:96:75:f7:19:57:10:e0:ca:
7c:6e:64:56:ed:bf:0f:96:0b:32:c7:a3:52:df:39:55:56:23:
c0:da:d7:96:8b:fd:93:89:be:c5:3a:43:34:f5:95:e5:a2:46:
c4:75:51:7d:7a:1a:67:c6:51:45:40:7d:ea:12:d7:00:39:c9:
41:48:a0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:21 2024 by rpki-client on console-ams.rpki-client.org