Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hIwYw1hWq1qOwlYFDbvqGVoW0n0.roa
File: hIwYw1hWq1qOwlYFDbvqGVoW0n0.roa (raw, json)
Hash identifier: upRX/A8MmyIzSxz5bQkBlDs1KG0LEyrY2Zz4/dXRW28=
Subject key identifier: 84:8C:18:C3:58:56:AB:5A:8E:C2:56:05:0D:BB:EA:19:5A:16:D2:7D
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018420D2E30C47E4D0C13830C67190EE69B6
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hIwYw1hWq1qOwlYFDbvqGVoW0n0.roa
Signing time: Fri 28 Oct 2022 23:00:02 +0000
ROA not before: Fri 28 Oct 2022 23:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209280
IP address blocks: 185.227.81.0/24 maxlen: 24
194.146.45.0/24 maxlen: 24
2a0b:3c40:13::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:20:d2:e3:0c:47:e4:d0:c1:38:30:c6:71:90:ee:69:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 28 23:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=848c18c35856ab5a8ec256050dbbea195a16d27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:37:68:1e:4b:ad:8e:c1:3c:94:64:e5:be:
c1:52:45:50:b9:f2:ce:55:ab:7f:43:16:83:fb:7d:
fb:1b:3c:60:ee:d3:7a:3f:36:85:98:99:c6:fc:cb:
28:d1:06:08:31:f1:c0:07:09:8e:83:83:c5:85:e2:
c6:9e:00:44:de:0d:fc:bb:4d:7e:a0:1d:2c:2b:21:
2d:83:88:32:c5:70:54:d0:89:50:61:8e:f0:7d:b6:
ac:4c:6f:c9:2c:ef:ac:14:85:03:df:e1:df:5d:12:
72:f4:41:16:57:a9:6d:b4:0a:4e:c2:72:36:e1:16:
80:3e:82:e7:92:1b:f6:70:64:a9:24:d8:13:0e:ba:
68:f4:71:00:38:cf:f0:48:3a:8f:0e:27:54:c7:20:
1f:39:56:a3:80:45:55:f4:ce:eb:2d:ea:84:a1:db:
1e:49:84:22:7a:ff:de:07:18:c4:32:fe:5a:7d:b6:
75:98:e4:43:df:a8:6f:3c:94:c0:ba:35:ea:cc:fc:
fc:c3:ae:38:ad:45:f6:d4:12:63:0d:28:fd:10:a0:
ec:aa:f4:12:81:f9:b7:93:f6:66:32:67:bd:a9:b5:
e6:53:f0:15:2e:81:fa:b5:d4:29:08:19:fd:88:18:
fc:6b:66:35:ba:f4:fd:de:41:5f:a2:71:70:cf:ca:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:18:C3:58:56:AB:5A:8E:C2:56:05:0D:BB:EA:19:5A:16:D2:7D
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hIwYw1hWq1qOwlYFDbvqGVoW0n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.81.0/24
194.146.45.0/24
IPv6:
2a0b:3c40:13::/48
Signature Algorithm: sha256WithRSAEncryption
9f:9b:08:11:26:f8:1f:a3:a5:52:75:9f:10:fc:40:bc:34:d6:
b8:c5:6c:48:3e:52:22:19:30:48:06:d0:d7:7b:d2:c6:a1:f8:
be:29:f9:37:98:f1:96:ab:47:2f:b9:55:94:d8:6c:c8:54:7c:
e3:67:46:b4:53:8e:9e:39:73:1e:73:ab:63:42:1a:2a:a2:5c:
3f:79:d6:a1:92:8d:a6:10:d3:33:e6:d9:2a:fa:11:f4:45:db:
07:7f:e0:b8:20:a6:76:d5:09:25:fe:2a:c5:0d:f2:7f:3b:4a:
5c:f0:ba:1e:91:d8:ec:e6:ea:ec:93:53:b5:20:b8:c4:e2:e3:
18:f4:c5:f7:ca:fb:3a:64:27:41:b7:3c:b6:98:54:fa:63:01:
c8:0e:b0:e0:08:61:53:07:34:a8:1b:4f:3b:03:de:2b:49:07:
1c:e3:03:16:a1:04:7b:4d:97:16:77:e0:ed:e6:83:87:47:c7:
f1:73:14:37:e3:52:8b:5c:c7:c9:d6:83:07:f9:4f:44:48:be:
57:b4:11:2d:f1:df:e2:17:e0:37:c5:3a:b7:12:48:70:e4:21:
a3:b9:00:c8:d0:0b:45:06:45:ef:3a:f2:36:c9:0b:2b:e3:bf:
4d:e7:43:96:0e:e2:90:4c:28:8d:4d:80:f4:87:33:27:ea:08:
41:e0:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org