Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/1-MaIHiZ462nKiFKpv8G9k9eqbsE.roa
File: 1-MaIHiZ462nKiFKpv8G9k9eqbsE.roa (raw, json)
Hash identifier: cZeJ7x2IG5jiV8Br1jjC8L5yD17gvV/gw+w2Heijpss=
Subject key identifier: F8:C6:88:1E:26:78:EB:69:CA:88:52:A9:BF:C1:BD:93:D7:AA:6E:C1
Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial: 0182DE510B1DF4380F5F111A46C0455F67F7
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/1-MaIHiZ462nKiFKpv8G9k9eqbsE.roa
Signing time: Sat 27 Aug 2022 08:00:29 +0000
ROA not before: Sat 27 Aug 2022 08:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202813
IP address blocks: 185.178.139.0/24 maxlen: 24
185.178.136.0/24 maxlen: 24
185.178.138.0/24 maxlen: 24
185.178.137.0/24 maxlen: 24
2a0b:fa80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:51:0b:1d:f4:38:0f:5f:11:1a:46:c0:45:5f:67:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Validity
Not Before: Aug 27 08:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8c6881e2678eb69ca8852a9bfc1bd93d7aa6ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:a5:76:ae:0d:fb:70:d0:a9:f0:74:39:90:
84:c1:14:04:ed:e2:b4:2e:86:0a:69:0c:01:f4:14:
c8:03:fb:aa:59:0d:a1:ed:b4:2a:89:eb:08:fe:e2:
d9:10:25:32:8d:e0:bd:fa:0b:86:69:af:4f:e3:e8:
4b:f7:f1:c8:68:43:ee:6a:b7:41:4a:d6:c4:58:f5:
e5:9a:b8:fe:5a:8c:ea:eb:76:54:b1:b8:60:95:0f:
55:46:ee:5f:20:35:9d:c8:51:72:d9:bd:68:7b:54:
a2:30:33:94:3b:4e:ba:01:dd:c1:9e:d0:ac:bd:68:
b1:0b:92:2d:23:5c:fa:55:35:1e:fb:e9:99:15:c9:
ce:3d:23:b4:3f:cd:fa:af:38:c1:0c:e1:15:b4:c1:
28:ff:4b:fe:7c:f9:a5:14:aa:58:98:21:38:05:e5:
4b:d6:fb:f8:d5:a6:3d:1f:17:5e:af:18:62:6f:f6:
f7:4b:22:ea:df:aa:b9:4e:b4:11:ad:a5:cf:f2:30:
d7:55:56:9f:26:24:5a:63:d5:ec:f7:41:01:a9:db:
05:57:f5:94:ba:28:39:3b:8b:2f:d5:01:85:1f:d4:
a8:48:a8:60:e0:f2:d1:e9:5a:43:33:c3:79:12:8c:
d5:45:1d:5c:16:c4:83:9a:57:66:a8:e2:a8:d1:1e:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:88:1E:26:78:EB:69:CA:88:52:A9:BF:C1:BD:93:D7:AA:6E:C1
X509v3 Authority Key Identifier:
keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/1-MaIHiZ462nKiFKpv8G9k9eqbsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.136.0/22
IPv6:
2a0b:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
66:f2:93:5a:8a:c6:f9:9c:d9:33:49:dd:91:df:99:d8:61:55:
37:b9:7e:0e:1a:4b:aa:0c:ee:a7:e6:c3:ba:a0:a3:63:c4:67:
1a:a1:cb:f6:ab:90:8a:ee:85:11:1a:a5:75:f0:b3:f5:b2:6e:
d2:a5:8d:10:88:55:ba:97:c8:95:1f:7b:ef:cf:74:37:88:f3:
6d:eb:a0:ae:d8:98:9c:3c:89:62:6e:0d:d0:bd:c2:f4:7c:9b:
f9:eb:1e:31:ac:c4:df:a1:ff:c9:af:1b:63:09:90:02:e5:94:
58:c8:70:bb:11:c2:5b:40:a5:97:18:c7:b3:ef:de:ac:14:af:
79:20:39:3c:30:fb:07:33:a7:58:17:51:45:c8:b1:2a:4d:58:
f2:48:4f:45:5b:e2:91:30:e2:a4:52:49:81:73:94:8f:84:db:
b9:8e:83:e5:94:ae:5d:9e:ce:0f:b8:56:60:e8:6c:5e:30:28:
95:18:2f:90:75:92:d9:05:37:a8:10:5b:d0:c1:a0:c6:ad:82:
4c:e6:92:d4:8c:ca:7d:e1:5f:65:ae:0e:66:cb:db:8d:7b:25:
5e:45:51:63:91:e1:d3:68:91:6a:94:41:7c:00:2a:a1:2f:e8:
0c:88:7b:f9:4c:06:38:f6:1a:87:8d:75:0a:b6:30:5e:0a:6d:
8f:74:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:22 2023 by rpki-client on console-ams.rpki-client.org