Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/c4jmDBbUil9Z1JKTwB8RDBVaZOk.roa
File: c4jmDBbUil9Z1JKTwB8RDBVaZOk.roa (raw, json)
Hash identifier: XZVIFdhwjdo5kb/nSK7oVIPc7joTYvBhchgwwAURD0s=
Subject key identifier: 73:88:E6:0C:16:D4:8A:5F:59:D4:92:93:C0:1F:11:0C:15:5A:64:E9
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 01830FB701A4A948589F504EC843FE2E3645
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/c4jmDBbUil9Z1JKTwB8RDBVaZOk.roa
Signing time: Mon 05 Sep 2022 22:13:15 +0000
ROA not before: Mon 05 Sep 2022 22:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.146.155.0/24 maxlen: 24
185.146.154.0/24 maxlen: 24
2a07:4f80::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0f:b7:01:a4:a9:48:58:9f:50:4e:c8:43:fe:2e:36:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Sep 5 22:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7388e60c16d48a5f59d49293c01f110c155a64e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:1b:88:1e:6d:46:33:b7:bd:fd:f0:dc:6f:
2a:34:6b:df:16:44:cf:5a:83:9d:4e:66:ca:3c:96:
d1:14:18:aa:d2:b6:63:14:55:63:4e:af:7e:63:5e:
7c:ae:15:20:8b:f6:7b:ac:74:56:42:08:39:53:38:
49:7e:41:06:31:45:0f:3d:c6:8e:6d:3c:38:55:86:
fa:c2:84:4d:92:b1:a6:8e:47:ca:9b:5b:51:67:cc:
32:71:75:ee:ee:14:bb:8a:6b:91:f5:83:29:06:d6:
44:ef:5c:8a:92:a4:95:35:38:0a:0e:bf:11:78:90:
a0:91:ff:73:1c:e3:d4:d4:a7:8f:5c:c8:6b:e7:5f:
62:05:31:2a:a9:72:bd:ab:87:68:2a:ae:15:4e:23:
25:83:93:1c:c6:07:f8:d4:7a:a9:f5:e1:db:91:c5:
c1:4f:af:d7:aa:f3:fb:c5:7a:b9:e7:40:dc:18:f3:
52:e8:0a:58:cc:b1:83:20:25:a3:2c:8a:d0:18:f9:
90:00:01:2f:c7:90:74:37:cc:73:b1:a4:78:e5:04:
8a:68:2e:17:1a:93:cf:46:d4:86:fd:28:31:88:09:
0e:3d:93:53:bf:e6:e8:3e:ea:42:a7:40:a4:14:2e:
a6:22:61:c0:bd:9b:f3:a8:41:23:f0:9e:2c:2e:c4:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:E6:0C:16:D4:8A:5F:59:D4:92:93:C0:1F:11:0C:15:5A:64:E9
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/c4jmDBbUil9Z1JKTwB8RDBVaZOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.154.0/23
IPv6:
2a07:4f80::/44
Signature Algorithm: sha256WithRSAEncryption
ce:56:0b:66:30:29:13:94:ae:b0:2b:f8:30:af:71:8c:09:4c:
a4:3d:a8:2c:5c:ab:db:fe:f1:ab:2b:a7:7e:60:d0:6d:0a:20:
3a:03:e3:c9:78:3a:90:9c:8c:16:7a:67:2d:de:ae:32:31:f9:
59:75:d3:b7:ab:8c:17:64:32:e0:07:a8:48:29:21:b3:76:4f:
42:15:a0:c8:5f:05:52:2e:a9:6b:a6:98:64:0b:31:5c:09:46:
58:e7:9f:91:1e:af:48:97:8b:17:f6:c5:d2:91:71:23:2b:11:
4b:a3:d2:43:56:0c:0d:4e:d6:61:a3:55:cd:73:7c:6c:2b:44:
bd:17:9b:05:24:6d:67:85:63:37:3e:70:08:55:fa:e2:65:9e:
02:9c:92:3c:5b:66:e0:09:04:87:e9:e8:5d:37:b2:c5:cf:cf:
05:86:ac:8d:32:36:b8:f5:1f:a0:7a:f5:32:75:87:89:82:58:
6b:45:d0:0a:a1:45:ee:04:e0:18:db:d2:27:38:73:26:c2:29:
c1:2d:e8:ca:87:52:0f:41:6d:60:da:76:13:72:a9:b0:ec:dd:
cf:38:b9:e6:75:87:1c:45:47:a7:84:99:43:fc:cc:62:d7:54:
2f:d8:96:d5:98:4f:cd:12:a1:74:61:31:33:30:6d:48:65:ab:
8b:df:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:49 2024 by rpki-client on console-ams.rpki-client.org