Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/4_yDw42YikIDQpnmRy8n3HjSwo4.roa
File: 4_yDw42YikIDQpnmRy8n3HjSwo4.roa (raw, json)
Hash identifier: wJh8T1QXDgkzYANtzgfk76dAh5arBSK2GHmbE9klSNw=
Subject key identifier: E3:FC:83:C3:8D:98:8A:42:03:42:99:E6:47:2F:27:DC:78:D2:C2:8E
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 10EFCBD2
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/4_yDw42YikIDQpnmRy8n3HjSwo4.roa
Signing time: Sat 01 Jan 2022 01:54:11 +0000
ROA not before: Sat 01 Jan 2022 01:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201199
IP address blocks: 185.82.103.0/24 maxlen: 24
185.82.102.0/24 maxlen: 24
185.82.101.0/24 maxlen: 24
185.82.100.0/24 maxlen: 24
185.82.100.0/22 maxlen: 22
2a05:8f00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284150738 (0x10efcbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jan 1 01:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3fc83c38d988a42034299e6472f27dc78d2c28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:08:cc:0a:01:2d:97:95:f1:d8:95:82:3a:
00:24:6f:26:50:d0:bf:6e:2f:a1:70:ee:1b:cd:e4:
de:d2:5d:51:cb:ed:a0:14:07:bd:70:33:4e:d4:70:
17:b8:88:67:56:43:62:4c:5c:83:23:19:10:a7:10:
a7:bb:2f:c8:98:1c:c4:e3:5c:d5:2d:31:7b:11:9e:
07:88:1c:71:55:ec:eb:5e:30:8f:8a:ec:75:8a:d2:
0d:48:2d:4e:7a:7f:9a:ad:ee:b1:8a:f0:50:4c:99:
c7:60:78:81:54:ae:7c:cc:4a:24:90:6a:ba:ae:cc:
23:1d:18:b6:c3:fa:c3:e6:6e:07:0c:d1:8d:d6:c9:
92:c7:cf:de:cd:62:1e:1a:4b:94:63:b6:5c:4b:5f:
06:72:1f:98:a8:64:0d:5d:46:be:38:46:8c:a7:b6:
97:d7:1f:5d:11:5b:83:cf:55:93:b7:c9:35:2e:27:
9e:34:d0:ea:ea:de:4e:cd:84:89:17:67:d1:9b:e4:
3d:ac:63:94:80:90:92:78:9b:db:ee:a6:cc:5f:21:
e3:0c:00:0a:e8:a9:c6:6a:7f:a6:37:4f:59:7a:b7:
86:08:95:c2:ee:94:b0:a0:d6:2c:21:14:fe:f9:88:
f8:75:81:68:a5:14:79:6d:15:88:d2:c6:43:f8:30:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FC:83:C3:8D:98:8A:42:03:42:99:E6:47:2F:27:DC:78:D2:C2:8E
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/4_yDw42YikIDQpnmRy8n3HjSwo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.100.0/22
IPv6:
2a05:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
54:39:1f:31:f3:13:d4:19:fa:b5:e7:68:26:e6:a1:1b:bd:62:
07:1e:d2:a1:0c:40:37:38:10:6f:b1:26:60:9c:a2:fb:e2:9c:
ed:98:dc:8c:ce:b1:98:50:68:4d:8d:49:c6:32:1e:8d:3d:7c:
b1:0c:e1:c4:f7:9f:d8:06:e9:5f:fe:83:94:1f:6b:66:c7:1e:
f0:5f:4f:e7:0a:b7:b2:cb:85:46:4e:be:df:4e:d7:e3:fc:ed:
d7:46:8b:88:9d:f1:0c:34:75:00:f1:01:4b:b7:20:49:9d:85:
e1:af:a9:c5:83:02:18:4c:f5:8d:4d:9b:b9:31:ec:71:5e:ff:
20:c9:9f:aa:c0:02:5d:3a:62:50:a3:81:0b:b7:74:37:fc:cc:
0e:47:6a:db:3e:fe:6e:99:99:ff:e4:62:01:fc:0b:da:5f:07:
85:94:41:c8:09:b5:b4:02:1d:77:48:0f:9b:47:7d:65:fa:dc:
04:af:05:94:08:45:e1:65:92:26:9e:99:c5:56:f3:40:f7:55:
85:1b:37:0f:b7:5e:5b:86:35:c3:ce:c1:2b:9d:e2:4a:a8:01:
98:ed:84:42:d0:33:e2:f1:a5:d6:65:d7:15:df:ae:46:a6:e8:
41:22:35:82:7e:ed:d9:96:ae:fe:09:36:e5:6b:6d:aa:11:73:
f6:d4:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:45 2023 by rpki-client on console-ams.rpki-client.org