Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/19Dihl9ZfdjjebYpVp1sjfeEJzM.roa
File: 19Dihl9ZfdjjebYpVp1sjfeEJzM.roa (raw, json)
Hash identifier: j+EgeF/i19kuxyCM2+rlZYMOMQ411TZAzAmP9BUwuKI=
Subject key identifier: D7:D0:E2:86:5F:59:7D:D8:E3:79:B6:29:56:9D:6C:8D:F7:84:27:33
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 069DEA4A
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/19Dihl9ZfdjjebYpVp1sjfeEJzM.roa
Signing time: Sat 01 Jan 2022 11:00:02 +0000
ROA not before: Sat 01 Jan 2022 11:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49188
IP address blocks: 185.163.245.0/24 maxlen: 24
185.163.246.0/23 maxlen: 23
185.163.246.0/24 maxlen: 24
185.163.244.0/24 maxlen: 24
185.163.244.0/22 maxlen: 22
2a10:9d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111012426 (0x69dea4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Jan 1 11:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7d0e2865f597dd8e379b629569d6c8df7842733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:0e:fd:6b:0d:00:ce:cb:25:f3:f6:04:78:
ff:0d:f2:88:07:ae:52:3c:6b:42:ca:91:00:9a:ea:
c4:44:4f:09:95:b2:10:4d:eb:3f:28:54:c4:a3:51:
d2:ee:1f:fe:f0:37:8c:89:57:41:35:15:c6:92:92:
75:1b:c2:0a:7b:15:25:a2:bf:c6:6a:e0:46:5d:de:
30:2d:2e:d1:a5:70:b6:66:15:e8:9c:df:fd:16:bf:
44:a8:8f:a5:92:3e:04:1e:fe:39:c3:10:2d:29:d7:
9f:ba:ac:21:df:72:b5:00:51:41:26:75:4e:5b:7e:
62:20:c3:9b:0e:3f:49:42:0e:d3:8f:12:e0:62:e6:
94:e3:48:e2:4a:01:24:4e:e0:96:de:98:46:cf:27:
de:d4:bf:e4:79:e1:21:94:f5:75:7c:fd:87:f6:17:
04:38:57:a1:e1:51:00:c3:24:ed:99:50:84:0e:bd:
28:b4:78:dd:7e:82:f1:53:03:65:96:d5:46:0a:e6:
5f:a4:1b:e5:a9:55:e4:60:c1:64:09:d1:40:32:57:
a0:ea:28:3b:05:46:95:c1:40:92:48:18:06:9d:73:
b4:3d:24:f8:93:49:8b:84:78:ec:cd:68:bd:c2:f6:
1f:b2:8c:6e:23:7f:9b:61:4d:d1:ee:af:55:04:23:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:E2:86:5F:59:7D:D8:E3:79:B6:29:56:9D:6C:8D:F7:84:27:33
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/19Dihl9ZfdjjebYpVp1sjfeEJzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.244.0/22
IPv6:
2a10:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
06:d2:be:58:51:98:3e:3f:84:d2:c0:82:06:4c:74:25:ef:10:
24:84:50:a1:9c:16:d9:58:1b:1e:a2:e4:0f:a9:1e:d3:9d:a0:
5a:83:19:34:bd:ae:49:82:b4:b3:17:5b:76:28:2a:6a:10:06:
51:62:67:bc:4d:4a:db:82:14:55:ac:fa:ee:f8:d3:a3:3a:9d:
4b:89:79:9f:ce:8b:7c:5b:34:81:ea:24:a0:cb:48:de:1e:07:
a5:d4:dc:e3:47:c6:46:fd:8e:1f:2b:15:06:5d:72:e3:a9:b4:
09:06:38:b7:88:67:db:61:6f:fc:f1:75:23:52:b0:7a:da:58:
f7:cf:2c:f9:d8:71:3c:12:22:b7:9a:73:9a:38:f8:23:47:3a:
fa:f6:22:8a:70:a6:49:64:ec:2d:00:d9:9a:4d:dc:e7:2c:f7:
7a:84:41:89:77:25:95:22:53:22:62:c7:6e:ff:bb:0e:0a:f4:
b1:d2:09:a5:08:61:a0:9a:e9:16:09:e0:51:3e:75:2c:8e:29:
25:e3:6f:df:d0:2c:11:31:44:ee:aa:a3:87:37:11:df:d3:85:
98:69:ea:d7:b0:63:be:38:1e:97:eb:f8:33:66:87:84:68:4a:
ba:58:22:90:a0:26:90:b7:44:a0:c2:04:63:65:3c:58:de:35:
7e:6f:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:27 2024 by rpki-client on console-ams.rpki-client.org