Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/wI38xZMy4l2QHh-ms2RQSNlnZss.roa
File: wI38xZMy4l2QHh-ms2RQSNlnZss.roa (raw, json)
Hash identifier: 5zp3ZFToBxYswOGW8UZC6m81MhcCRSylig5FaOCA9ag=
Subject key identifier: C0:8D:FC:C5:93:32:E2:5D:90:1E:1F:A6:B3:64:50:48:D9:67:66:CB
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 08B0AC
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/wI38xZMy4l2QHh-ms2RQSNlnZss.roa
Signing time: Mon 28 Feb 2022 19:48:44 +0000
ROA not before: Mon 28 Feb 2022 19:48:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.122.0/24 maxlen: 24
185.164.121.0/24 maxlen: 24
185.221.96.0/24 maxlen: 24
185.221.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569516 (0x8b0ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Feb 28 19:48:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c08dfcc59332e25d901e1fa6b3645048d96766cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:b5:07:c7:c4:61:1b:3a:d3:b3:68:d8:f5:
34:00:81:37:c0:b8:7f:2a:c0:2b:7b:eb:6e:87:3e:
10:45:51:63:ba:ae:17:0b:6a:10:c4:cd:fb:d1:1a:
07:48:1f:f1:2d:f9:72:27:4f:bd:43:cf:8e:eb:6a:
ef:c2:1d:b1:1d:05:aa:c7:19:fa:3e:4f:29:43:9c:
e9:4f:a5:32:51:67:d1:7f:1b:c7:71:a3:77:9e:f1:
40:fc:cc:29:f4:41:c9:8f:c4:51:bf:74:82:3e:20:
09:d7:95:e1:c5:93:68:85:30:83:5e:fd:b7:c2:95:
58:af:16:df:9e:8a:b7:e9:1d:6c:84:52:39:d7:93:
2a:90:e5:79:2f:d2:fb:c0:72:70:60:bc:81:fa:e6:
3a:fa:99:a9:66:30:6e:8b:af:4e:cb:19:08:3f:5e:
8a:1e:9c:fd:38:44:6f:5f:f3:dd:bb:a5:1a:9a:30:
c4:b2:47:a5:a1:63:44:d8:35:95:2f:44:dd:fb:26:
64:db:39:39:d0:38:7a:3c:a7:95:07:8b:06:3e:b3:
62:1d:a1:14:f7:09:30:0e:43:1b:53:f2:40:5d:9d:
e2:1e:8e:b4:90:9a:17:b0:ea:9a:87:a3:e0:2d:b7:
d4:08:9e:67:29:b0:52:be:d4:2c:49:bd:ad:a8:89:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8D:FC:C5:93:32:E2:5D:90:1E:1F:A6:B3:64:50:48:D9:67:66:CB
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/wI38xZMy4l2QHh-ms2RQSNlnZss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.121.0-185.164.122.255
185.221.96.0/24
185.221.99.0/24
Signature Algorithm: sha256WithRSAEncryption
10:df:36:cc:19:0e:5e:52:98:f1:b6:10:f7:8b:f1:ad:e1:48:
a6:8b:6c:2e:62:81:82:a4:ee:47:e2:93:bc:61:fb:53:32:de:
ff:68:27:74:80:cf:49:f5:3d:d2:7e:b6:bf:f4:a4:a5:b5:55:
c2:c5:b4:a4:5d:13:61:19:61:6d:f5:f1:c7:0e:61:ea:a1:00:
d5:3f:27:78:b0:9c:3f:7a:af:fc:26:9b:63:c1:3e:18:25:8c:
53:4b:48:a4:3c:cd:91:ad:d4:d7:d0:93:1c:c9:07:76:40:3b:
a2:56:eb:c3:44:9e:2c:77:43:b6:6e:f3:13:4a:c3:3a:e1:07:
13:6b:91:12:89:c2:de:1a:a9:6b:02:40:4b:b9:c9:5a:90:fe:
4c:8f:1a:43:37:57:1f:5c:77:51:5a:81:e0:51:98:5a:04:d6:
75:6b:7a:19:d5:a7:46:40:e5:0b:c2:c2:0d:a6:d7:8a:ed:73:
14:28:66:56:2f:b5:f0:ff:7d:36:fa:c7:79:c6:7d:77:31:82:
42:60:50:49:95:af:9f:e3:4f:ad:2d:5f:82:1b:21:6b:aa:12:
6b:74:b8:2b:ab:50:ea:45:7b:30:33:38:31:a4:15:43:b4:a7:
ab:9a:51:b4:73:f6:f3:c0:30:6f:ca:6b:8e:92:25:ca:26:23:
57:e5:b1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org