Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/0P3ug6JudkE1AvOY-gazy5kYejM.roa
File: 0P3ug6JudkE1AvOY-gazy5kYejM.roa (raw, json)
Hash identifier: EHlvxddTyv17sAcoA88XWHSLPQrKESu7soIHu3K2slU=
Subject key identifier: D0:FD:EE:83:A2:6E:76:41:35:02:F3:98:FA:06:B3:CB:99:18:7A:33
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0184DD042AF96B5217952A978BDF167EA91B
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/0P3ug6JudkE1AvOY-gazy5kYejM.roa
Signing time: Sun 04 Dec 2022 12:02:28 +0000
ROA not before: Sun 04 Dec 2022 12:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 185.236.94.0/23 maxlen: 23
185.236.92.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:04:2a:f9:6b:52:17:95:2a:97:8b:df:16:7e:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Dec 4 12:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0fdee83a26e76413502f398fa06b3cb99187a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:d1:41:ef:9c:2f:49:46:58:21:4e:11:b1:
90:b1:10:31:1e:88:46:12:a4:e0:f4:62:6f:d9:e1:
ae:2c:e9:ce:c8:af:03:5a:bf:61:d4:e2:0b:62:38:
c2:77:e5:9a:db:f3:06:db:81:b5:67:7e:66:da:38:
27:b5:a2:f9:5b:f3:39:c4:78:a0:79:97:1c:ac:ff:
6d:4e:42:81:80:24:df:23:70:eb:70:86:83:5d:40:
12:a4:a0:62:0f:a5:c1:af:8a:fa:c1:59:4e:9c:00:
62:7b:b7:ee:77:23:57:51:3c:77:e8:03:94:36:ac:
75:d3:d0:0e:2c:ca:13:e4:22:e3:68:a9:c2:3c:a5:
e1:ef:e9:00:cc:0f:19:e3:5b:cd:5f:9c:d3:11:57:
d0:7c:48:81:66:df:c4:5b:45:20:f5:bf:c0:00:b0:
5c:5c:13:37:11:3a:67:42:ab:b8:23:ef:7a:50:f0:
bc:4c:39:ef:98:3a:b7:f6:59:ea:17:f3:9d:90:5c:
f2:e0:1a:4a:e7:36:03:96:f3:dc:04:8a:64:61:25:
e9:77:cb:ac:1e:d7:80:1f:fa:1c:da:33:ad:bf:86:
e5:02:2a:62:96:cb:c4:f5:79:c4:96:5d:49:84:e8:
64:db:50:a3:67:c3:3b:53:63:c8:7e:3c:a9:b0:23:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FD:EE:83:A2:6E:76:41:35:02:F3:98:FA:06:B3:CB:99:18:7A:33
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/0P3ug6JudkE1AvOY-gazy5kYejM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.92.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ad:ee:fd:20:d5:5d:06:05:46:9d:e9:01:8a:17:8f:b8:c7:
5b:92:76:33:e2:ec:07:f9:2c:a1:75:08:3b:66:cb:6a:53:e0:
ec:2e:96:13:e5:7e:66:46:44:71:2a:c4:4a:15:c6:20:90:79:
ef:31:20:3a:de:70:83:88:02:98:38:74:b5:bf:cf:15:93:1b:
2d:2f:2c:34:0f:f9:ce:7e:f3:4a:ca:65:94:d8:05:bf:cb:92:
64:c3:04:df:dd:61:9e:ce:09:44:fe:e7:eb:fe:94:91:75:de:
aa:f4:b1:56:81:3d:9b:aa:13:f5:7d:cb:72:6e:e4:5d:99:ec:
af:83:82:de:e7:a2:2a:47:4a:f4:f4:d2:8d:3e:86:bd:8e:0b:
bf:97:0d:79:27:62:be:68:c3:34:27:17:7f:b0:5a:16:eb:93:
89:a0:3d:f5:ab:42:5e:62:5d:d6:ec:31:11:e6:84:dd:25:f6:
17:b4:86:3b:f9:fe:ba:2d:07:d3:dc:61:cf:72:60:0a:fe:34:
e8:e2:2a:8e:d1:64:d3:59:1e:47:7a:4d:80:99:34:7d:05:65:
df:14:ec:8a:08:07:2d:1f:36:2f:79:31:71:5a:13:da:35:b0:
ea:72:2f:5f:58:fb:b3:14:e4:dd:9a:cc:31:3d:e9:be:58:ae:
33:80:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-ams.rpki-client.org