Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/DtO4ov23HFwjrfvFYQ_xFCPzvz8.roa
File: DtO4ov23HFwjrfvFYQ_xFCPzvz8.roa (raw, json)
Hash identifier: Y5QUUVUicPCRkV1TVTLCsy+4n68B6t6CzSks0TGKvIc=
Subject key identifier: 0E:D3:B8:A2:FD:B7:1C:5C:23:AD:FB:C5:61:0F:F1:14:23:F3:BF:3F
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0183CC74494B18806BF5B6E076E90839D9FC
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/DtO4ov23HFwjrfvFYQ_xFCPzvz8.roa
Signing time: Wed 12 Oct 2022 13:48:36 +0000
ROA not before: Wed 12 Oct 2022 13:48:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31493
IP address blocks: 185.76.36.0/22 maxlen: 22
212.124.192.0/19 maxlen: 19
2a00:19e8::/29 maxlen: 29
2a00:19e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:74:49:4b:18:80:6b:f5:b6:e0:76:e9:08:39:d9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Oct 12 13:48:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ed3b8a2fdb71c5c23adfbc5610ff11423f3bf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:72:cd:f5:fc:87:af:67:8c:a4:ec:ae:d8:
76:62:2b:a4:bf:8e:63:ed:c2:e1:22:ad:b5:aa:d3:
85:4d:a1:ac:34:0d:24:85:66:3b:3a:81:5b:21:d4:
21:af:14:c4:7e:29:d5:31:52:55:de:32:fb:8f:4d:
df:67:1b:c4:2b:be:04:36:9e:2b:49:27:fa:08:83:
0d:bd:4c:7b:5d:2a:f9:c7:ee:b6:c4:28:a8:cf:0d:
de:80:00:9b:ed:22:b3:71:6c:e7:04:b2:80:2f:ac:
5a:e2:68:71:fc:c3:a7:48:40:a6:d2:fd:9b:b2:9d:
b4:f0:3f:7e:0a:1e:14:95:15:79:5c:11:c1:3f:ee:
96:fd:83:32:35:ba:95:d4:40:43:fb:71:63:ff:d6:
64:b1:22:97:5c:49:f0:90:6e:9b:44:5f:4c:3f:69:
f4:f2:2a:6f:3a:cb:6f:a8:05:60:51:bd:38:d8:9d:
e2:ce:9a:bd:04:cc:47:7a:cd:c1:72:8b:b5:89:93:
d5:e5:ab:cd:ae:a2:24:b6:ec:c0:6f:a5:91:79:02:
8e:ff:3d:2c:81:ed:e9:a1:35:51:86:ae:f6:96:cf:
9b:4a:ac:f0:22:60:be:8b:66:72:39:2b:e4:48:79:
89:6b:f1:3c:27:1b:26:40:1c:9c:51:59:b5:86:67:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:B8:A2:FD:B7:1C:5C:23:AD:FB:C5:61:0F:F1:14:23:F3:BF:3F
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/DtO4ov23HFwjrfvFYQ_xFCPzvz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.36.0/22
212.124.192.0/19
IPv6:
2a00:19e8::/29
Signature Algorithm: sha256WithRSAEncryption
32:63:ea:5b:3d:3b:58:32:04:19:41:df:07:10:3f:a5:fe:c5:
63:dc:64:ea:ea:f0:e2:54:ca:64:9b:00:11:51:75:e8:fe:3a:
80:93:c8:5c:8f:5a:8a:21:4e:aa:03:db:d9:cd:a9:cc:af:c4:
bf:82:1a:ab:57:8d:d6:47:31:3e:73:95:2b:1c:00:1d:c3:0a:
11:e9:72:20:7a:22:02:4f:a0:0c:de:b2:1c:76:f6:5e:3a:e4:
f8:fd:0f:0e:30:12:5f:65:cf:64:81:1d:66:48:40:44:46:75:
4e:cf:46:eb:4c:89:9c:61:50:6d:bd:04:6f:1e:6e:93:04:ec:
f3:69:00:2e:dd:52:f4:35:62:86:14:44:01:e4:60:35:e2:33:
b8:b3:8c:5a:45:65:c1:e8:76:25:38:82:69:a4:6e:a1:9e:e0:
da:db:99:05:98:46:f3:f9:f7:08:e3:be:03:54:14:79:48:08:
04:6d:cd:7c:b0:65:fe:02:95:5c:3e:6a:a9:23:2b:6c:29:a6:
05:36:ed:b3:66:71:26:1d:87:d8:a9:bc:11:91:67:ee:c1:92:
e8:8f:4a:0c:ee:68:d5:21:90:3c:d1:f7:e1:ff:2c:77:dd:da:
5d:6f:0d:43:5e:cf:63:87:ce:bb:eb:7b:18:6d:59:ac:ef:a4:
ae:07:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:21 2023 by rpki-client on console-ams.rpki-client.org