Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/Pd3Qc5QgvIeSVyzBu7gvKND4Gpg.roa
File: Pd3Qc5QgvIeSVyzBu7gvKND4Gpg.roa (raw, json)
Hash identifier: rhF7eR+/UH/XbPHCBxqLCN4cD7t8oxYbzYL6Xcu010w=
Subject key identifier: 3D:DD:D0:73:94:20:BC:87:92:57:2C:C1:BB:B8:2F:28:D0:F8:1A:98
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 0E43C256
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/Pd3Qc5QgvIeSVyzBu7gvKND4Gpg.roa
Signing time: Sat 01 Jan 2022 05:00:31 +0000
ROA not before: Sat 01 Jan 2022 05:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48520
IP address blocks: 185.114.187.0/24 maxlen: 24
185.114.184.0/24 maxlen: 24
185.114.184.0/22 maxlen: 22
185.114.186.0/24 maxlen: 24
185.114.185.0/24 maxlen: 24
2a06:7100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239321686 (0xe43c256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Jan 1 05:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dddd0739420bc8792572cc1bbb82f28d0f81a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8c:55:74:74:51:ff:80:70:02:94:d5:e6:76:
35:2d:db:cc:a5:1b:9b:46:be:ff:fc:9d:bf:ef:d2:
76:7d:76:77:8e:8a:29:28:2c:ef:ef:2c:95:3c:9e:
2b:21:89:2a:9c:45:b2:2a:e3:4a:53:2e:56:d6:75:
54:6b:79:54:71:43:df:2f:77:eb:9f:86:4a:f5:b3:
b4:11:d3:72:07:ac:f3:e0:51:6f:49:9b:67:1e:f6:
e6:ae:ea:c9:18:f9:67:41:db:ff:de:7a:5b:83:28:
31:74:f9:1c:45:09:46:81:b9:dc:f8:18:26:d9:08:
f1:b3:be:a2:e9:56:09:7a:26:9d:4f:c7:2b:c7:32:
6d:8c:6e:52:13:4b:95:95:97:05:6c:85:b8:5a:35:
38:3b:e6:d1:30:53:63:df:e6:1f:a4:6a:bb:6a:77:
82:aa:1b:cf:9d:d4:46:f6:d9:49:4a:08:74:58:e7:
61:96:b3:7a:b5:a1:42:b8:81:ad:6a:cd:38:ad:3c:
6f:95:5d:ab:4d:15:f8:a5:fc:77:e1:ea:06:f6:d0:
45:51:bb:08:39:96:b6:ad:0c:50:17:cf:85:d3:e6:
5b:ef:6b:83:59:53:fd:a0:be:cc:1e:00:9d:f2:d8:
26:cf:cd:d6:16:90:cb:8f:09:af:8f:3b:54:cc:93:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:D0:73:94:20:BC:87:92:57:2C:C1:BB:B8:2F:28:D0:F8:1A:98
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/Pd3Qc5QgvIeSVyzBu7gvKND4Gpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.184.0/22
IPv6:
2a06:7100::/29
Signature Algorithm: sha256WithRSAEncryption
5e:8c:1e:4e:4e:f5:5a:4e:0b:a5:9d:17:bf:f0:2f:10:8c:f7:
9f:34:ee:47:fa:07:40:ac:a3:26:d2:6d:96:f5:3c:33:d0:62:
f6:53:3b:ce:11:17:97:51:95:2b:60:61:ce:89:1c:43:96:9d:
83:f1:f3:3e:76:8c:ea:f9:2e:c1:ad:96:51:12:b4:10:75:d7:
59:19:21:c5:57:0c:25:c6:64:74:e2:e0:91:40:4f:cf:f3:88:
45:2d:f7:ae:59:82:b0:14:b9:d4:78:24:16:5e:d3:62:0f:6e:
13:f3:7f:ab:96:96:cd:ea:c0:e2:cd:51:e5:e0:d0:e8:f8:76:
36:1e:d6:35:bf:f9:15:e4:de:1b:62:59:14:24:95:1e:bf:a6:
4f:bd:29:dd:38:68:bb:aa:f5:36:c1:d0:42:3a:e5:67:b4:88:
bd:1a:fb:54:dd:ee:51:2b:36:bb:9d:84:27:99:f3:e4:76:8a:
f9:67:eb:a3:5f:4b:5c:1d:0d:ec:44:26:0d:04:06:57:17:c1:
6b:b7:3a:60:08:29:ca:40:ec:57:d7:74:13:40:c9:b3:7d:5c:
85:cb:c8:0d:62:1c:cc:56:10:94:24:06:fd:cc:e2:8b:b3:eb:
b0:b6:a5:9a:a1:83:0b:19:53:d6:87:aa:ab:3c:11:74:35:30:
6f:29:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org