Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/N1uRt5rglaa0tteaJl7wzgsyXiA.roa
File: N1uRt5rglaa0tteaJl7wzgsyXiA.roa (raw, json)
Hash identifier: MvDrrLB+N7+TN6m6fSk/jXTi/u4mxWE1/XlXkIHZ3uw=
Subject key identifier: 37:5B:91:B7:9A:E0:95:A6:B4:B6:D7:9A:26:5E:F0:CE:0B:32:5E:20
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 1346E43F
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/N1uRt5rglaa0tteaJl7wzgsyXiA.roa
Signing time: Sat 01 Jan 2022 00:58:44 +0000
ROA not before: Sat 01 Jan 2022 00:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201063
IP address blocks: 185.3.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323413055 (0x1346e43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Jan 1 00:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=375b91b79ae095a6b4b6d79a265ef0ce0b325e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:05:6a:d0:69:26:a0:d5:28:e4:27:79:e3:
01:f0:02:17:fa:07:d7:00:1f:a9:8a:10:78:69:12:
1e:f3:3f:2e:e4:63:3d:9f:8c:02:72:86:01:41:4f:
e9:94:5b:b5:92:da:cd:37:36:c2:75:39:62:73:b4:
39:50:00:38:5b:66:3e:56:c3:07:e0:22:76:e1:31:
8f:57:0a:b5:db:4b:70:e7:69:1d:f7:e5:ab:bf:37:
46:18:1c:71:09:5c:da:f3:48:5c:9a:9c:d0:6e:3e:
db:e9:f4:ad:21:29:7e:65:93:0a:24:86:52:00:8b:
1e:12:6c:87:71:73:8b:3b:37:cd:b1:af:ea:7f:b8:
1f:c0:86:f8:db:0b:2b:86:5f:15:1e:4f:48:e6:95:
89:09:6f:43:e0:8e:0c:96:20:4b:48:88:52:b1:54:
3f:46:47:45:4c:37:51:62:f2:82:6b:d2:cf:4f:6c:
8c:1b:14:59:3a:7f:d9:e6:15:da:8f:5a:5b:7c:9c:
15:e5:02:9a:f9:48:27:8d:d5:b1:35:11:6b:f5:54:
81:ce:18:b3:ec:59:b8:41:98:ce:38:40:31:0f:61:
af:bb:4b:64:d6:f2:66:ab:b1:30:00:21:b6:7d:07:
eb:c0:0f:5a:51:c7:d8:dd:f5:b2:c7:58:77:43:4a:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5B:91:B7:9A:E0:95:A6:B4:B6:D7:9A:26:5E:F0:CE:0B:32:5E:20
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/N1uRt5rglaa0tteaJl7wzgsyXiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:32:92:8d:a4:b5:67:4f:7c:d3:7e:f3:87:5f:fb:b3:5a:c8:
f4:82:39:65:5c:9c:a8:9d:a1:c7:65:9e:66:23:42:aa:94:b4:
4b:85:70:71:f5:2f:3e:4b:cf:b8:f5:ef:4c:02:69:19:e7:a2:
73:b2:9a:ac:c3:f0:ae:c8:7e:70:2a:80:3b:4b:e2:a6:bb:9b:
0b:a1:0f:12:e6:7b:e4:c0:54:73:c0:f1:80:4e:5a:c5:ff:0a:
99:41:9b:0d:7d:65:26:0f:76:21:6d:2d:38:15:23:30:0a:eb:
55:09:49:72:49:7f:8a:84:40:de:0f:d3:76:8b:6e:01:a1:5f:
43:f4:21:73:f1:32:82:ff:57:de:ad:f1:59:c1:f7:16:3f:3e:
97:f3:6b:9f:8a:6c:f8:2e:17:09:4d:68:a5:43:4e:be:fe:51:
3f:a4:dc:eb:dd:42:0e:24:b1:74:4d:69:cd:ac:89:17:95:e2:
db:30:8e:fa:a1:30:1b:46:f5:89:ff:64:33:f5:82:c2:26:05:
6c:ff:fd:e1:28:fe:3d:00:a3:2a:03:b2:14:17:54:d5:79:4e:
2a:bd:52:1a:51:09:23:71:7a:f1:72:5d:6f:77:d0:60:89:c8:
4d:9a:38:0c:1e:c1:27:00:af:aa:f6:2a:62:4e:a9:93:7b:f1:
f4:98:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org