Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/c_uQ1Sq6jcQekehmsS06rDkaNGE.roa
File: c_uQ1Sq6jcQekehmsS06rDkaNGE.roa (raw, json)
Hash identifier: FZW7WqA0gHQQeYm+tOXKDS8gHKfdvTRtuP1jNXIJtGs=
Subject key identifier: 73:FB:90:D5:2A:BA:8D:C4:1E:91:E8:66:B1:2D:3A:AC:39:1A:34:61
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 01850D95253F7436F09897FF6C7FA24B6100
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/c_uQ1Sq6jcQekehmsS06rDkaNGE.roa
Signing time: Tue 13 Dec 2022 22:22:36 +0000
ROA not before: Tue 13 Dec 2022 22:22:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42184
IP address blocks: 185.64.168.0/22 maxlen: 24
45.82.124.0/22 maxlen: 24
185.143.168.0/22 maxlen: 24
178.251.8.0/21 maxlen: 24
188.64.248.0/21 maxlen: 24
91.190.224.0/21 maxlen: 24
2a02:f08::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:95:25:3f:74:36:f0:98:97:ff:6c:7f:a2:4b:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Dec 13 22:22:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73fb90d52aba8dc41e91e866b12d3aac391a3461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:cc:19:b0:08:5b:9e:7e:c3:64:6e:8f:1d:
b7:fb:bd:e2:11:fd:92:5f:e1:f6:20:8f:d4:5d:34:
ec:e5:54:69:16:d4:8f:5f:02:33:51:f2:61:88:f1:
43:21:e8:19:8b:80:a3:bc:b5:31:60:6e:18:4b:8a:
c1:90:6c:d9:c4:45:fc:9d:c6:b1:25:62:8d:65:0e:
d7:ca:a0:1e:94:37:77:e8:c4:73:71:7e:f7:a5:d0:
fd:87:f1:fe:6a:40:d5:04:a9:94:51:14:79:47:ba:
ed:62:73:f2:f1:53:9c:68:5b:c3:d5:14:77:8f:0b:
d2:0d:76:8a:35:7b:3a:aa:7a:c4:0b:cc:47:76:28:
6d:49:a2:f0:57:02:b3:b6:57:a6:62:9e:dc:06:62:
47:48:f0:0d:01:9c:73:a5:e8:4d:15:83:64:a4:0a:
6a:dd:69:f4:fc:b8:33:1d:50:08:7a:7e:dd:31:df:
fe:d3:06:82:9a:33:6c:f2:b9:b2:f9:bb:e0:76:75:
b3:ba:53:84:3e:ec:13:e9:d0:36:dc:15:66:d4:fc:
6e:d5:77:33:9f:35:e7:f2:98:90:1e:8a:48:05:8f:
9b:b7:6b:c0:07:5d:b7:c9:27:83:92:97:20:46:b8:
15:11:29:ec:ad:16:b8:51:12:e5:63:89:a8:9a:6c:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:90:D5:2A:BA:8D:C4:1E:91:E8:66:B1:2D:3A:AC:39:1A:34:61
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/c_uQ1Sq6jcQekehmsS06rDkaNGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.124.0/22
91.190.224.0/21
178.251.8.0/21
185.64.168.0/22
185.143.168.0/22
188.64.248.0/21
IPv6:
2a02:f08::/32
Signature Algorithm: sha256WithRSAEncryption
46:2b:ac:87:53:e3:e1:bf:e7:c6:75:eb:8a:ac:ed:82:c7:12:
fb:68:ae:cb:ec:f7:5f:16:c0:cc:2b:25:82:e6:90:f2:20:b6:
78:b1:aa:a7:29:86:50:e2:c2:3f:37:28:dc:ab:e4:b6:f6:69:
38:63:48:98:b1:d6:77:e9:7b:eb:41:ed:2c:70:2f:e7:3e:35:
ee:cb:cc:c5:cc:28:7c:e9:66:8d:33:11:31:85:1b:89:74:16:
a7:09:89:5b:e8:73:17:41:b4:dd:f2:48:74:44:fe:51:06:ac:
35:94:16:e3:c4:72:c7:f6:7d:7a:05:05:9c:e4:71:f9:ed:11:
c9:ed:3d:c8:7c:35:7a:47:65:cc:9d:93:21:62:61:cf:77:90:
84:72:c6:42:3b:ff:14:cb:4a:d6:ba:e0:4f:89:f8:8f:1a:d9:
9c:90:70:04:5a:dd:23:65:8b:d5:06:eb:4f:0e:b0:71:c7:bc:
74:17:05:90:d2:46:b9:39:fe:a5:aa:1c:97:43:10:2b:8e:1e:
e3:b0:62:78:e5:0f:34:4c:4f:c2:84:eb:3e:ed:fe:68:65:12:
7f:11:e0:74:dc:58:91:b7:f9:af:e0:97:4a:4d:e5:fb:0e:59:
b9:a3:58:37:66:c1:f1:65:b7:0c:ed:88:4b:a9:29:73:41:a1:
e1:3f:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:00 2023 by rpki-client on console-ams.rpki-client.org