Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/wMcQu2kZszhUOfWWpyY-yUJzZBQ.roa
File: wMcQu2kZszhUOfWWpyY-yUJzZBQ.roa (raw, json)
Hash identifier: nUB3EYXPcOTPXPR2qaLfCsHDTTmxfqO+oW3eK5G1Ahg=
Subject key identifier: C0:C7:10:BB:69:19:B3:38:54:39:F5:96:A7:26:3E:C9:42:73:64:14
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 041972FE
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/wMcQu2kZszhUOfWWpyY-yUJzZBQ.roa
Signing time: Fri 25 Feb 2022 17:04:16 +0000
ROA not before: Fri 25 Feb 2022 17:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202391
IP address blocks: 185.42.24.0/24 maxlen: 24
185.42.27.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.42.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68776702 (0x41972fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Feb 25 17:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0c710bb6919b3385439f596a7263ec942736414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:64:06:af:aa:83:2c:e8:e1:5c:2a:97:97:
72:29:47:b3:8f:41:1b:f3:46:a0:34:6d:4d:8b:b9:
ee:0b:e7:2c:5b:ba:48:e4:d8:c0:cf:1e:81:e2:ec:
df:5e:53:92:22:46:1d:95:c3:98:58:c7:e0:ff:eb:
54:bf:cb:34:8d:c6:d3:3c:2e:45:85:9e:ea:1b:98:
ea:79:29:40:da:c9:ba:fb:f5:b6:89:68:1f:e2:7c:
48:43:0b:d5:d8:e1:7c:39:3d:36:e6:a4:9b:9a:3d:
92:a1:71:bd:50:df:00:26:96:23:b1:fc:73:33:8c:
73:43:1e:cc:75:3b:0f:ca:28:a2:dc:4c:4f:42:5b:
85:99:7c:2c:26:26:3f:5f:64:fb:8f:c8:8e:ab:55:
98:3d:23:7e:c0:22:98:fc:b4:a6:72:82:5f:7a:c4:
56:0f:c0:04:d2:eb:6a:c0:ec:8a:44:40:4d:5a:6f:
ac:9f:ab:66:2e:78:8e:33:4e:55:1d:ef:e6:7f:de:
a0:c6:4f:0a:a1:6e:38:6b:04:20:92:1e:1e:41:18:
c3:34:62:f1:4a:21:0f:e4:e2:ed:87:2a:f1:c8:50:
de:99:fe:fd:44:2c:a5:1e:50:55:e9:bc:82:67:c7:
e2:e0:bd:af:8c:42:23:9a:90:9e:84:d0:fa:1f:67:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C7:10:BB:69:19:B3:38:54:39:F5:96:A7:26:3E:C9:42:73:64:14
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/wMcQu2kZszhUOfWWpyY-yUJzZBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0/22
Signature Algorithm: sha256WithRSAEncryption
39:be:7c:9a:e6:49:d6:19:55:10:ac:32:20:bf:44:43:a9:76:
ae:a0:3a:28:5c:bd:08:46:4b:a9:de:ad:ec:74:a5:7d:c5:f9:
48:af:22:d6:71:c7:73:2d:15:c7:a9:0a:4d:b8:d8:95:ef:05:
7b:75:96:e2:61:43:f9:81:ec:72:a6:ce:67:7e:4e:5e:2a:a7:
94:5e:53:05:ad:20:48:79:c8:14:11:ba:f4:96:10:1c:8c:95:
8f:ad:06:01:e1:87:cd:0e:05:7e:86:06:30:d1:f1:62:9f:ce:
9f:ee:79:7c:c8:54:ec:66:44:56:dd:58:8f:63:37:6c:ad:d9:
b1:7b:1b:82:22:d2:47:6e:e2:c3:60:1e:30:5a:53:05:cc:db:
2b:74:ee:27:73:88:cf:6b:ea:ca:ed:f7:51:70:db:78:e3:05:
06:12:1b:4c:79:6c:44:99:8d:6e:39:ad:3c:42:5b:94:2b:58:
ec:37:ab:34:1a:77:8f:9f:f8:c5:a5:68:48:a8:df:fb:a4:d8:
9e:42:24:89:54:08:2e:68:e4:45:38:af:e3:38:36:66:d6:01:
b5:bb:4c:e0:60:35:a5:2d:82:4d:14:6e:22:9a:61:1c:a3:2e:
bf:aa:eb:69:17:95:c5:57:c5:25:6e:54:d3:18:cd:67:89:41:
ae:61:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org