Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/E40WMQTeBTHQ3-6D-LNxVEUIOnw.roa
File: E40WMQTeBTHQ3-6D-LNxVEUIOnw.roa (raw, json)
Hash identifier: owYTWlREp3bykhxKAL3VPpWmA3XlhuvRwxPCEZe6GLs=
Subject key identifier: 13:8D:16:31:04:DE:05:31:D0:DF:EE:83:F8:B3:71:54:45:08:3A:7C
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 13C6F00F
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/E40WMQTeBTHQ3-6D-LNxVEUIOnw.roa
Signing time: Sat 01 Jan 2022 12:00:36 +0000
ROA not before: Sat 01 Jan 2022 12:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203811
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.253.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
185.122.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331804687 (0x13c6f00f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jan 1 12:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=138d163104de0531d0dfee83f8b3715445083a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:b2:fc:8d:02:f2:96:c9:22:5c:2b:85:33:
07:73:ad:7a:b6:ab:79:50:0d:d3:63:09:16:bb:a8:
e1:c5:3e:20:5d:42:f1:3c:93:cd:fc:11:85:f4:a3:
fa:c4:33:b1:af:54:c4:73:8a:ea:27:d2:93:ac:3b:
61:e2:b0:22:9e:f7:1b:7a:44:50:06:8e:b7:53:2c:
53:e5:cf:6d:6a:05:da:09:6c:a1:25:57:f1:b2:9a:
a2:59:4e:1b:2e:bf:16:e4:0b:fe:55:f1:f4:ae:77:
2a:50:22:3a:b1:e4:f0:1c:f1:6d:0d:ac:c7:25:b8:
68:f3:9c:9b:09:c9:f0:ab:d0:e3:c9:81:c0:6d:65:
0d:74:31:b4:8a:e9:e0:a5:4a:70:45:5c:d9:84:b3:
42:82:1a:69:50:19:9a:20:95:7a:5f:15:29:88:d1:
5b:e8:56:d5:d7:55:76:23:95:e5:d7:32:a4:bc:55:
3f:83:7c:2b:c0:48:a7:7d:64:04:15:e8:50:19:c5:
94:27:6e:c1:66:ba:26:bd:91:f3:ba:1e:d3:5d:31:
d4:31:b8:cc:23:26:7a:80:7d:74:be:28:07:27:f7:
84:c6:dd:71:3d:9b:1a:29:ed:2c:a3:ed:07:15:7f:
d8:e0:19:50:6f:f2:11:55:d5:1c:05:96:80:be:97:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8D:16:31:04:DE:05:31:D0:DF:EE:83:F8:B3:71:54:45:08:3A:7C
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/E40WMQTeBTHQ3-6D-LNxVEUIOnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:3a:7b:15:1c:d1:73:77:ca:cd:9e:2e:64:4f:38:94:26:dd:
8e:0f:b6:d5:e8:54:f1:40:17:28:b0:2f:bb:2e:f0:d0:83:a4:
60:7b:10:90:be:51:18:3a:e6:85:47:f2:0b:b1:fc:45:2a:3e:
68:0e:b4:12:44:18:94:dd:5e:cb:0b:3a:f3:2c:38:86:73:ce:
98:38:37:7b:01:9c:32:ac:bb:f0:db:75:d5:db:05:8c:1f:40:
f8:45:57:a7:a4:5c:07:6a:09:1e:9b:46:25:31:d1:0a:1e:0a:
40:ef:76:fc:ce:27:56:9d:13:8a:9a:fe:99:51:fd:70:9b:ef:
8c:87:0d:ae:2e:c9:a9:e9:66:3b:9a:d7:7a:5c:1a:3e:f6:a3:
2e:38:df:1d:d4:d1:96:9a:04:1c:8d:9d:f3:00:77:40:5f:8c:
e2:62:a8:4c:b7:80:d0:58:3a:5a:93:c4:ec:9a:86:e2:ff:b4:
11:1b:fe:a4:c4:93:d3:13:c7:ef:a3:18:85:e7:d7:83:e0:6b:
49:2b:24:75:09:e6:29:84:60:5d:7f:14:b0:cc:05:cd:6e:ba:
1b:45:ab:9c:68:91:9b:4a:f8:b3:c1:2e:d8:a9:82:eb:d3:3a:
e0:a1:3c:ab:44:d6:d3:eb:1e:00:7e:77:83:be:35:71:48:80:
d6:f2:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:38 2024 by rpki-client on console-fra.rpki-client.org