Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AtHtK3R-x5YOo-MaxRV-cC4vNQA.roa
File: AtHtK3R-x5YOo-MaxRV-cC4vNQA.roa (raw, json)
Hash identifier: 5uzihDDIB/e8gK+w+Xoe8q1lRzKJ+GORLCnUQiuuVpo=
Subject key identifier: 02:D1:ED:2B:74:7E:C7:96:0E:A3:E3:1A:C5:15:7E:70:2E:2F:35:00
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01847529C8286044AD729A1C30F857269897
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AtHtK3R-x5YOo-MaxRV-cC4vNQA.roa
Signing time: Mon 14 Nov 2022 08:03:03 +0000
ROA not before: Mon 14 Nov 2022 08:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 194.180.49.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:29:c8:28:60:44:ad:72:9a:1c:30:f8:57:26:98:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 08:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02d1ed2b747ec7960ea3e31ac5157e702e2f3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:2d:18:da:1e:4e:d3:32:22:83:70:40:57:
e2:c5:d4:8d:c3:44:f9:9b:39:e2:62:80:e6:ab:42:
09:1a:c3:29:95:bb:f2:f3:f8:8e:e4:55:33:10:5d:
a7:c6:68:97:38:7d:9c:0a:d4:fd:7a:e2:a2:e6:59:
02:48:63:b8:f9:a5:2f:c9:d0:2e:c8:83:4c:00:99:
f3:df:8b:cb:6d:47:a0:25:34:50:93:1a:3d:95:a4:
f8:c9:02:a3:45:ca:5d:b6:2a:b8:9a:a6:0d:6c:80:
ed:96:68:f3:73:7c:ca:86:03:2e:fc:7f:47:4b:0a:
1d:2a:0b:b4:c4:7c:e2:6e:32:e0:4e:fd:58:df:8a:
b0:eb:16:7f:dc:1f:88:e9:b2:67:b0:46:7f:ce:97:
37:83:28:e9:9b:e4:1b:b3:e0:8d:76:4b:da:38:1e:
30:ff:57:2e:be:d4:5d:80:7d:00:69:31:b4:34:c9:
36:90:4a:1e:c5:1b:91:f3:bd:8e:f5:53:ca:a7:83:
b3:60:4f:f1:9e:e9:53:a9:27:f1:b7:b1:50:cb:f5:
6e:fe:89:ab:69:48:d8:7b:41:1e:1b:d2:af:71:da:
cd:da:95:1f:a9:3d:c1:56:66:1f:3d:42:e0:8c:87:
b3:ce:84:89:a8:2a:c7:77:ac:c6:99:8d:3a:ac:d9:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:ED:2B:74:7E:C7:96:0E:A3:E3:1A:C5:15:7E:70:2E:2F:35:00
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AtHtK3R-x5YOo-MaxRV-cC4vNQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.75.0/24
194.180.49.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d5:3a:98:75:2b:12:21:f6:0c:aa:36:ca:41:58:ff:81:d3:
87:d7:20:29:ef:46:63:58:c1:79:c0:62:d3:8f:39:8f:e9:23:
f6:9e:f2:b4:24:5a:d8:6d:80:be:26:59:82:c8:e6:ab:14:c0:
0e:d6:5a:91:8c:6b:0e:e4:0b:8d:f0:7b:bf:fc:ea:cd:6d:ab:
9a:e4:45:5c:4a:9e:13:6d:d6:02:23:4d:41:cd:73:12:97:17:
44:65:7d:59:f3:6b:b2:65:fb:6b:ba:7b:c5:25:a9:ef:d5:be:
aa:36:68:a1:12:e3:e1:a9:02:f2:b5:23:ae:26:cf:57:f9:12:
19:b5:a3:1e:d9:09:08:a9:a9:3f:c1:5a:5b:6f:b9:50:14:b1:
5b:57:04:34:82:03:0c:b0:dd:b5:b8:a4:36:1c:9a:31:f1:58:
c5:ca:b4:89:d3:ae:f4:17:a8:44:39:59:20:5c:92:8e:25:88:
f1:0c:8d:5f:b2:46:c6:5a:03:6c:41:a4:6c:2d:fb:20:ec:32:
b7:92:2f:bd:9d:db:8b:77:21:b6:3e:3b:23:46:62:96:0d:3c:
63:bd:48:6b:91:7d:a9:4f:e1:e1:0f:a2:64:06:ed:82:9e:e2:
da:95:28:19:0a:2d:c5:af:b6:8e:cd:f5:d2:33:57:10:42:ea:
96:aa:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org