Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/w1Nsq8vQFaOxQiPDIbLgMCadBn8.roa
File: w1Nsq8vQFaOxQiPDIbLgMCadBn8.roa (raw, json)
Hash identifier: vGBlJJnFPq1i5GOQW62E/PK5xfe8wJbyxW/VKfsyKyQ=
Subject key identifier: C3:53:6C:AB:CB:D0:15:A3:B1:42:23:C3:21:B2:E0:30:26:9D:06:7F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1B9F37F3
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/w1Nsq8vQFaOxQiPDIbLgMCadBn8.roa
Signing time: Sat 01 Jan 2022 05:03:41 +0000
ROA not before: Sat 01 Jan 2022 05:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 81.161.52.0/22 maxlen: 24
94.232.100.0/22 maxlen: 24
37.97.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463419379 (0x1b9f37f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3536cabcbd015a3b14223c321b2e030269d067f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:76:80:da:13:7d:c9:73:6c:be:0f:5c:fc:
4c:85:25:31:20:58:ed:67:da:ce:0e:0e:ef:a2:dd:
57:08:47:6a:0b:fc:72:b5:1b:f8:e1:c1:6c:59:1b:
f4:1f:1c:6e:dc:fe:06:81:f7:26:ce:42:71:bd:3c:
05:05:b6:cc:af:84:6c:e7:f5:dd:70:e5:96:05:fa:
ea:c7:dd:b8:71:ac:d6:db:d8:03:8f:d9:1f:6f:45:
01:6f:62:b4:4f:64:7c:a8:4f:c4:da:bb:4e:ea:9a:
9e:f0:2d:43:e2:af:21:a7:0e:07:84:cb:e5:ce:4f:
63:75:70:66:73:dc:01:f2:eb:d0:8d:f3:85:6b:54:
5c:4c:36:e5:28:33:21:0d:0c:cd:52:af:49:89:57:
72:2a:f8:d7:bf:c4:82:14:ee:d1:12:4c:fd:a2:4e:
e1:88:cc:51:59:6f:ad:af:a8:99:a0:2c:0d:0f:5e:
24:c3:f0:90:1d:da:24:d9:49:cc:f3:f8:41:f2:f8:
5e:92:3d:56:6e:95:61:b4:96:d3:cc:b7:bd:1b:54:
bc:ee:a3:b5:b7:c4:19:4b:3c:9f:fa:4b:7d:8e:6c:
54:2b:df:e7:aa:11:32:2b:e5:d4:d2:8a:47:c1:24:
19:9a:fe:28:86:54:0a:a6:1b:57:bb:cc:60:d8:b8:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:53:6C:AB:CB:D0:15:A3:B1:42:23:C3:21:B2:E0:30:26:9D:06:7F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/w1Nsq8vQFaOxQiPDIbLgMCadBn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.112.0/22
81.161.52.0/22
94.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:a3:d0:10:ef:81:7b:c8:a8:b4:58:f5:bc:d2:e4:94:15:6d:
3c:b1:c5:fd:29:80:16:ae:82:a4:da:ac:68:f0:27:42:ac:e7:
83:aa:77:8a:e2:8b:c8:67:69:4c:ae:2f:8c:ea:bf:b9:d5:6e:
19:9b:fa:1e:a1:8d:d3:b6:ee:03:eb:df:81:ea:bb:1c:3b:b9:
86:2a:ac:72:b5:ed:4e:15:10:92:dc:ee:93:c4:b8:dc:b3:65:
39:0e:7c:72:44:7a:e3:03:50:77:ab:36:ed:62:24:0d:bb:42:
bb:26:5b:cf:34:48:f5:31:3f:bf:57:4e:5e:53:20:81:1f:3e:
32:45:24:39:5f:b7:9c:ab:46:e4:f3:d2:67:3d:b5:f7:83:d8:
cc:3a:2a:d1:e5:c8:fe:ba:f5:8d:1d:da:9e:69:d8:be:4f:d5:
4c:52:f6:86:f9:2e:e3:0f:d1:33:8c:d4:a3:cf:f1:fc:e7:56:
3f:83:a1:2b:d9:95:31:83:9a:28:47:10:74:2a:29:0f:66:f3:
5c:80:db:7c:52:ba:76:59:71:99:b8:1e:f4:3a:db:8b:63:2f:
83:56:fd:a9:a4:aa:3c:4f:ec:90:7f:24:91:40:e2:9d:93:80:
64:f3:67:bf:1e:f5:cc:2e:18:fe:7b:ac:7e:5e:6e:99:1b:40:
20:3d:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org