Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/Id2AQNTawzUPXJV7BpOZedlbECA.roa
File: Id2AQNTawzUPXJV7BpOZedlbECA.roa (raw, json)
Hash identifier: kv97tlt2Woohi7sPkoi4bZ15dJsXTHpfrH+kWxoxnkc=
Subject key identifier: 21:DD:80:40:D4:DA:C3:35:0F:5C:95:7B:06:93:99:79:D9:5B:10:20
Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial: 0242932B
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/Id2AQNTawzUPXJV7BpOZedlbECA.roa
Signing time: Sat 01 Jan 2022 12:54:03 +0000
ROA not before: Sat 01 Jan 2022 12:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31167
IP address blocks: 185.244.18.0/24 maxlen: 24
185.244.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37917483 (0x242932b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Validity
Not Before: Jan 1 12:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21dd8040d4dac3350f5c957b06939979d95b1020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:52:33:c2:a0:1c:de:8b:a7:9a:43:be:29:
f8:ea:a9:58:f9:c9:b5:0c:8d:8a:21:d6:1b:af:d2:
74:cc:77:ec:f0:29:1c:c2:73:ea:33:d5:b4:b9:34:
a9:73:4f:69:b2:ba:ba:81:e9:53:bd:22:fb:08:c1:
01:57:9b:c1:7d:ba:cd:49:8a:43:36:7a:0b:54:f3:
31:bd:d4:8a:96:d3:90:04:bd:32:c2:09:9a:2a:a1:
26:24:b9:d9:7a:58:ee:0e:83:d2:84:0e:49:c1:46:
9c:99:83:82:e8:05:7c:ae:4a:04:34:a6:ce:34:43:
d7:2c:23:84:8e:44:4a:0d:58:e8:39:89:79:c0:b8:
74:75:25:06:ab:09:d2:73:1c:eb:0b:3e:92:ef:41:
f0:21:3a:a2:67:a8:4a:86:e8:cf:aa:e3:86:e9:43:
70:fb:cb:f8:1d:c1:76:c4:36:80:49:56:ed:88:5a:
07:aa:a8:c8:a6:69:af:96:b3:1e:61:7e:9c:6e:21:
aa:e6:4d:2f:0d:19:79:0f:3f:64:11:87:d2:8c:b4:
24:5f:2f:e5:fd:f9:1b:9a:5e:2d:45:be:cf:82:55:
f5:a4:3a:5c:c6:22:22:29:fb:24:7f:d9:ba:a9:4f:
48:5b:62:29:5d:6f:10:9d:e7:dc:46:46:5e:bf:ef:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:80:40:D4:DA:C3:35:0F:5C:95:7B:06:93:99:79:D9:5B:10:20
X509v3 Authority Key Identifier:
keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/Id2AQNTawzUPXJV7BpOZedlbECA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.18.0/23
Signature Algorithm: sha256WithRSAEncryption
39:43:f4:79:41:bc:7b:fd:45:c6:14:ab:68:c3:21:c0:2c:91:
f9:f0:45:a3:20:25:a8:05:95:8d:7b:07:e8:94:87:5c:8e:ed:
ae:47:4a:6a:4b:c5:71:5b:4c:8c:2c:f8:85:8a:4a:01:ea:c6:
fa:47:2b:80:7e:e2:c3:c8:cd:fa:db:12:fe:1e:e3:d0:a7:4c:
23:08:b5:b3:45:b4:a2:34:1e:fa:29:be:d0:c9:4d:94:cc:64:
62:be:78:c4:1e:8a:a8:82:15:d9:e4:e2:7f:6f:2f:4e:25:76:
e0:34:00:21:3f:07:2b:50:85:50:4d:f4:a9:90:c0:21:3f:39:
b8:07:88:9f:92:82:bc:47:ac:93:a5:58:6e:1f:44:b3:80:00:
0a:06:0b:03:f6:a7:93:68:98:a0:7e:00:1b:db:c7:e1:df:9f:
34:f1:d5:fa:67:b3:a2:77:f4:11:11:7c:73:67:35:de:22:61:
8c:89:a0:6d:05:7f:72:bd:ba:be:0b:1f:2e:7d:16:a4:34:e3:
7d:12:07:d1:75:87:ae:73:3e:49:44:0b:b1:00:6e:4f:6c:e5:
f7:17:a1:34:b0:93:3a:1a:2b:08:cd:3f:45:0b:4c:f3:fd:f6:
dc:9b:b8:15:60:0a:98:4d:d2:ba:b5:d7:d3:4c:d8:07:11:d2:
fe:33:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org