Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/8tKSlenb0krmNSS_eUQjoq9F6l0.roa
File: 8tKSlenb0krmNSS_eUQjoq9F6l0.roa (raw, json)
Hash identifier: k3In6QCP0uepQ+p+v0LWQHIP6Nz3KSH/+e3Tf1xcE/A=
Subject key identifier: F2:D2:92:95:E9:DB:D2:4A:E6:35:24:BF:79:44:23:A2:AF:45:EA:5D
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 0E01B545
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/8tKSlenb0krmNSS_eUQjoq9F6l0.roa
Signing time: Sat 01 Jan 2022 04:55:53 +0000
ROA not before: Sat 01 Jan 2022 04:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56334
IP address blocks: 185.136.22.0/24 maxlen: 24
185.136.21.0/24 maxlen: 24
185.136.20.0/24 maxlen: 24
2a06:f800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234992965 (0xe01b545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Jan 1 04:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2d29295e9dbd24ae63524bf794423a2af45ea5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:01:8f:af:d1:32:f4:00:de:ea:f2:38:fd:
63:39:55:c2:45:1f:ab:d5:4b:a3:2a:81:fc:24:89:
42:5d:a7:b9:9b:47:c9:fd:ed:1c:3f:08:c2:2f:99:
84:22:7a:99:f5:cc:0e:5a:d7:1b:c9:12:aa:61:5d:
52:7c:8b:16:16:b3:66:56:f4:72:f7:6f:92:97:7b:
54:d1:55:e5:0d:ce:cc:51:19:c6:1c:1c:4b:1c:c0:
6b:ee:ee:10:fb:ca:e3:27:5d:b9:4c:a4:62:24:73:
59:2d:e0:45:33:c7:e6:b7:2e:67:f8:7a:66:59:1d:
25:ed:d7:9a:03:ed:a5:58:dd:6c:4e:92:7f:b5:e7:
88:6a:7c:95:25:35:03:a3:65:34:29:12:a9:47:50:
4f:d3:14:1e:55:65:f0:48:94:5d:b4:4b:ee:70:00:
17:bf:a2:d6:aa:12:2c:8c:d7:d0:19:a3:ee:03:fc:
0e:2c:b7:61:05:c2:ba:a0:74:11:61:04:db:eb:90:
9e:fe:5d:6e:7f:a8:60:cf:14:11:19:25:09:5c:25:
95:07:c8:0a:22:ba:b7:0f:dd:3d:6e:44:34:36:62:
f7:fb:a2:cd:4a:e3:e0:50:85:fb:64:68:93:62:3d:
90:41:b1:a8:bd:c3:05:46:4c:1f:c7:8c:7b:cd:80:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D2:92:95:E9:DB:D2:4A:E6:35:24:BF:79:44:23:A2:AF:45:EA:5D
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/8tKSlenb0krmNSS_eUQjoq9F6l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.20.0-185.136.22.255
IPv6:
2a06:f800::/29
Signature Algorithm: sha256WithRSAEncryption
4a:e5:d2:a6:39:78:94:a0:9f:38:71:b7:96:ee:a7:39:b1:9d:
45:58:59:76:08:67:d9:64:d1:2f:da:95:1f:73:03:3c:1e:46:
4f:9d:99:c0:e5:ba:46:8d:2c:03:5b:74:3c:43:2e:14:09:bf:
48:c3:0b:78:dd:72:4a:b8:1b:0c:55:77:37:e2:e4:20:64:61:
68:6d:06:95:01:27:8b:e6:b8:09:1d:4b:4f:a8:04:74:20:17:
ed:1d:f3:ca:fc:bc:ee:7a:36:c9:a6:a1:28:c5:31:63:24:c0:
3c:b2:4b:43:20:a9:26:84:20:58:70:83:79:32:a1:dd:ab:e8:
04:53:51:c7:ff:78:1f:60:2e:3f:76:91:10:6a:03:20:e6:35:
3f:0d:76:76:06:7e:07:22:39:4c:52:4c:86:26:ea:44:46:ce:
7b:a1:98:38:47:09:04:66:89:0c:d4:15:79:ff:b5:7d:f9:f3:
3c:cd:a2:f4:db:67:03:86:cd:11:40:2e:09:a2:e4:e6:0b:34:
1b:3e:ae:c2:42:f2:70:a1:9b:a1:2e:15:30:65:8a:87:49:e4:
5e:ff:6e:3f:c3:e2:99:e0:ff:fe:fc:c0:f6:0f:86:c6:8f:47:
db:81:98:7a:fd:05:c8:40:98:f0:3a:4c:7c:c8:ec:58:13:29:
bf:1e:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:16 2024 by rpki-client on console-ams.rpki-client.org