Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/UnNLK87_i7MSUxuc-X2collqyQA.roa
File: UnNLK87_i7MSUxuc-X2collqyQA.roa (raw, json)
Hash identifier: Sso97km6eeNrgAZON+QeWXhA8J44+QXyMZh/WVOcaas=
Subject key identifier: 52:73:4B:2B:CE:FF:8B:B3:12:53:1B:9C:F9:7D:9C:A2:59:6A:C9:00
Certificate issuer: /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial: 19433474
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/UnNLK87_i7MSUxuc-X2collqyQA.roa
Signing time: Sat 01 Jan 2022 00:53:18 +0000
ROA not before: Sat 01 Jan 2022 00:53:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60304
IP address blocks: 185.33.32.0/24 maxlen: 24
185.33.35.0/24 maxlen: 24
185.33.34.0/24 maxlen: 24
185.33.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423834740 (0x19433474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Validity
Not Before: Jan 1 00:53:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52734b2bceff8bb312531b9cf97d9ca2596ac900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:20:14:89:1a:d4:8d:86:1c:b0:7d:c4:8e:
ba:85:3c:c7:7c:7f:54:73:1b:c1:a3:02:8b:79:00:
c2:e5:3e:c2:a6:6f:34:49:8f:3d:38:cd:ad:a5:fc:
3d:e4:08:c6:20:3e:49:05:06:a2:21:7c:3a:a0:8c:
f1:23:f6:c0:03:ef:42:43:24:98:3a:e5:3a:b3:0e:
57:13:f4:df:a6:ec:d5:6c:35:5a:29:ee:fd:24:fa:
3e:55:48:7a:58:5c:76:d4:fc:dc:9e:d6:3d:a6:15:
c8:3a:c1:c3:54:d9:17:83:b9:cc:a9:88:79:2d:94:
46:d0:10:7b:b6:bf:30:9e:0c:3d:40:2a:48:1d:11:
47:12:73:88:7b:8e:65:a8:6b:a9:85:ae:50:c7:6a:
cb:c8:10:71:cc:1d:b9:dd:e0:a3:67:3d:56:a6:3e:
a9:35:9a:4d:47:f2:15:ea:7f:14:a1:78:b1:7c:80:
67:0e:3d:c9:ac:b8:26:35:02:15:cf:76:89:b8:f9:
87:6e:1e:87:cb:57:3b:3f:66:40:c5:32:8c:5e:17:
08:98:48:e2:3b:48:0e:52:2b:dd:93:16:cf:dc:b9:
67:89:ab:67:63:e7:43:fb:22:b3:60:a3:3b:68:bb:
8c:6c:6b:05:c2:fc:51:10:de:d5:23:77:c8:79:be:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:4B:2B:CE:FF:8B:B3:12:53:1B:9C:F9:7D:9C:A2:59:6A:C9:00
X509v3 Authority Key Identifier:
keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/UnNLK87_i7MSUxuc-X2collqyQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:6a:d5:b0:aa:3c:05:1e:05:13:eb:24:4e:3c:9e:25:d7:1a:
c9:e5:a8:6e:57:41:90:1f:69:c8:0a:a1:fe:1b:fd:7b:d2:d0:
6e:45:79:21:37:1b:82:7e:ba:90:6a:20:9f:26:4c:42:18:9f:
11:84:66:3d:4c:bc:7e:75:e1:fc:47:e0:b4:25:d7:1a:31:55:
29:60:d9:b7:68:8e:c5:ea:fe:82:89:ac:69:d0:c0:33:81:a8:
4e:c5:37:f0:dc:6e:1b:55:70:27:40:75:8c:3b:b9:ea:49:a5:
c0:4b:3d:b2:af:41:c7:83:ae:18:15:05:0d:19:b7:1f:85:eb:
b8:eb:e6:c0:39:76:25:07:19:e8:5f:34:0b:00:f9:db:a2:c8:
d0:ba:b9:58:5a:d5:c5:f9:97:c6:a8:ca:cb:1d:94:12:22:02:
06:39:71:2d:15:f7:63:2c:a0:32:b7:93:45:80:25:b8:05:0c:
5b:e1:70:54:bb:17:84:24:0e:8b:d3:09:3b:3c:e2:36:f8:9b:
cd:f1:e9:b8:79:69:75:fd:3b:ac:8c:c4:db:eb:4f:38:75:cb:
6e:ce:29:83:43:07:4c:80:ea:f5:ed:16:2e:a8:9b:89:27:19:
46:15:1f:5c:8f:20:c5:c5:9c:62:2b:06:fb:0a:09:8c:c9:b5:
51:75:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org