Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/rP1Zd6O3wvhUiB75zMPlMFOWjk4.roa
File: rP1Zd6O3wvhUiB75zMPlMFOWjk4.roa (raw, json)
Hash identifier: NiEB5ImIrdSl3sSxkajX0y09sZ05BNjfGdnRANlbbvk=
Subject key identifier: AC:FD:59:77:A3:B7:C2:F8:54:88:1E:F9:CC:C3:E5:30:53:96:8E:4E
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01688E
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/rP1Zd6O3wvhUiB75zMPlMFOWjk4.roa
Signing time: Wed 26 Jan 2022 08:33:03 +0000
ROA not before: Wed 26 Jan 2022 08:33:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201803
IP address blocks: 185.63.34.0/24 maxlen: 24
185.63.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92302 (0x1688e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jan 26 08:33:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acfd5977a3b7c2f854881ef9ccc3e53053968e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:ac:97:7e:73:48:ae:e5:24:b8:c1:69:f0:
32:ed:f6:9e:3d:2e:9a:09:d4:50:18:b6:2b:13:8f:
c4:63:a4:42:94:f8:97:2f:36:20:eb:c9:21:bf:b5:
ef:11:6b:68:7f:7c:d8:22:99:e6:88:7f:9f:ac:8a:
5b:0b:4e:9e:ca:46:8b:1d:f2:4f:14:62:a7:4e:f5:
40:e0:4e:5d:f7:9e:dc:84:c8:df:24:4f:5a:03:36:
98:87:90:76:fc:cb:4c:bf:66:31:c8:64:c6:d6:e1:
c5:9f:76:95:57:8d:2f:1a:68:1a:0c:54:ed:7d:27:
e6:e2:52:55:6a:05:56:7b:05:eb:75:f6:34:e6:3d:
8d:77:f5:85:01:23:c0:a1:40:5e:fd:bd:ef:5b:78:
57:83:5d:87:71:a4:68:73:ab:44:30:ca:d6:d9:3a:
59:58:ba:3e:5d:92:a2:cd:11:e1:a1:af:31:b7:c8:
2d:28:52:61:41:4a:f1:a4:4d:e9:50:54:a6:e5:54:
b1:89:b5:6f:d3:98:d9:99:02:fe:4b:76:63:21:d1:
a1:0a:b1:e2:e1:8a:d6:b8:c2:12:2d:46:4c:c4:20:
77:6f:30:f8:3d:2a:44:ef:9e:e4:19:3c:44:3e:39:
15:7d:50:ab:fc:32:ce:35:c5:fd:d0:17:2f:5a:8c:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:59:77:A3:B7:C2:F8:54:88:1E:F9:CC:C3:E5:30:53:96:8E:4E
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/rP1Zd6O3wvhUiB75zMPlMFOWjk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.32.0/24
185.63.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b7:1a:0b:05:7d:72:b9:d2:f9:14:8c:c2:bf:79:98:5e:da:
20:24:1b:61:9c:a5:54:6a:db:29:3a:01:94:79:a2:8f:4a:78:
dd:16:60:1f:f2:41:12:3f:48:a6:76:de:fc:96:25:8e:fa:86:
8d:b6:67:17:13:05:07:a6:cd:5f:02:60:82:63:cb:75:20:bc:
f1:61:17:2e:91:ca:35:f0:83:d1:5f:a1:57:d0:fb:ba:13:da:
dc:52:c8:ff:9b:a7:80:0f:8e:b1:c7:1e:b2:bc:4b:de:8d:37:
27:a5:cc:3c:f9:a6:41:a6:9b:98:29:17:15:fb:d4:ef:94:b3:
07:45:27:42:05:e7:65:ab:f2:79:9f:48:1e:9e:35:e9:b8:b0:
b3:51:ba:78:5d:09:b7:96:66:2d:05:3c:94:cc:8e:6d:38:6b:
52:3d:db:ee:8a:64:10:5f:a4:77:27:e4:02:62:82:15:34:57:
ae:9e:38:59:fb:41:15:d0:70:99:78:e5:01:ed:1f:4a:54:c5:
8e:58:5f:51:98:22:6b:9b:86:d6:b5:74:2a:37:5d:76:39:ac:
90:f5:c2:27:2b:d2:2f:2f:72:57:43:13:7e:a0:b4:6d:b3:86:
08:c8:9d:5d:37:5b:13:cb:0f:22:ec:ff:be:d3:ec:2b:6d:94:
17:98:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org