Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/43JgcF_-SVGTpEU_ZdzognUP92Q.roa
File: 43JgcF_-SVGTpEU_ZdzognUP92Q.roa (raw, json)
Hash identifier: 8h7xdQWrQFxV2fUHERq1s8MRn1uyyqFCqltf7yiCIEw=
Subject key identifier: E3:72:60:70:5F:FE:49:51:93:A4:45:3F:65:DC:E8:82:75:0F:F7:64
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 0F794410
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/43JgcF_-SVGTpEU_ZdzognUP92Q.roa
Signing time: Sat 01 Jan 2022 05:00:17 +0000
ROA not before: Sat 01 Jan 2022 05:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 185.197.165.0/24 maxlen: 24
185.197.166.0/24 maxlen: 24
185.197.167.0/24 maxlen: 24
2a0a:7bc7::/32 maxlen: 32
2a0a:7bc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259605520 (0xf794410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Jan 1 05:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e37260705ffe495193a4453f65dce882750ff764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:0d:76:93:4e:f1:96:ca:b6:94:44:a9:86:
a4:ef:1e:e9:f3:1a:11:1d:5f:16:49:22:b2:6b:44:
1d:78:50:45:51:49:b4:b6:7c:61:93:f8:9a:db:18:
36:8c:f6:c7:c1:1e:06:82:0f:fe:c4:34:db:6b:12:
a2:11:3d:57:8c:47:53:73:0c:be:b7:61:ce:a5:26:
0b:86:4f:b0:7b:ae:79:54:87:7a:38:a4:00:34:d3:
5d:55:2b:95:c8:a2:66:15:4c:86:70:d3:ad:b4:d1:
1b:2b:14:76:3e:06:83:b4:21:5e:f2:46:43:63:38:
af:d4:10:90:82:4c:40:e0:96:10:48:52:40:22:35:
48:75:31:1b:2a:38:cb:ec:41:0b:f4:16:0c:6f:3c:
66:63:c9:3d:2c:87:97:8a:cd:e1:0c:6e:7a:30:d7:
9b:80:7e:f0:f4:c1:73:bc:65:6c:51:d9:1f:e5:5c:
00:5e:95:8e:3a:a7:a6:55:ea:17:29:9b:8d:e1:9f:
8a:96:ff:6e:07:26:4c:27:f2:15:84:e5:66:74:99:
77:05:32:1e:e0:11:65:5a:4e:5a:d8:f8:20:8b:62:
40:f7:74:c5:a4:0d:23:8c:aa:7c:73:26:c3:5d:50:
4f:74:ed:01:33:6c:83:35:61:67:93:93:e2:70:89:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:72:60:70:5F:FE:49:51:93:A4:45:3F:65:DC:E8:82:75:0F:F7:64
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/43JgcF_-SVGTpEU_ZdzognUP92Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.165.0-185.197.167.255
IPv6:
2a0a:7bc0::/32
2a0a:7bc7::/32
Signature Algorithm: sha256WithRSAEncryption
be:f7:1c:3d:f5:62:80:ee:07:03:e3:db:ff:20:02:d0:3e:9d:
9f:94:20:90:87:60:ce:92:20:00:4a:3f:02:09:ee:90:98:cb:
30:ba:55:36:1e:f0:7d:86:c1:b9:dc:ca:c9:7e:94:38:d7:b1:
8f:e2:47:58:c6:ba:a4:5e:22:af:33:23:a7:b1:d9:af:e7:94:
48:bb:43:53:2a:29:bf:96:af:3e:d3:7b:d1:49:38:a8:a3:4b:
60:01:7e:ab:7f:ad:aa:77:18:5b:95:c5:94:b7:7c:35:2c:eb:
1f:a4:14:7e:75:7f:97:77:d6:fb:65:8e:a2:32:b1:da:6d:36:
75:39:7b:1c:a0:07:2e:c7:03:a7:9d:f9:f9:ba:99:f5:98:00:
6c:99:77:93:b4:3a:f3:e1:cf:9f:61:13:85:b5:cd:f3:df:20:
ea:6b:53:8b:ef:af:c3:c0:b4:36:71:58:e4:0e:2e:1c:0c:29:
20:47:fe:df:f8:3e:45:40:45:e8:7d:00:e9:3a:1c:de:9f:14:
24:29:08:29:4f:58:32:88:2b:ea:6b:5d:e0:e6:aa:71:ea:4e:
20:98:2b:8a:1e:2d:e9:fa:a2:9f:c8:26:e8:82:ae:f8:35:bd:
bd:18:9c:28:89:6f:fe:92:68:d5:c6:71:09:0e:cc:78:b3:84:
3c:82:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:07 2023 by rpki-client on console-ams.rpki-client.org