Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nHapfw1mOKSwWTNfYO2MSf0W404.roa
File: nHapfw1mOKSwWTNfYO2MSf0W404.roa (raw, json)
Hash identifier: 0qEjpKtbSsYNpOO/AC3waJGSrYuoEAS31+nPBlNTo84=
Subject key identifier: 9C:76:A9:7F:0D:66:38:A4:B0:59:33:5F:60:ED:8C:49:FD:16:E3:4E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 091BC2EE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nHapfw1mOKSwWTNfYO2MSf0W404.roa
Signing time: Sat 01 Jan 2022 16:00:40 +0000
ROA not before: Sat 01 Jan 2022 16:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204994
IP address blocks: 185.186.67.0/24 maxlen: 24
2a0b:b87:ffe1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152814318 (0x91bc2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c76a97f0d6638a4b059335f60ed8c49fd16e34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:86:65:8b:69:b8:44:d2:47:26:db:94:d1:
c9:94:e2:58:ba:b0:ae:b1:4c:c5:11:91:c2:fb:33:
a0:f1:eb:54:23:7e:b5:d6:41:99:17:21:62:0d:60:
ed:f6:6b:67:fa:be:67:91:61:14:0d:ec:1f:08:a0:
0c:fb:36:0e:36:ff:f1:b1:e7:d3:22:92:f3:da:b7:
a1:e4:dc:c1:84:e7:c1:ac:d2:36:6c:7b:bf:b6:78:
64:fc:38:fb:24:9e:15:15:ee:d5:8a:1a:c0:b7:1b:
68:b1:cf:25:06:6b:7b:2d:23:bb:6f:a5:6b:e2:a4:
5b:ce:3e:98:60:3d:bb:c7:52:5d:93:78:69:c9:5f:
10:eb:fe:c0:b1:f6:b2:20:40:58:ce:6e:b7:3b:90:
11:e1:5f:49:94:5f:54:b5:8b:33:e3:8b:05:ac:0c:
fb:f8:c6:17:14:24:a6:0c:35:cd:dc:a9:8e:b8:ec:
28:79:8e:80:26:4a:7e:04:78:48:b1:19:11:9e:76:
1c:30:96:00:1a:20:95:f5:c4:1f:1f:e9:99:8a:b9:
2e:6f:e9:e8:d5:ee:c4:a1:53:11:d1:28:61:74:ef:
9e:a6:4c:8a:59:94:cf:db:aa:24:a0:b1:a2:1d:84:
4b:d0:74:2b:95:50:ae:e6:33:1b:21:60:7a:3f:fb:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:A9:7F:0D:66:38:A4:B0:59:33:5F:60:ED:8C:49:FD:16:E3:4E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nHapfw1mOKSwWTNfYO2MSf0W404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.67.0/24
IPv6:
2a0b:b87:ffe1::/48
Signature Algorithm: sha256WithRSAEncryption
83:35:fb:25:47:21:40:f5:60:50:d6:ea:fc:8d:80:af:c5:64:
ed:19:be:aa:9a:f6:23:2b:c7:42:8a:e7:25:38:00:76:b4:3f:
12:01:30:69:a4:7a:ce:e1:30:65:1a:11:8a:35:69:0c:15:f6:
ab:eb:e3:a4:7f:20:34:e1:c1:50:ea:94:9c:48:47:06:2e:4b:
7f:44:17:75:c6:77:9d:ef:e3:26:54:54:a6:3f:53:ac:b5:11:
8b:75:9c:9c:6d:a8:aa:0e:49:fa:f2:dd:b8:11:b7:a9:b3:3b:
d9:79:7e:e7:8e:1a:36:ec:43:c0:3e:1a:b3:28:c1:72:a0:57:
e1:2e:c9:11:e1:88:e8:2c:83:07:23:87:bd:9e:2d:e7:d1:3e:
0c:e8:bd:d4:de:00:62:b5:42:fb:0d:ef:87:01:54:e9:c5:70:
a9:88:22:6e:8b:42:4b:c1:6a:20:9e:7a:85:d0:44:94:b4:99:
a7:c2:75:1d:e7:d8:8d:cb:25:c3:bd:02:4d:24:31:8d:57:ef:
8b:b6:29:fc:5c:e1:fa:05:d6:52:2b:f9:7c:0e:1c:0f:aa:db:
cf:bb:58:a1:72:d4:0f:d8:81:89:95:7a:b9:3d:d0:11:8a:c5:
67:48:fb:6a:b2:2c:a3:9f:d6:65:a7:77:2a:19:c3:f4:cc:9b:
f4:9d:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org