Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/DQVsr3cvyKySvQQjY0WZJ6BmjvM.roa
File: DQVsr3cvyKySvQQjY0WZJ6BmjvM.roa (raw, json)
Hash identifier: Uno7szx2QS+T6pGq+Icee4zq6NRLJBTO7tmTRBh5zmI=
Subject key identifier: 0D:05:6C:AF:77:2F:C8:AC:92:BD:04:23:63:45:99:27:A0:66:8E:F3
Certificate issuer: /CN=0f47ec73bceecedd541efb73525d61232fa80219
Certificate serial: 19A9AD52
Authority key identifier: 0F:47:EC:73:BC:EE:CE:DD:54:1E:FB:73:52:5D:61:23:2F:A8:02:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fsc7zuzt1UHvtzUl1hIy-oAhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/DQVsr3cvyKySvQQjY0WZJ6BmjvM.roa
Signing time: Sat 01 Jan 2022 07:03:23 +0000
ROA not before: Sat 01 Jan 2022 07:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6799
IP address blocks: 185.44.144.0/22 maxlen: 22
178.146.0.0/16 maxlen: 16
178.146.0.0/15 maxlen: 15
178.147.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430550354 (0x19a9ad52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47ec73bceecedd541efb73525d61232fa80219
Validity
Not Before: Jan 1 07:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d056caf772fc8ac92bd042363459927a0668ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:bc:4f:26:ca:b0:6e:05:e6:a5:ba:a0:6b:
9d:67:85:d3:d0:c6:f7:d3:28:c0:81:c0:39:ef:11:
ce:1c:3b:5a:20:53:3c:a5:1d:27:54:1e:9b:3a:e3:
b7:43:6d:ba:a3:3b:87:31:41:87:e1:3e:58:73:11:
89:bd:52:ab:93:66:5e:69:ef:28:75:a1:e4:08:cf:
ed:67:fe:10:cb:26:07:a0:4d:1c:37:22:de:15:45:
8c:e0:1f:8d:ff:5d:af:71:5c:55:78:68:1d:39:6d:
48:c0:c4:24:d8:a4:2d:c1:46:03:ba:2d:24:1a:f6:
f7:e5:09:ae:84:99:ba:a3:d9:75:a8:0a:77:66:ca:
35:49:92:aa:b0:49:b5:2f:7f:63:cf:f6:4f:c5:b3:
9c:e2:ad:c4:4f:8d:22:06:13:86:55:c1:c5:7b:76:
7b:49:2e:04:3c:71:fe:a2:7e:1f:a1:36:9d:68:9c:
af:20:09:9f:ad:77:88:e8:dd:a0:36:49:b7:c1:e0:
9a:76:a8:6e:89:36:91:6b:1e:56:f6:e2:9d:66:33:
43:d1:b8:0f:7b:62:20:f7:3b:16:8e:e0:ea:77:77:
2f:16:2b:80:5a:cc:31:74:ea:97:0d:8e:78:dc:3b:
96:21:90:d8:7c:7d:e9:37:5a:16:d2:db:2f:f8:7b:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:05:6C:AF:77:2F:C8:AC:92:BD:04:23:63:45:99:27:A0:66:8E:F3
X509v3 Authority Key Identifier:
keyid:0F:47:EC:73:BC:EE:CE:DD:54:1E:FB:73:52:5D:61:23:2F:A8:02:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fsc7zuzt1UHvtzUl1hIy-oAhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/DQVsr3cvyKySvQQjY0WZJ6BmjvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/D0fsc7zuzt1UHvtzUl1hIy-oAhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.146.0.0/15
185.44.144.0/22
Signature Algorithm: sha256WithRSAEncryption
17:13:fb:d4:1f:90:9d:3f:d4:39:b7:48:5b:be:c0:f5:55:9c:
c9:14:b4:37:76:be:4e:e7:90:cb:32:78:61:1b:c6:e7:bc:b0:
46:d0:ee:fa:af:1c:00:97:35:db:4a:6d:b5:49:17:d2:b0:f3:
49:59:d6:0e:4d:bc:c2:b9:4f:7a:fd:84:a5:c1:6d:ae:2f:5f:
e2:49:bc:2d:31:99:f1:f2:5c:c7:df:af:90:9e:16:52:d9:58:
fc:52:b0:82:fb:f1:ec:45:3d:e9:5c:9a:08:29:8f:b1:82:d6:
6c:68:4e:d2:82:85:89:0b:c4:61:60:b2:3f:b4:35:64:e4:77:
c8:8f:89:ce:e6:b4:24:f2:30:61:29:7d:00:5d:37:6e:33:2f:
34:d8:b6:47:81:f8:2a:04:61:12:f7:79:5b:59:7d:59:54:08:
ed:fc:b6:0d:be:8b:d6:21:4e:45:6b:37:53:31:7a:f5:1a:35:
72:ba:5a:f0:e6:7f:c8:e5:47:30:bb:ef:b3:88:31:0b:ba:6e:
c3:4b:44:3d:ed:49:84:d0:e9:a2:00:74:4f:77:9a:52:a5:cb:
d9:e6:12:ff:1e:4a:89:eb:ed:aa:05:e4:4e:d0:8f:33:0c:54:
47:b5:fb:89:96:a5:66:67:01:50:0f:d8:99:f4:a8:8c:7e:7f:
2b:39:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:42 2023 by rpki-client on console-ams.rpki-client.org