Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/S4564WibWxbdFNScN-_Zny1hi04.roa
File: S4564WibWxbdFNScN-_Zny1hi04.roa (raw, json)
Hash identifier: K7zaTv6/qYP8gpDhFMS9zr+B4THrppo58fHGyEUtCi0=
Subject key identifier: 4B:8E:7A:E1:68:9B:5B:16:DD:14:D4:9C:37:EF:D9:9F:2D:61:8B:4E
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 05554486
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/S4564WibWxbdFNScN-_Zny1hi04.roa
Signing time: Sat 01 Jan 2022 14:54:36 +0000
ROA not before: Sat 01 Jan 2022 14:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43242
IP address blocks: 185.135.97.0/24 maxlen: 24
185.135.98.0/24 maxlen: 24
185.135.96.0/24 maxlen: 24
185.135.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89474182 (0x5554486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Jan 1 14:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b8e7ae1689b5b16dd14d49c37efd99f2d618b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:5e:f4:7b:62:13:1e:ec:01:2d:4b:61:08:
22:32:41:6e:49:d0:b4:ec:b5:85:d7:f0:f3:df:14:
eb:f3:5e:b3:87:38:dd:20:33:3c:76:29:79:48:43:
89:a8:e5:cd:a8:3c:66:df:9a:53:e7:02:2b:75:87:
32:e2:5b:40:f1:4a:e3:02:0c:9d:16:50:16:12:fe:
f1:ae:bf:70:a3:b5:4a:d0:06:b0:ce:c0:31:fd:b6:
8d:4c:91:9e:d2:04:bc:d3:8d:36:52:cd:16:84:59:
c1:0a:d4:52:24:11:3e:3b:f2:9e:34:82:8f:62:d0:
f3:35:b6:76:01:2c:e2:d4:48:10:99:b7:b6:ea:0b:
11:83:2a:38:ae:22:42:af:38:ca:cf:e9:f6:e9:fe:
95:69:73:0a:61:fe:51:c5:f0:6a:20:d5:51:2b:e3:
07:02:a4:9a:29:08:ac:a4:36:36:d2:a1:4e:f1:a1:
2d:79:a3:f3:68:9a:dc:a3:78:96:4f:65:98:b9:ce:
ce:83:18:2c:35:a4:ec:29:97:9a:ea:85:e4:ad:0a:
08:6c:cf:c2:fb:e3:93:fb:f9:2d:12:d2:8d:f6:60:
ea:8e:2b:cc:05:e2:f2:1d:aa:fc:91:c8:4c:07:74:
6a:6b:be:69:3b:02:c0:ac:a1:34:d3:2d:29:be:86:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8E:7A:E1:68:9B:5B:16:DD:14:D4:9C:37:EF:D9:9F:2D:61:8B:4E
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/S4564WibWxbdFNScN-_Zny1hi04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.96.0/22
Signature Algorithm: sha256WithRSAEncryption
67:7f:69:29:fa:7f:0d:1e:f8:15:69:0b:4b:84:b1:55:30:5e:
ea:18:c5:ec:c8:84:14:16:05:ed:72:1f:78:7f:bd:23:7e:c3:
97:a8:7d:e3:36:98:fa:d6:5b:15:9c:9e:a8:b7:88:8a:d5:da:
ce:77:3e:8a:df:9e:80:aa:5f:b9:ce:9b:17:b7:b3:e8:38:e0:
92:06:d7:6e:37:0b:e8:86:b6:1a:2e:ad:98:80:ee:d8:99:bf:
bf:26:ef:8d:84:97:4c:82:13:31:d7:fe:70:97:0e:d0:b8:a4:
32:f2:64:8d:ad:ec:30:e6:4f:ce:a8:4e:e4:b1:3c:97:0c:33:
10:9c:aa:6d:19:06:a2:a2:9b:ac:cf:fc:8a:1a:9d:bc:fc:f9:
f0:69:06:38:cd:b4:d6:dc:fe:45:13:ac:db:fa:27:69:45:ef:
2a:d7:59:80:5e:a9:da:eb:be:52:ec:2b:3a:c9:0c:e3:d6:9c:
ce:69:b4:3e:c2:81:9b:67:08:b1:87:3c:d3:68:62:ef:7d:e3:
08:8c:bc:c8:a5:ca:aa:18:ba:5a:d1:a3:60:22:96:6a:ce:da:
6b:2a:f3:72:31:66:de:88:fe:d1:aa:d4:a5:68:26:4d:6a:d1:
8f:db:61:f8:49:bb:28:8b:15:86:4e:56:d6:8b:64:c8:ec:b9:
9a:7b:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:43 2024 by rpki-client on console-fra.rpki-client.org