Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OLm0D4e6KB3HvrFY4BHusoYOWz0.roa
File: OLm0D4e6KB3HvrFY4BHusoYOWz0.roa (raw, json)
Hash identifier: YyGXAKwA6kdli73a9GWGNc33bdT6Nj6OtFuyOdJI5Cw=
Subject key identifier: 38:B9:B4:0F:87:BA:28:1D:C7:BE:B1:58:E0:11:EE:B2:86:0E:5B:3D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C63B207
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OLm0D4e6KB3HvrFY4BHusoYOWz0.roa
Signing time: Sat 01 Jan 2022 01:02:28 +0000
ROA not before: Sat 01 Jan 2022 01:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 164.40.188.0/22 maxlen: 24
185.246.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476295687 (0x1c63b207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38b9b40f87ba281dc7beb158e011eeb2860e5b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:e4:d0:ed:44:af:da:bd:38:d8:de:57:e1:
3a:41:3d:ac:32:b0:40:8d:71:cd:47:9e:3b:1a:6b:
4c:4c:0a:e9:32:4c:d0:80:c4:8d:a8:c5:1c:5e:af:
ce:9e:75:65:c1:50:f6:b0:b0:f2:28:9b:c3:12:58:
b4:c5:ba:30:ae:61:b3:47:a2:2b:b2:6a:33:80:d1:
30:78:39:3d:9d:1f:e3:3c:d8:c8:b1:0f:c9:66:28:
50:39:28:01:6c:8b:66:00:44:fd:65:be:4d:5b:a7:
ed:56:84:49:dd:b1:f1:dd:84:25:07:e7:e0:e3:73:
31:c8:4f:a4:09:73:f4:76:69:64:0a:87:88:8e:fc:
38:f1:c4:d1:3c:12:9c:27:9f:6f:4d:75:29:bf:33:
14:55:d1:5d:37:1e:d8:27:cd:f3:b7:9d:09:85:25:
d4:c5:f0:6b:dd:87:78:3f:47:2a:52:22:fd:b3:23:
2d:51:6e:80:8e:49:25:43:c2:69:57:90:e3:6a:02:
62:de:83:a2:40:01:c7:e2:f6:93:75:b0:7a:22:2b:
a1:c9:ac:c2:11:ed:0b:36:8f:35:5a:c7:19:27:92:
a3:a4:c9:eb:e7:6e:a6:7d:2a:4c:72:95:d7:7e:33:
10:3c:bc:2a:6a:c4:fc:d6:07:8e:81:06:97:09:0a:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:B4:0F:87:BA:28:1D:C7:BE:B1:58:E0:11:EE:B2:86:0E:5B:3D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OLm0D4e6KB3HvrFY4BHusoYOWz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.188.0/22
185.246.220.0/22
Signature Algorithm: sha256WithRSAEncryption
41:67:bd:17:b4:c8:5d:0c:81:b7:d3:5a:b6:a1:c2:4b:e8:75:
2d:6a:1f:e7:d1:bb:33:79:4d:fc:fc:2c:2d:85:34:67:06:6e:
10:a9:db:77:00:a0:38:d8:7d:3c:db:55:f3:4b:e1:a3:61:ca:
5c:8c:de:59:48:9a:fb:65:0c:99:a7:2f:25:ed:48:7b:b5:95:
fc:d0:24:3f:02:74:2b:28:0f:20:eb:d5:92:72:9d:da:ec:fe:
b9:77:6d:3c:42:cd:29:77:ae:79:5c:93:93:3c:eb:38:81:74:
8b:66:91:64:95:1b:d5:9f:97:bd:e5:5b:c3:ba:6b:bb:63:c8:
f9:05:35:9a:6f:4a:0c:58:11:4e:2f:12:33:a7:dd:6d:9e:d6:
55:d3:bc:31:0e:77:5a:7a:4e:2c:f4:ba:a3:68:82:f0:ea:2a:
b6:15:8c:01:1c:95:6e:fe:9f:57:2c:62:c7:3d:02:e5:db:ab:
45:a0:93:66:9d:57:2d:2e:6f:f0:bd:9c:8d:e9:fc:f5:ed:fd:
86:ed:ff:93:bd:d4:dc:df:d9:06:19:54:34:4b:b9:c0:4a:34:
54:8b:e1:34:08:c2:c0:9e:6e:7e:c1:69:20:2f:5c:58:5f:49:
4b:a5:9b:42:c1:5d:d3:50:03:0c:22:5b:33:78:f3:77:b2:78:
fe:0f:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org