Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/D69MREJprljlr62VETqm4cKbbnE.roa
File: D69MREJprljlr62VETqm4cKbbnE.roa (raw, json)
Hash identifier: 30wEkky4pKUHkpyVR+jkPOjrqWXvh5+MGJNOuguGUgg=
Subject key identifier: 0F:AF:4C:44:42:69:AE:58:E5:AF:AD:95:11:3A:A6:E1:C2:9B:6E:71
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 0181FE4C1E107C5C0A711306C54AC6AA27DC
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/D69MREJprljlr62VETqm4cKbbnE.roa
Signing time: Thu 14 Jul 2022 20:00:09 +0000
ROA not before: Thu 14 Jul 2022 20:00:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62217
IP address blocks: 185.184.156.0/24 maxlen: 24
185.184.157.0/24 maxlen: 24
185.184.158.0/24 maxlen: 24
185.184.156.0/22 maxlen: 22
185.184.159.0/24 maxlen: 24
2a0b:3880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fe:4c:1e:10:7c:5c:0a:71:13:06:c5:4a:c6:aa:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Jul 14 20:00:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0faf4c444269ae58e5afad95113aa6e1c29b6e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:c7:73:81:f1:20:ad:95:52:fd:3c:6a:ff:
61:78:3b:1e:5a:16:9b:01:f8:3c:b1:b3:3b:fa:13:
1f:b4:0b:18:d5:43:ad:8e:e3:c0:c0:83:c9:24:59:
0d:ee:80:b0:d5:e9:40:48:bd:70:d7:f4:0f:48:60:
dd:4e:c9:05:63:0b:a5:8e:ea:b9:a6:1f:04:fa:a4:
ba:f5:56:9b:94:fb:b4:eb:3b:b2:63:04:73:97:ca:
28:2e:70:aa:64:23:d7:81:dd:21:70:d5:52:cd:c7:
57:e1:54:90:fa:6d:fc:77:b9:d4:25:4c:67:cf:a5:
66:be:d3:23:f8:2a:cc:e4:6f:d1:e7:03:0f:ac:84:
91:44:fe:b0:fc:37:0b:34:a8:a2:41:29:9b:14:75:
17:10:3f:fd:2d:89:23:b3:98:79:0b:7c:d4:a5:70:
90:72:b0:e8:2c:50:86:66:7c:8b:d2:d2:03:28:b1:
ee:05:ad:6b:8a:62:09:82:00:a2:18:93:a4:22:3d:
57:47:51:ec:39:03:2d:0e:23:15:b1:ed:4d:01:6a:
8b:63:01:45:f5:71:e2:bf:65:9f:30:0b:fd:38:e7:
b3:6f:c9:56:cd:77:62:72:29:89:b6:12:fd:c0:c8:
96:6f:fa:02:b1:b5:84:68:2c:a3:ec:af:f5:0e:55:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AF:4C:44:42:69:AE:58:E5:AF:AD:95:11:3A:A6:E1:C2:9B:6E:71
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/D69MREJprljlr62VETqm4cKbbnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.156.0/22
IPv6:
2a0b:3880::/32
Signature Algorithm: sha256WithRSAEncryption
1d:03:3c:21:67:67:8b:b0:ea:31:c5:7a:ee:76:21:8c:90:52:
bc:e2:67:0c:a0:4f:66:bc:73:1e:16:c2:8c:38:cc:db:5c:ab:
04:71:c3:e7:74:23:27:3a:ae:56:d6:77:4e:b8:a1:41:1e:f0:
be:3a:9c:c2:04:6a:1a:e6:29:a4:75:f7:cf:44:0c:e5:2e:20:
b7:f5:5c:92:15:ac:a5:e5:af:b1:14:e3:f1:f4:6e:68:e8:ef:
ef:c0:f2:48:8f:b2:0c:fb:23:3d:d0:fc:a4:00:fa:90:e2:6b:
c3:12:a1:e2:d9:33:20:76:a7:9b:3a:77:fe:74:0f:8e:21:27:
63:cc:e4:fb:bd:99:af:24:0e:d3:12:5e:36:7a:ac:18:18:be:
9f:87:25:35:45:f5:4c:91:0e:0c:31:85:cb:66:74:02:e3:29:
51:91:a7:43:a2:c3:af:93:aa:b5:d9:50:c2:fb:b6:34:ba:e4:
9f:4c:e5:af:04:94:73:9d:3e:9c:0c:58:22:4a:11:00:74:c3:
30:cd:20:8d:04:77:b7:26:96:fe:4e:f5:e4:b0:c8:56:f5:4b:
fd:94:38:7a:70:b6:1c:5b:3e:55:be:f1:bf:25:94:7e:d8:9a:
cb:3d:7e:3d:25:cc:af:c6:6c:35:58:7a:48:5b:20:a0:fb:03:
57:31:1b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:10 2024 by rpki-client on console-fra.rpki-client.org