Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/hJYoRP_6JFz43A9EjrcRB9xeLO4.roa
File: hJYoRP_6JFz43A9EjrcRB9xeLO4.roa (raw, json)
Hash identifier: fWgYh7dBeNfzaEY2McoZRqb5+XJIwuCOOba5aYLp0mI=
Subject key identifier: 84:96:28:44:FF:FA:24:5C:F8:DC:0F:44:8E:B7:11:07:DC:5E:2C:EE
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0183120249606D9F892F7F8F78066A959F10
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/hJYoRP_6JFz43A9EjrcRB9xeLO4.roa
Signing time: Tue 06 Sep 2022 08:54:43 +0000
ROA not before: Tue 06 Sep 2022 08:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.146.154.0/24 maxlen: 24
185.146.155.0/24 maxlen: 24
2a07:4f80::/44 maxlen: 44
2a07:4f80::/48 maxlen: 48
2a07:4f80:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:02:49:60:6d:9f:89:2f:7f:8f:78:06:6a:95:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Sep 6 08:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84962844fffa245cf8dc0f448eb71107dc5e2cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:27:b7:45:91:33:d1:1f:c2:3f:4d:3c:68:
72:b6:c6:49:a0:76:b1:b9:82:92:c0:b9:78:d3:a7:
68:9a:00:73:54:05:77:bc:12:98:38:46:90:77:f2:
c0:98:ad:5f:e0:9b:b9:e5:8e:6b:66:6f:73:5c:f7:
c9:81:1f:ad:54:d3:15:ac:e3:ca:27:45:00:8d:fe:
43:da:72:d1:6a:67:3c:71:29:0c:f2:98:66:8a:eb:
a3:88:74:76:c3:a1:74:fc:52:d9:40:0a:f6:6a:9e:
93:b2:6e:35:08:04:ea:6f:4e:14:9c:8c:94:98:cd:
15:be:53:17:17:35:59:16:f7:c7:d2:6b:e2:d4:7b:
60:d2:d1:be:25:75:1c:cb:97:94:3c:71:90:ac:71:
80:2f:a5:59:f9:b0:5d:68:c7:8d:b2:3c:a9:f6:0a:
8d:80:34:ac:a2:4c:93:c8:6b:d6:99:06:d6:f1:6a:
4d:c6:dd:56:08:6a:b1:73:90:ff:3a:03:71:1a:8d:
45:52:7a:b4:d4:fd:3f:c2:02:7a:e5:eb:43:88:52:
20:f0:2b:f6:6a:8d:f1:f8:1d:be:2b:e4:40:13:f1:
3b:ec:b7:b9:82:d0:c1:54:d5:46:d3:28:46:96:4e:
aa:46:75:ad:bc:e3:fd:40:ef:ec:6d:a3:7c:3f:55:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:28:44:FF:FA:24:5C:F8:DC:0F:44:8E:B7:11:07:DC:5E:2C:EE
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/hJYoRP_6JFz43A9EjrcRB9xeLO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.154.0/23
IPv6:
2a07:4f80::/44
Signature Algorithm: sha256WithRSAEncryption
a8:13:80:72:8f:48:1e:6b:d5:7c:e4:4b:20:20:77:87:a9:22:
be:aa:b8:e2:64:2f:fe:25:43:68:59:6e:ce:78:39:f4:3b:48:
3b:27:dc:72:2e:82:c3:8d:29:86:44:d1:74:9e:b1:05:79:db:
4e:6a:7d:6c:f6:f9:07:0c:9a:8b:ea:12:b8:1b:95:95:63:24:
d8:b4:ed:c0:b9:f6:ab:98:aa:36:3f:52:0e:ba:dc:d4:af:ec:
a7:bb:41:49:68:b3:87:20:fa:cb:2e:3e:5c:8a:8b:51:14:67:
99:73:8d:99:45:5b:b9:89:f8:b0:eb:15:4e:13:05:b1:17:15:
62:68:f2:6e:50:04:f8:6d:5b:83:54:27:c9:bb:16:05:da:71:
87:cf:c5:78:70:2e:99:ce:c6:3d:8e:8a:b5:d3:39:42:ec:5c:
71:e2:bf:8c:77:e2:75:b7:fc:69:ca:fa:54:fa:3d:93:35:2c:
63:f0:93:80:6e:ac:de:f9:ce:c7:57:e9:92:a7:37:7a:30:4e:
0d:b7:74:e4:54:8d:0d:8a:7c:3b:c4:e5:aa:5c:4e:ef:0f:94:
82:37:29:8e:f2:6c:67:e5:13:36:04:19:7a:37:f2:7d:ba:ec:
4c:df:c6:23:45:38:4a:26:7e:51:8a:cb:c5:13:69:fc:5f:7a:
08:19:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:49 2024 by rpki-client on console-ams.rpki-client.org