Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/94PrN_iXlkC78vWbH2_Z-Pt5oOg.roa
File: 94PrN_iXlkC78vWbH2_Z-Pt5oOg.roa (raw, json)
Hash identifier: Dqi5KVo4Rn0WZAkPfeVLlWu39UOlECEiTbu9zDIe0TY=
Subject key identifier: F7:83:EB:37:F8:97:96:40:BB:F2:F5:9B:1F:6F:D9:F8:FB:79:A0:E8
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0182E92E0FA87666225776FDF831B5570FDB
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/94PrN_iXlkC78vWbH2_Z-Pt5oOg.roa
Signing time: Mon 29 Aug 2022 10:38:05 +0000
ROA not before: Mon 29 Aug 2022 10:38:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.146.155.0/24 maxlen: 24
185.146.154.0/24 maxlen: 24
2a07:4f80::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:2e:0f:a8:76:66:22:57:76:fd:f8:31:b5:57:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Aug 29 10:38:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f783eb37f8979640bbf2f59b1f6fd9f8fb79a0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:d2:93:a5:99:b4:f5:c5:92:e3:66:9f:52:
80:11:3c:56:7c:54:de:73:05:b4:f8:87:58:d6:1f:
2e:d3:bd:43:d1:09:b1:d5:a4:b4:07:11:27:7c:c0:
f3:1f:db:a9:0e:95:0a:03:3e:f1:cd:88:89:c7:d8:
ea:ec:40:18:9e:af:3c:32:10:93:90:55:7f:ec:eb:
15:b7:ef:cb:e7:b3:0a:b4:ad:a2:87:bb:7a:2b:1b:
77:e1:c5:48:5b:44:c9:28:ab:f4:6f:85:0d:d0:5e:
36:b9:c3:62:01:27:07:8b:da:8a:2a:15:d0:a3:fa:
39:c6:85:81:b4:2c:dc:20:62:9a:90:98:d3:19:45:
14:a7:eb:66:8b:a3:01:3c:b5:24:9c:0c:17:2d:03:
88:9c:fe:ed:7b:09:68:43:e4:be:76:f3:34:cc:a7:
41:b3:e7:8c:f0:d3:7f:0e:15:f0:67:a9:aa:8f:1c:
16:ad:97:b6:34:a7:cb:08:0a:b8:c0:35:54:c0:db:
dd:ef:e5:64:45:9a:3d:69:a7:69:df:fb:65:1c:9e:
87:f6:8e:b4:67:e4:99:b6:40:92:b9:af:72:04:d6:
a1:60:be:71:06:91:38:f3:2c:b3:a1:ea:bb:bd:7e:
9f:93:73:0f:08:c2:8e:64:42:96:01:f6:5c:32:5b:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:83:EB:37:F8:97:96:40:BB:F2:F5:9B:1F:6F:D9:F8:FB:79:A0:E8
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/94PrN_iXlkC78vWbH2_Z-Pt5oOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.154.0/23
IPv6:
2a07:4f80::/44
Signature Algorithm: sha256WithRSAEncryption
88:3e:04:ac:8b:e9:6d:67:55:e7:41:4f:cb:e2:33:f1:81:6b:
8a:0d:18:43:2a:6d:5c:e2:8f:5f:31:e7:99:fe:8f:bb:be:ee:
9e:95:4a:10:d3:0e:f1:a0:ed:a4:f2:88:94:8e:89:3f:6b:59:
5d:7d:f7:30:82:da:ba:e5:25:61:2e:e4:45:3b:5c:a2:5f:00:
4d:bf:ea:31:2e:1f:c1:e6:0b:50:be:95:ad:08:10:7d:34:46:
4b:8e:bb:35:60:5d:97:7b:58:9c:25:9f:18:a1:75:52:9d:1b:
00:e8:c5:5e:7c:47:7a:77:6b:2e:67:d6:e5:f7:16:1e:33:ab:
f1:92:5f:d0:00:98:20:12:70:7a:83:95:82:e1:90:8a:ba:70:
14:aa:87:57:df:8f:44:5a:4b:de:09:e4:e6:97:27:41:e7:ac:
f6:03:3d:6e:50:24:7a:b9:86:40:ce:60:04:4e:12:5c:e0:7c:
53:18:91:94:b1:e6:02:31:d1:93:c0:e9:cc:be:b7:28:2c:14:
30:ce:20:e5:48:32:82:04:00:d9:f8:24:d9:d9:cf:64:6c:5e:
00:04:89:68:bf:b7:77:d2:95:05:9e:8f:4f:cb:f9:8c:7d:bf:
94:68:83:4a:51:6b:b5:c0:38:00:55:78:89:70:98:d3:a4:f3:
2a:75:b3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:49 2024 by rpki-client on console-ams.rpki-client.org