Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/w2s1_n4uSGVt8s87Ch1No4sXvvM.roa
File: w2s1_n4uSGVt8s87Ch1No4sXvvM.roa (raw, json)
Hash identifier: BgnlI/OIYGsmBdWbmZPx3Ipy+bbxCrX9Nj8+qu3f1ww=
Subject key identifier: C3:6B:35:FE:7E:2E:48:65:6D:F2:CF:3B:0A:1D:4D:A3:8B:17:BE:F3
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 0185304E2587885CEBA73077C22A7EE86281
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/w2s1_n4uSGVt8s87Ch1No4sXvvM.roa
Signing time: Tue 20 Dec 2022 16:11:45 +0000
ROA not before: Tue 20 Dec 2022 16:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200393
IP address blocks: 185.186.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:4e:25:87:88:5c:eb:a7:30:77:c2:2a:7e:e8:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Dec 20 16:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c36b35fe7e2e48656df2cf3b0a1d4da38b17bef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:fd:a2:bf:ae:b3:5c:28:a5:12:56:99:ca:
a3:83:0b:ad:4e:16:29:ad:19:67:b5:99:e4:1b:df:
2e:65:f6:ce:33:fc:43:6b:a4:1e:c9:89:f1:47:54:
4b:8b:91:1c:9a:18:c9:19:eb:84:95:0e:3e:d3:4e:
cf:85:95:0e:fe:16:94:e5:fa:3c:67:f5:09:73:61:
e5:c3:a1:30:13:67:f5:b1:4c:9e:da:99:08:4e:2b:
46:f2:7e:1f:e3:b6:3a:67:ca:e0:9f:b5:86:7e:cb:
02:7f:05:f3:4b:0b:bc:ce:55:2f:73:61:63:7a:3a:
b5:17:26:68:a3:78:6a:f7:43:c9:2b:43:51:24:3d:
7c:8c:e6:74:8e:69:08:9a:10:06:8b:8b:2a:ce:23:
d8:21:a5:4a:c1:a2:c9:29:b1:c7:59:5b:05:f7:4c:
19:05:fb:f9:d4:65:8b:a6:71:49:71:44:5b:3e:13:
e4:39:57:5f:04:59:89:e6:0a:7e:eb:90:d9:e3:83:
58:6f:19:2a:b0:b6:e3:5c:7c:46:57:6d:16:af:2c:
d2:49:6e:db:15:78:3e:c8:28:97:a8:cd:41:52:e6:
89:81:8c:f6:da:31:03:01:4c:f8:8c:d6:39:70:7f:
f5:e8:74:ef:cf:dd:06:e4:06:94:a7:be:8a:c8:bf:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6B:35:FE:7E:2E:48:65:6D:F2:CF:3B:0A:1D:4D:A3:8B:17:BE:F3
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/w2s1_n4uSGVt8s87Ch1No4sXvvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:81:89:19:56:e7:6b:1e:34:2c:ab:ff:d8:15:05:a1:1c:af:
83:f2:85:75:b0:d0:d2:4c:61:23:36:95:43:3c:21:70:b5:76:
e5:98:64:98:f3:8a:da:30:bf:c8:ee:de:48:61:b0:db:a2:cf:
5c:d4:ea:bf:d0:b1:5f:e4:30:10:e4:a7:2e:e9:78:48:08:ff:
69:d7:87:dd:5a:0b:e1:2e:ce:b0:3d:a7:1d:77:2f:e3:01:b2:
15:b7:a8:a1:5f:b3:73:1d:66:82:c8:c4:2a:bc:cb:42:ac:33:
7b:10:20:56:c9:a0:36:6c:41:72:28:de:4e:3c:90:3d:d1:89:
39:be:1a:e2:30:a1:25:1c:5b:b7:ee:34:00:de:1c:ab:b3:9b:
f1:e2:ee:aa:4f:58:5f:13:3e:9c:4f:aa:95:3b:28:a5:f4:f7:
e1:98:e4:2a:a9:69:d3:ad:a7:db:0a:54:8a:77:a4:9b:9a:54:
b1:61:69:25:fa:f5:c2:8e:52:d2:2a:b5:18:6a:4b:ff:5a:23:
a4:ff:40:f2:12:a3:d2:1f:e7:f5:49:6f:1a:03:ec:02:5d:03:
bd:41:97:5b:fc:d3:34:b9:36:83:7b:43:bc:df:b1:07:d7:e6:
93:23:e6:39:c0:61:30:75:e4:e4:47:e7:2b:7f:ac:08:dc:c9:
21:42:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org