Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/SmpdZLm5wckxqwCMFiomhbI3vfQ.roa
File: SmpdZLm5wckxqwCMFiomhbI3vfQ.roa (raw, json)
Hash identifier: I+AxzevtRny5H7D8SBqb3I99E7S+LOAzfJI2svB8TNw=
Subject key identifier: 4A:6A:5D:64:B9:B9:C1:C9:31:AB:00:8C:16:2A:26:85:B2:37:BD:F4
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0A793898
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/SmpdZLm5wckxqwCMFiomhbI3vfQ.roa
Signing time: Sat 01 Jan 2022 15:55:47 +0000
ROA not before: Sat 01 Jan 2022 15:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34766
IP address blocks: 185.214.24.0/22 maxlen: 22
2a0b:9440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175716504 (0xa793898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Jan 1 15:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a6a5d64b9b9c1c931ab008c162a2685b237bdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:1f:02:02:e4:45:d0:85:f7:3e:90:11:b2:
ec:dd:1b:31:ad:15:7d:24:c3:8d:bc:bd:fb:8d:cd:
9d:7e:f4:58:6b:c9:59:30:7f:6e:dc:56:fd:89:df:
0d:a3:2d:ed:b8:67:3f:01:ea:df:bb:37:bd:cb:fa:
69:51:05:15:4c:d4:76:de:43:42:7d:9c:b4:20:4c:
ff:a7:8b:1f:fe:c8:8f:a7:bc:60:d8:b1:82:e6:9f:
a4:cb:04:fb:dc:71:41:22:8b:0d:9a:0c:89:85:7b:
94:61:16:ec:dd:b3:6f:d7:55:b2:d2:47:20:2d:07:
f1:ca:e9:3a:a4:cb:92:b0:0d:9e:82:d0:7f:a0:b2:
5e:e0:f5:db:7c:7f:3d:57:06:61:35:28:b1:20:f9:
f1:5f:d2:e8:c3:6f:d5:fe:48:7b:73:09:24:f2:71:
cb:23:bf:e9:08:c8:03:14:3b:09:c9:72:82:08:2d:
a4:7c:c8:0e:05:5f:65:38:b6:ce:e0:65:96:02:3b:
8e:4e:f4:ee:62:66:ec:d7:0b:63:71:c3:09:51:88:
82:13:26:8d:5e:67:3c:01:2c:e4:cf:5e:e8:2f:10:
b9:90:4b:37:57:96:27:19:3d:7c:1b:11:7a:62:37:
e7:3a:1e:f7:3b:da:6e:2c:2d:46:2f:ee:02:30:fa:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:5D:64:B9:B9:C1:C9:31:AB:00:8C:16:2A:26:85:B2:37:BD:F4
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/SmpdZLm5wckxqwCMFiomhbI3vfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.24.0/22
IPv6:
2a0b:9440::/29
Signature Algorithm: sha256WithRSAEncryption
0d:bf:be:62:6d:9f:3f:b7:1f:73:56:cd:aa:6a:ae:90:e6:d1:
22:8b:14:a5:91:09:05:03:f3:58:42:9a:f6:e1:75:1c:ec:90:
f4:7b:5e:87:a5:66:da:3e:1b:12:89:b7:a1:55:eb:6f:6c:d3:
e5:9e:67:e1:62:1b:d4:48:fa:bf:1a:db:62:78:ae:72:89:c9:
c9:54:73:ef:b8:51:28:47:f2:5d:9c:7d:7d:09:98:22:f4:0b:
2e:46:2b:34:f4:c0:f5:fe:5f:82:6a:2b:84:32:44:68:73:c3:
9f:a2:3e:71:6a:bb:cd:28:3a:de:27:01:23:5d:5d:df:0d:b7:
59:24:75:ba:ac:b8:26:c3:2b:85:5c:29:56:f2:a3:f5:bf:12:
07:d3:25:e1:a2:ad:98:47:cd:51:77:fc:06:a6:88:93:b3:8d:
4f:78:17:0d:93:1b:69:c0:e7:cd:a7:05:18:e9:f2:20:78:75:
52:b1:4b:4c:9a:28:5f:16:b5:30:38:50:c7:ce:77:3f:dd:cc:
d4:87:1a:5f:92:09:0f:e1:eb:1c:02:af:de:a4:ed:5d:99:b4:
bc:9f:d5:21:fb:60:52:c0:e3:12:fa:c0:c3:8b:61:02:4f:00:
12:fe:9a:d4:33:93:c4:d9:fe:f9:b3:33:15:65:08:23:52:8a:
5a:ee:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:30 2024 by rpki-client on console-ams.rpki-client.org