Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/cCaHgJiBS6xxw02VzDMF6HjXwW0.roa
File: cCaHgJiBS6xxw02VzDMF6HjXwW0.roa (raw, json)
Hash identifier: ev9OV2rHCP47Xdct+t9mO5zICniGhWLfdHvU2gyZqzw=
Subject key identifier: 70:26:87:80:98:81:4B:AC:71:C3:4D:95:CC:33:05:E8:78:D7:C1:6D
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 0181DEF2CE3C5BAF49602CC19607AACD4DBD
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/cCaHgJiBS6xxw02VzDMF6HjXwW0.roa
Signing time: Fri 08 Jul 2022 17:54:23 +0000
ROA not before: Fri 08 Jul 2022 17:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41075
IP address blocks: 185.6.136.0/22 maxlen: 22
95.140.32.0/23 maxlen: 23
95.140.38.0/23 maxlen: 23
185.234.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:de:f2:ce:3c:5b:af:49:60:2c:c1:96:07:aa:cd:4d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jul 8 17:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7026878098814bac71c34d95cc3305e878d7c16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:ff:89:16:c6:0e:36:ee:0e:73:92:ba:28:
64:a6:89:7f:16:f4:f3:6e:da:a9:c9:46:91:76:4e:
14:15:38:59:4b:02:dd:4c:cb:56:24:74:1b:8a:18:
1f:f6:3c:06:d9:cd:5e:f3:5c:80:a6:60:e8:25:87:
13:56:6c:b8:fe:27:27:49:b1:44:34:50:43:ca:9b:
60:3f:61:3e:c3:c8:d6:cf:7d:6d:d4:54:f1:1b:e6:
97:1a:cc:bf:db:5b:3c:68:b0:d6:60:88:3e:49:62:
93:11:66:6c:e2:66:90:fa:fe:5c:cc:51:ad:24:6a:
f6:18:4f:82:6e:5b:17:8e:7e:71:9c:3c:d9:34:c0:
ac:4c:7d:43:a9:80:17:2e:1d:4b:28:5b:0a:e1:56:
02:0e:b5:a4:b7:78:a2:13:47:b2:6e:cc:a5:5d:6e:
58:d8:64:16:89:59:b5:6a:0e:13:51:a6:7e:da:f4:
52:b8:12:e7:5b:a0:cf:b9:be:3e:4b:ae:9a:9c:f9:
01:73:06:16:30:9e:d1:ab:35:dd:22:5c:b0:7c:e9:
47:b6:09:64:4f:62:26:3c:ed:bb:5f:0d:76:96:3b:
d0:10:bd:bd:51:2e:4a:22:e2:e4:8d:d2:63:41:40:
70:49:ec:7d:3d:16:10:9c:00:9c:6f:08:04:87:2e:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:87:80:98:81:4B:AC:71:C3:4D:95:CC:33:05:E8:78:D7:C1:6D
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/cCaHgJiBS6xxw02VzDMF6HjXwW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.32.0/23
95.140.38.0/23
185.6.136.0/22
185.234.180.0/22
Signature Algorithm: sha256WithRSAEncryption
79:39:5f:bd:1a:f2:43:0f:da:1b:19:38:08:8b:84:e5:08:56:
e0:d8:e0:2f:c6:6a:0f:17:89:19:aa:9f:29:85:bf:d6:bb:9a:
71:30:03:83:fb:fb:94:87:fe:41:4b:cb:20:c9:eb:15:34:ef:
8c:45:7f:f7:25:62:5f:42:6b:70:3e:0c:25:b9:f6:0d:35:8a:
b7:64:c4:6d:7f:85:fc:8d:e3:5c:16:29:ac:06:46:af:33:c8:
7f:54:96:b9:e2:d6:70:0e:bb:be:75:17:cc:6c:62:0b:a6:ab:
61:82:32:aa:de:41:4b:16:dc:4d:70:84:ae:5a:ee:c8:e0:fb:
23:8d:e4:6f:ef:97:a8:b2:f2:6d:0f:82:8a:fa:97:c5:11:34:
7f:f3:56:b9:d3:da:db:45:95:bf:b6:d1:8b:21:38:1d:b1:a8:
dc:7e:cc:cd:1d:36:e1:ed:82:d6:2b:12:85:dd:ca:2a:b5:aa:
46:59:58:27:3f:8a:f8:a7:48:b1:75:63:62:cc:5d:a0:50:02:
6b:c8:8b:5a:32:b1:ce:07:19:16:a4:31:9c:08:f7:2b:7b:5a:
99:aa:9c:00:d3:5a:d8:32:22:53:71:f1:ad:f6:c4:86:20:6c:
93:d1:55:a3:09:40:70:70:8e:dc:04:8e:5a:47:7b:c3:09:16:
a0:39:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:22 2024 by rpki-client on console-ams.rpki-client.org