Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/iiARwEXLJETD2CkzUPChOLPikGk.roa
File: iiARwEXLJETD2CkzUPChOLPikGk.roa (raw, json)
Hash identifier: Rjy9Ki+6XyYoCbk6LTHfnpKz2pGpQe/aJutTRfD2sJ4=
Subject key identifier: 8A:20:11:C0:45:CB:24:44:C3:D8:29:33:50:F0:A1:38:B3:E2:90:69
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 01830E89B9881F227B1EF73F1CE8857B3D70
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/iiARwEXLJETD2CkzUPChOLPikGk.roa
Signing time: Mon 05 Sep 2022 16:44:10 +0000
ROA not before: Mon 05 Sep 2022 16:44:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3262
IP address blocks: 185.226.229.0/24 maxlen: 24
185.220.166.0/24 maxlen: 24
185.220.167.0/24 maxlen: 24
185.232.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:89:b9:88:1f:22:7b:1e:f7:3f:1c:e8:85:7b:3d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Sep 5 16:44:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a2011c045cb2444c3d8293350f0a138b3e29069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:88:e2:14:1c:79:eb:ae:0f:c9:dd:dd:ff:
d4:e2:d5:02:3d:9b:1e:85:13:0f:ac:4c:63:58:1c:
df:04:43:31:dc:d4:e7:8a:1b:0b:85:83:36:dd:02:
70:a8:4b:52:13:c4:a2:90:3a:80:9c:31:f6:8e:41:
9c:ac:da:72:72:05:5e:15:d3:0c:a7:a5:2e:f2:bd:
11:59:c7:df:83:7a:74:40:1f:b0:c5:97:fe:47:93:
40:75:94:5e:e7:75:75:f4:63:3d:ca:52:f0:00:ea:
ac:7d:04:d8:4e:8e:c1:b2:3a:ba:d7:e2:01:6d:72:
40:66:28:02:1c:82:b8:01:86:3e:8d:45:e8:7a:62:
a4:5d:7f:72:9d:88:5b:31:90:bd:b3:65:fe:7c:6e:
2f:9e:69:ac:72:85:da:85:e5:7d:20:02:c5:97:1d:
7e:26:9c:ac:3c:b2:c2:dd:22:75:31:29:d4:97:0f:
7d:47:51:66:a5:d5:7e:83:6c:b2:36:82:a3:84:68:
a2:67:53:97:a3:a2:9e:dc:4e:3c:e6:96:17:93:ca:
c1:a2:df:8f:b3:db:d2:3b:49:53:7e:6f:e2:75:ee:
2e:4c:af:1d:3b:65:bd:e2:02:cf:2d:c4:72:e6:87:
0a:28:91:86:56:c9:fc:1e:3f:b5:ea:ec:a7:69:ed:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:11:C0:45:CB:24:44:C3:D8:29:33:50:F0:A1:38:B3:E2:90:69
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/iiARwEXLJETD2CkzUPChOLPikGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.166.0/23
185.226.229.0/24
185.232.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:dd:01:58:dc:a0:22:61:00:c1:18:41:e7:9a:e7:fa:6b:1a:
94:9f:43:f0:56:84:76:33:b5:85:10:2c:24:85:7f:d3:77:28:
23:e3:1e:d3:af:e8:e8:19:b1:f2:7c:1e:33:16:a7:f4:34:1b:
1b:d8:01:b2:73:42:95:2b:fc:db:43:f1:d7:8f:93:55:f8:74:
e4:65:62:97:96:fc:92:50:41:20:45:7c:7c:cb:65:d7:49:5d:
3e:6d:3b:81:f3:dd:44:fa:9e:57:31:1a:c4:e3:9a:46:a0:21:
05:38:05:40:64:69:78:7d:9e:69:19:5f:43:e9:eb:48:41:b5:
97:9d:82:ba:e4:24:48:cb:ab:fc:df:50:bb:e6:17:48:d9:50:
8d:a8:f0:ec:28:ab:30:70:86:e0:f8:e1:ca:93:2e:3e:93:2c:
92:25:f8:8a:d3:20:2e:a5:b1:d8:f3:9b:d6:25:62:13:a4:76:
bf:e0:ad:80:a4:e8:f6:c7:57:03:88:14:75:40:65:bd:66:06:
31:70:5c:64:5a:ce:5a:75:ee:df:b1:bd:52:29:ab:64:a0:c1:
ec:54:9b:8d:6a:53:87:d0:84:36:82:0f:a8:39:8e:5c:72:11:
c9:7c:4c:d0:97:20:82:0e:a9:2f:e6:13:f8:16:0c:c7:d8:81:
d8:01:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org