Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/3_jXwXZATeGKGiuaCa7vYfKsxfk.roa
File: 3_jXwXZATeGKGiuaCa7vYfKsxfk.roa (raw, json)
Hash identifier: LsKMQ9qskSrNF2YgqD1dOaBzPggxd1IOw/1nZysPMTY=
Subject key identifier: DF:F8:D7:C1:76:40:4D:E1:8A:1A:2B:9A:09:AE:EF:61:F2:AC:C5:F9
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 031DAA96
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/3_jXwXZATeGKGiuaCa7vYfKsxfk.roa
Signing time: Tue 29 Mar 2022 16:29:36 +0000
ROA not before: Tue 29 Mar 2022 16:29:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211541
IP address blocks: 185.244.226.0/24 maxlen: 24
2a10:c640::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52275862 (0x31daa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Mar 29 16:29:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dff8d7c176404de18a1a2b9a09aeef61f2acc5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:01:37:5a:7b:72:cc:fc:ef:24:a6:bd:b1:
3a:7e:a1:a9:92:fc:38:8d:7b:8e:07:60:4c:a0:27:
39:cb:1c:fc:2b:97:cb:1d:1e:89:34:28:a9:d9:17:
15:ec:6c:7a:15:cf:b7:a9:cb:be:4c:e9:bf:7d:8e:
0e:92:91:78:9c:b8:6d:39:0d:96:94:75:f2:b0:5c:
7e:63:bd:8a:39:79:ce:7b:9a:6e:28:1a:cb:37:5f:
89:92:ae:f3:28:0e:56:66:20:ee:b6:5d:6b:b8:ec:
db:57:82:9f:94:4a:c2:b1:b5:83:c2:6d:c5:a9:9b:
c3:80:cb:bd:17:66:88:51:8c:f7:13:b1:ea:35:8c:
d4:d3:54:d8:58:05:43:e0:09:3c:79:51:b5:ac:56:
85:5b:92:2c:28:61:4c:10:a8:07:b0:b5:9e:da:5a:
ad:1b:e3:75:18:42:47:53:18:c8:6f:43:cb:d6:83:
7b:84:a2:86:53:89:5d:6a:c0:ed:18:4d:3e:f7:f1:
ea:7c:e1:b3:d1:d7:76:44:bb:80:2b:fb:25:68:47:
16:08:5b:32:20:0d:8e:78:99:ca:23:eb:fd:5a:99:
f7:4d:2d:15:2c:26:ce:6b:3c:92:06:06:75:61:fd:
58:e8:b8:9c:6f:23:54:0b:36:f8:fa:d1:2a:5e:cb:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F8:D7:C1:76:40:4D:E1:8A:1A:2B:9A:09:AE:EF:61:F2:AC:C5:F9
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/3_jXwXZATeGKGiuaCa7vYfKsxfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.226.0/24
IPv6:
2a10:c640::/48
Signature Algorithm: sha256WithRSAEncryption
76:2c:eb:b1:b7:c2:45:f5:ba:ed:50:50:c5:2f:dc:2a:83:38:
a6:8c:a2:62:c7:82:c1:d8:34:86:c9:9b:85:8f:61:10:bb:c8:
44:5b:8d:23:f9:f2:3f:64:bf:a8:e1:1d:c5:9a:e8:ab:58:bd:
e4:12:22:e3:a4:42:36:26:f7:d1:a3:44:4b:64:3c:e9:ff:c1:
49:46:5f:f6:5a:f2:0c:b2:aa:61:4e:13:d3:1c:64:87:69:33:
7e:db:7e:36:cf:a3:18:ab:ab:db:aa:4f:16:a9:be:7b:89:97:
74:a3:04:30:29:cb:2d:a0:bf:3b:37:6c:d1:08:16:ad:b0:10:
97:b0:fd:f8:ba:5a:12:ed:89:c5:20:a9:15:b1:24:d1:ef:ce:
2a:6e:e3:6b:b8:48:f4:9f:c4:ae:bc:9c:f5:f1:75:02:e4:86:
49:13:77:51:95:ec:9c:5a:c2:3d:4d:a8:5a:9b:2b:ab:23:db:
de:b9:3b:91:c2:0d:52:de:4e:21:4c:6e:78:fd:e5:cf:85:31:
bf:16:22:ab:59:73:35:9d:e1:9b:eb:a7:50:8a:7a:52:fe:9f:
e1:6a:51:43:c8:ed:0d:ce:27:c3:00:98:40:7f:3b:0e:5d:ff:
97:70:a5:24:74:16:c2:66:a9:14:49:37:fe:d1:86:4a:2b:d4:
c3:3b:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:31 2024 by rpki-client on console-ams.rpki-client.org