Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CL38qEYWBGPoNQHo8kTwmjf0azU.roa
File: CL38qEYWBGPoNQHo8kTwmjf0azU.roa (raw, json)
Hash identifier: hcm9jstNhJGVm9xeUn6zuHoo875HkG7gXAdXNXNJkqM=
Subject key identifier: 08:BD:FC:A8:46:16:04:63:E8:35:01:E8:F2:44:F0:9A:37:F4:6B:35
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0A209600
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CL38qEYWBGPoNQHo8kTwmjf0azU.roa
Signing time: Thu 31 Mar 2022 09:23:25 +0000
ROA not before: Thu 31 Mar 2022 09:23:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.185.40.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
2a0b:b86::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169907712 (0xa209600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 31 09:23:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08bdfca846160463e83501e8f244f09a37f46b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:44:e2:0a:26:f7:a5:0d:d7:fe:9d:70:aa:
6a:bf:1a:32:fc:af:96:07:f5:5e:7c:49:04:96:3f:
a7:73:7c:eb:35:34:90:5c:2f:a8:28:29:40:06:dd:
81:0a:b6:b4:20:61:c5:0f:50:94:60:e5:2f:22:4f:
9c:45:d9:1c:17:90:0e:3b:44:b3:21:af:1a:41:f5:
d6:b2:d9:70:14:f1:0d:b7:74:4a:0d:15:2e:2f:52:
ac:1a:87:3f:1c:08:dc:1d:a7:b7:90:63:c6:90:ff:
51:26:02:14:33:d8:32:ca:33:13:a8:0b:db:f2:c8:
37:7f:c3:32:dd:91:90:eb:15:fb:1f:fe:0c:dd:eb:
f3:22:80:af:e4:6d:a9:db:4c:6d:b4:59:a4:24:c7:
2a:ea:4c:b4:3f:e9:f2:1b:a8:94:26:07:a0:3e:55:
c1:c2:00:17:6c:c8:34:aa:89:7b:22:b6:50:9f:c8:
7b:d9:50:ce:a8:32:33:b9:3b:25:71:78:51:6b:0e:
1d:78:37:12:0b:c0:7e:2d:1a:5e:76:c9:4e:d1:e5:
ef:96:87:65:80:d5:a0:ee:17:94:96:7c:e5:08:12:
96:5e:60:2e:9f:c4:a3:c9:09:69:ec:c8:9a:07:89:
d3:7a:d1:81:8e:a0:22:e7:c9:11:4a:b0:13:20:35:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:FC:A8:46:16:04:63:E8:35:01:E8:F2:44:F0:9A:37:F4:6B:35
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CL38qEYWBGPoNQHo8kTwmjf0azU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.40.0/22
193.31.30.0/24
IPv6:
2a0b:b86::/34
Signature Algorithm: sha256WithRSAEncryption
6f:f8:76:50:91:1d:6e:e4:d7:fb:f8:3d:07:2f:ec:e7:61:72:
e1:f5:18:07:9d:c1:b6:0f:7b:79:4b:50:d2:b2:25:2a:c9:cc:
25:21:06:3a:83:9d:39:2c:fe:d1:2f:be:6d:61:13:02:64:0c:
8b:7c:f0:9f:6c:b4:61:6e:45:a1:1f:f6:1a:7a:88:44:1b:97:
62:74:b8:04:d7:bd:a9:86:2c:ce:fd:ab:f8:25:9d:28:e9:60:
ad:7d:35:ae:d8:01:1d:4c:19:5c:53:e8:c6:1c:ab:2e:ad:dd:
20:2a:2b:8f:6d:9c:ae:ff:e3:49:f6:eb:4d:e7:e6:4f:9c:d8:
41:5a:2f:0c:67:25:2e:64:ca:89:2c:7b:02:00:11:7b:59:86:
28:1f:c4:d1:46:95:6d:43:b4:ec:43:b6:b8:17:6e:44:e5:8a:
0d:ac:60:78:a4:ed:1f:64:85:76:b6:a5:34:ce:3e:bf:cb:c2:
ec:ff:d9:f6:e9:a2:c1:4a:aa:7a:9f:61:0f:4e:bd:94:95:7c:
77:14:9b:5e:05:8d:f4:34:c5:18:48:fe:9b:2e:8b:08:9a:18:
dc:4a:f4:51:59:30:b0:fa:23:7d:cd:d7:51:b8:3f:2a:10:f8:
10:03:d4:72:33:6b:ff:09:b2:1a:20:9b:c2:b3:e1:35:ae:ab:
cd:e4:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org