Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/CNHLjqPw543NynPIGyTpKM6Tk_I.roa
File: CNHLjqPw543NynPIGyTpKM6Tk_I.roa (raw, json)
Hash identifier: ylEtwJxuVzbD2DhPTjIFfKIPgQYV0F9zMMFXyhnL0ig=
Subject key identifier: 08:D1:CB:8E:A3:F0:E7:8D:CD:CA:73:C8:1B:24:E9:28:CE:93:93:F2
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0B21D742
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/CNHLjqPw543NynPIGyTpKM6Tk_I.roa
Signing time: Sat 01 Jan 2022 05:02:29 +0000
ROA not before: Sat 01 Jan 2022 05:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44244
IP address blocks: 85.185.38.0/24 maxlen: 24
85.185.36.0/22 maxlen: 22
85.185.36.0/24 maxlen: 24
85.185.37.0/24 maxlen: 24
85.185.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186767170 (0xb21d742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 1 05:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08d1cb8ea3f0e78dcdca73c81b24e928ce9393f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:7b:2b:b5:17:f4:10:79:e8:2c:f6:74:c1:
63:29:1e:68:1b:ef:c3:c8:57:92:43:3a:b9:1a:b5:
f9:4a:d2:86:68:7a:3b:54:55:08:bb:0f:2e:a0:2a:
2c:f9:c2:e9:aa:c9:63:70:3c:f1:e8:38:af:ab:52:
5a:15:1b:92:f2:19:19:f8:92:bd:86:cd:1a:3b:3d:
c1:82:ea:2d:78:e5:f7:76:66:5d:28:54:04:d4:30:
57:2a:ee:b5:9f:44:7c:5f:19:09:74:5c:ad:3f:d8:
9f:2b:16:47:c0:78:a1:a8:0e:5b:73:0e:e9:f5:94:
51:57:5e:c6:0f:4d:d6:b0:1b:64:fc:3f:13:1a:1f:
9a:84:e3:64:d5:ee:7f:9b:be:c1:7b:d2:82:bc:b5:
f4:c7:02:f4:78:26:74:44:a3:0f:91:4b:21:9b:4b:
96:41:cb:3b:bf:ad:17:b1:9e:cf:2e:bc:1e:1c:14:
30:c3:60:af:fd:f1:23:af:0e:18:f8:a5:b3:cb:90:
bf:42:ef:a4:47:6d:f1:14:d2:bc:96:df:0f:83:8c:
7f:93:9b:08:dd:f3:43:fb:a0:8f:45:b2:14:3a:bb:
e6:af:ca:15:e3:49:f6:7a:10:b2:4c:c0:fd:c6:c3:
25:71:e7:85:ba:99:23:eb:c1:e7:87:b7:09:22:1d:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:CB:8E:A3:F0:E7:8D:CD:CA:73:C8:1B:24:E9:28:CE:93:93:F2
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/CNHLjqPw543NynPIGyTpKM6Tk_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.185.36.0/22
Signature Algorithm: sha256WithRSAEncryption
29:a3:99:f2:de:9e:39:12:24:22:c4:2b:32:39:bb:23:e7:7c:
7f:7a:3a:38:4e:32:51:51:9d:90:fc:40:79:5b:e3:02:bb:dc:
96:f7:b9:1f:48:d5:1b:62:fb:9b:d3:bd:b6:b5:a9:23:e8:9e:
88:53:42:c9:3c:81:79:d3:f3:3f:cf:e2:e5:95:78:6d:2f:42:
13:4d:eb:df:b4:f1:86:f0:11:8f:c0:f7:96:cf:e5:01:16:66:
ce:96:0c:be:03:9b:44:db:13:22:9a:da:79:eb:1c:64:28:0f:
2c:01:00:7b:82:1e:1b:c7:3b:eb:b6:92:ab:c8:e8:e1:89:49:
fa:74:e8:2e:f6:36:88:78:f2:5d:1a:54:f8:b0:fe:33:a0:6a:
d4:6f:bc:92:fc:2b:96:8a:63:a8:f4:0b:d1:df:ed:57:ce:ff:
0d:1b:a9:dd:19:0e:49:5e:ea:53:35:c2:e7:18:5f:61:f9:8c:
c0:ba:e6:bc:ac:0a:d7:08:8e:d5:74:41:0c:26:94:a5:f1:1f:
28:d5:68:7e:80:38:09:6d:da:4a:01:b0:f1:89:bf:0d:be:d7:
f5:a0:11:17:f5:72:a4:10:b3:1a:37:5c:ad:63:6d:65:b9:3e:
ef:18:28:df:52:fa:71:e7:77:5d:d0:c5:15:ce:a6:a9:96:56:
5e:04:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org