Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/xPmKUcNd-2XwV7D5sJDqv3JWUgw.roa
File: xPmKUcNd-2XwV7D5sJDqv3JWUgw.roa (raw, json)
Hash identifier: /JohgnRah7DDUXFYXE4W6sH/EDZ5d8Dz5jcUyHmeQ8Q=
Subject key identifier: C4:F9:8A:51:C3:5D:FB:65:F0:57:B0:F9:B0:90:EA:BF:72:56:52:0C
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 052EB1
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/xPmKUcNd-2XwV7D5sJDqv3JWUgw.roa
Signing time: Fri 18 Mar 2022 14:32:43 +0000
ROA not before: Fri 18 Mar 2022 14:32:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201832
IP address blocks: 185.62.149.0/24 maxlen: 24
185.62.148.0/24 maxlen: 24
2a03:560:148::/48 maxlen: 48
2a03:560::/48 maxlen: 48
2a03:560:149::/48 maxlen: 48
2a03:560:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339633 (0x52eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Mar 18 14:32:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4f98a51c35dfb65f057b0f9b090eabf7256520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:ae:cc:3b:57:24:48:1e:36:0b:f8:01:46:
45:1a:6e:18:3b:6c:d6:52:d5:22:5e:a0:65:b0:91:
23:57:bc:10:68:32:dc:29:10:fe:59:a8:97:fd:2d:
84:0e:61:ba:e2:c4:48:89:c5:18:57:5a:b4:d2:ca:
84:10:ae:8d:fb:66:8f:17:0a:66:79:9c:d1:b2:a9:
1b:eb:1b:91:c2:68:1c:76:54:5c:c9:f9:e3:5a:6c:
6f:f2:a8:ec:56:d0:76:3f:f1:0b:f2:8f:0d:1d:7b:
2a:71:d3:fd:11:f7:68:ab:51:3b:58:cb:c5:8e:7c:
0a:cc:02:d7:57:bf:ed:0d:ce:87:79:e7:25:bd:75:
6a:7f:f9:92:5f:42:41:e7:6f:16:37:52:98:cb:e1:
f1:78:10:f2:95:63:c3:ba:4f:74:9a:56:85:2f:69:
41:23:4c:08:bb:22:b7:cc:dc:cb:8a:14:1b:06:19:
55:30:1c:ca:ff:0b:64:ab:e3:fa:c0:50:d9:75:66:
70:71:2f:6a:01:0b:2d:5f:43:43:01:c9:45:78:3b:
f3:a1:42:f4:7a:b9:e8:2a:58:3a:11:ba:df:4c:f6:
0f:00:f0:d6:3c:a6:fb:75:8a:80:8b:87:6f:30:f8:
e3:94:08:61:8a:d4:c7:bf:2c:15:81:5c:2e:23:92:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:8A:51:C3:5D:FB:65:F0:57:B0:F9:B0:90:EA:BF:72:56:52:0C
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/xPmKUcNd-2XwV7D5sJDqv3JWUgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.148.0/23
IPv6:
2a03:560::/47
2a03:560:148::/47
Signature Algorithm: sha256WithRSAEncryption
77:32:e0:60:6c:7e:20:bd:cc:2b:9a:86:fe:56:db:39:98:64:
e4:4c:2e:f4:8d:01:a9:26:c9:db:b5:ef:02:2c:0b:95:ac:a3:
6a:0d:71:8c:df:0a:a3:34:c4:46:aa:99:79:0b:29:7d:e8:55:
b3:2c:36:21:f6:9f:0e:c5:b3:ef:c2:7c:66:d1:2c:04:a5:53:
1e:d8:a0:91:c7:58:44:e4:6d:50:3f:a5:73:8b:f9:6c:cf:82:
61:ee:8d:68:99:ac:37:0e:39:c1:ca:47:4e:c4:c2:1a:6e:6f:
0f:03:f9:df:59:91:37:55:80:b8:c9:51:4b:df:eb:c9:72:e5:
47:00:08:0e:3c:1c:a7:ed:84:73:98:e4:19:21:a1:ca:9a:86:
13:76:99:09:f2:7b:60:aa:53:d1:29:75:d0:b0:2c:7e:8f:28:
5d:0d:27:cd:4f:26:23:8f:2b:a1:43:d4:3c:4e:bf:37:af:17:
08:32:c6:32:61:28:15:57:54:da:b2:7d:10:3a:3b:a9:de:c9:
f2:62:f0:f9:56:44:88:76:1b:60:32:ce:0d:2a:bf:f0:92:4a:
55:ca:1b:92:fe:40:9a:3f:d6:26:15:10:e6:09:59:4e:84:49:
32:aa:d0:25:f8:38:13:0c:7a:01:8c:73:02:53:91:6b:b3:23:
85:8c:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:22 2024 by rpki-client on console-ams.rpki-client.org