Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/No4DP2iPrpCNotmouuZpa61UmmE.roa
File: No4DP2iPrpCNotmouuZpa61UmmE.roa (raw, json)
Hash identifier: TvJUmCiMF/HSe7FWHilWiwZAubrJNbVxepEtACfGjm8=
Subject key identifier: 36:8E:03:3F:68:8F:AE:90:8D:A2:D9:A8:BA:E6:69:6B:AD:54:9A:61
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 0181E801417BA2371818B34E0B6F959B5613
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/No4DP2iPrpCNotmouuZpa61UmmE.roa
Signing time: Sun 10 Jul 2022 12:06:45 +0000
ROA not before: Sun 10 Jul 2022 12:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41075
IP address blocks: 185.6.136.0/22 maxlen: 22
95.140.32.0/23 maxlen: 23
95.140.38.0/23 maxlen: 23
94.199.176.0/22 maxlen: 24
185.234.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e8:01:41:7b:a2:37:18:18:b3:4e:0b:6f:95:9b:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jul 10 12:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=368e033f688fae908da2d9a8bae6696bad549a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:da:f3:e4:6d:29:d3:84:45:df:98:ff:ae:
67:0b:fd:03:82:de:9c:f9:63:c4:7b:4c:06:4a:85:
5d:e2:76:b2:dd:9f:60:26:a8:c7:bb:f9:f4:28:72:
c3:14:78:c8:04:70:08:ef:f8:a1:1b:b5:b7:fd:5e:
1e:75:e5:8f:54:61:19:be:1b:2f:c3:6f:09:9c:b4:
25:87:53:80:13:9d:2f:ef:86:c2:15:e8:65:cb:67:
4b:91:d0:a8:01:02:58:a4:7e:0d:12:e3:1f:d3:df:
7f:52:6d:0e:e8:36:f7:60:82:5a:5b:1b:18:b9:33:
9c:59:d5:86:7d:5b:a4:7f:fd:32:7e:e4:8f:a7:88:
f8:57:9b:79:0d:a8:bf:a0:9f:bd:35:14:1c:6b:33:
8e:3d:2d:8d:0d:98:01:82:96:63:11:55:15:46:32:
7b:04:24:2d:74:2c:d3:dd:a1:a5:15:70:7c:39:6d:
67:03:f8:86:cd:97:f1:05:30:87:de:52:0a:78:cd:
2e:c0:77:4f:c2:f6:3b:61:a3:28:c8:b4:1e:cb:59:
e6:83:6a:01:2a:0e:6f:cc:5a:e6:5c:7d:eb:27:b0:
b0:bc:b7:c6:ae:46:31:e0:b8:a6:de:0c:d2:ec:f3:
1e:39:95:81:1f:f4:62:2c:8d:ec:0e:3e:0b:80:3f:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:03:3F:68:8F:AE:90:8D:A2:D9:A8:BA:E6:69:6B:AD:54:9A:61
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/No4DP2iPrpCNotmouuZpa61UmmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.176.0/22
95.140.32.0/23
95.140.38.0/23
185.6.136.0/22
185.234.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:50:01:18:bb:73:62:9d:0e:4d:ed:ac:7d:d2:07:5f:e6:62:
87:14:7d:3d:a4:3a:e5:a0:00:11:08:7b:1f:a8:68:b0:b6:64:
d7:04:f6:3a:fe:21:eb:11:46:78:c3:04:b3:9b:c2:36:1f:b9:
31:3d:9c:38:b9:cd:98:e0:57:74:c6:4a:61:52:02:61:aa:e3:
0e:fe:eb:29:65:20:60:dc:28:b5:42:4f:dc:43:19:8e:f0:11:
ec:3b:7c:bc:3b:f1:bc:92:d1:1e:51:38:5d:d5:13:47:2d:7b:
5a:e2:df:c7:9d:1e:07:37:6b:87:60:59:ad:80:26:0a:6e:2b:
f2:08:ab:30:35:f4:aa:7d:8a:f2:10:7d:86:49:45:00:cc:18:
59:72:ac:a6:f2:bd:c0:d7:43:a3:d0:cb:0c:15:8c:60:05:97:
f7:83:d7:3a:0a:62:69:f6:c6:3c:e7:df:50:ef:a1:50:b3:b0:
03:b9:12:7d:66:0c:dc:e0:78:9b:1e:bf:8b:04:0d:59:d8:4b:
c6:66:7f:97:a3:e1:c1:cb:81:48:df:9d:c4:47:e9:ea:34:48:
b1:49:9a:03:41:a4:20:8a:65:65:11:e4:d0:f3:52:7a:a9:dc:
a1:2e:9f:23:c0:58:d0:97:15:fc:bc:5c:e3:c7:c8:23:e5:ad:
44:3b:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:22 2024 by rpki-client on console-ams.rpki-client.org