Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/k0W3ARVeWBPEHdQ4LeD0h6GJSqk.roa
File: k0W3ARVeWBPEHdQ4LeD0h6GJSqk.roa (raw, json)
Hash identifier: yOGEoxSr4hDCOrbjCgtHjOZbvATwAwOIKnuTDF4X8y4=
Subject key identifier: 93:45:B7:01:15:5E:58:13:C4:1D:D4:38:2D:E0:F4:87:A1:89:4A:A9
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 010BD2AC
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/k0W3ARVeWBPEHdQ4LeD0h6GJSqk.roa
Signing time: Sun 06 Mar 2022 14:07:09 +0000
ROA not before: Sun 06 Mar 2022 14:07:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204566
IP address blocks: 185.243.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17552044 (0x10bd2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Mar 6 14:07:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9345b701155e5813c41dd4382de0f487a1894aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:b4:8f:6f:c1:34:b8:27:4f:83:da:e4:11:
a0:91:fd:7f:a6:96:e1:2c:ce:e1:dc:52:23:ad:75:
10:b6:8d:59:1b:6a:56:71:05:be:d0:01:be:c1:54:
8f:03:38:26:02:8d:02:49:fe:c0:ac:d8:95:7c:a4:
fa:a1:b7:87:72:2e:51:ad:91:a6:7f:50:47:33:b1:
c5:59:c1:5d:29:c4:8e:47:99:c9:c7:6e:fa:63:29:
7f:43:8d:a4:43:47:4a:82:6b:c2:db:57:48:32:2a:
ee:57:91:13:17:e4:d5:1d:72:dc:50:67:bd:be:da:
a3:c1:8f:e7:9a:08:65:6b:2d:04:fc:9b:4c:b7:3d:
74:48:9b:28:71:ad:39:f5:86:9a:1c:6c:3a:3b:5a:
d8:cb:bc:24:b3:34:d3:ee:60:fe:33:01:08:bf:9c:
ec:c7:64:b4:7a:4f:81:aa:a5:1d:d6:0d:d9:6e:02:
51:aa:d2:0f:2e:fa:fd:40:a4:46:7d:80:af:a7:1f:
e3:56:fd:04:91:21:1f:b0:0d:7f:f7:0b:ea:4c:45:
5d:9a:c0:9a:79:9c:7d:8d:90:9e:86:ee:fb:f5:b8:
1d:a3:8e:72:26:a6:5e:57:c2:66:69:4a:b3:b2:6a:
64:2a:09:e4:7c:7b:a6:5c:8a:aa:98:9e:36:5c:0f:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:B7:01:15:5E:58:13:C4:1D:D4:38:2D:E0:F4:87:A1:89:4A:A9
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/k0W3ARVeWBPEHdQ4LeD0h6GJSqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.208.0/22
Signature Algorithm: sha256WithRSAEncryption
88:3e:fe:b6:32:2f:4d:32:a9:a3:92:6c:3a:5b:ec:9e:dd:e7:
09:d1:01:98:e6:16:17:64:08:ee:e9:7a:78:2b:25:e3:96:ad:
e5:43:cb:80:7d:fa:f7:83:f8:3c:b0:be:1f:38:df:42:74:22:
76:a0:63:a6:6a:a5:62:b1:02:a8:5a:84:3e:86:48:8e:28:5c:
45:75:47:55:5d:a5:b1:9b:0a:7c:3a:d6:ef:53:7e:23:fa:b2:
55:39:2e:6d:11:42:e4:70:db:f2:07:68:77:5f:22:b4:87:7e:
c4:3a:64:27:24:fe:9d:51:fc:ed:30:3c:b1:02:1d:8f:5b:2c:
8b:bb:19:81:0f:57:e5:1d:87:f0:cc:c2:0c:98:f8:89:a4:60:
1a:90:9e:e7:ab:1c:66:fd:43:f0:6c:12:63:fd:21:dc:da:9b:
b5:80:d0:22:76:7c:90:5d:8f:51:65:69:56:32:26:98:3f:d2:
ab:00:68:95:41:df:b9:ab:6c:f2:9f:7d:bb:38:e6:cf:86:ae:
b4:4c:1d:2d:be:11:ad:c4:9a:21:26:8f:da:73:df:ea:91:50:
3f:45:f6:00:4d:9e:12:f7:09:d7:77:f5:de:e4:72:94:5e:6f:
54:92:58:43:20:08:40:ad:b2:07:65:82:ae:b9:b2:fa:23:a6:
cd:32:7b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org