Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/2D3wmrdWpoQP5jYO8h4QrSRpXPY.roa
File: 2D3wmrdWpoQP5jYO8h4QrSRpXPY.roa (raw, json)
Hash identifier: eFMd9m1WJh+cW00IWRNI+LkeTpcQzqImHR4xXwTeJxA=
Subject key identifier: D8:3D:F0:9A:B7:56:A6:84:0F:E6:36:0E:F2:1E:10:AD:24:69:5C:F6
Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial: 0FC47563
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/2D3wmrdWpoQP5jYO8h4QrSRpXPY.roa
Signing time: Sat 01 Jan 2022 15:57:17 +0000
ROA not before: Sat 01 Jan 2022 15:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206471
IP address blocks: 185.185.172.0/24 maxlen: 24
185.185.173.0/24 maxlen: 24
185.185.175.0/24 maxlen: 24
185.185.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264533347 (0xfc47563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Validity
Not Before: Jan 1 15:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d83df09ab756a6840fe6360ef21e10ad24695cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:72:83:8a:92:57:b7:be:f1:75:e7:e1:43:
e1:41:c7:93:d2:c6:fc:c1:cb:96:45:08:35:17:8a:
98:c0:79:a9:37:45:d3:73:18:ae:df:03:32:1f:af:
69:3c:9e:ce:5c:98:bd:b6:64:86:16:d5:2d:69:6e:
94:bc:c4:73:29:8a:23:26:26:17:81:fc:fb:a4:1f:
f5:f7:92:8b:9a:4a:48:48:82:6b:df:4a:07:66:fa:
a6:f7:af:54:f0:d5:73:03:6d:9c:32:ae:08:dd:9e:
85:87:92:7b:d6:e6:a3:7c:dc:23:8e:90:58:60:91:
fd:af:35:5f:e1:6b:a0:29:65:4c:29:ad:93:b1:8a:
83:d1:ee:3c:36:1b:fc:1b:4b:31:65:55:1a:34:23:
4e:15:2d:18:3b:e3:b6:99:9c:61:5d:e0:35:4f:de:
c3:7c:b6:7a:55:9d:36:7c:bd:e4:3c:70:b6:14:1c:
1c:f6:da:9b:e2:02:de:14:0a:7b:59:be:cd:51:35:
6b:32:ce:1e:33:af:18:06:ae:9e:7a:02:76:0b:dc:
a0:23:67:dd:7b:4a:64:4a:01:cb:26:79:ec:d2:6f:
43:b5:b5:c0:28:47:22:9b:30:dc:a1:48:2e:36:b9:
8b:7e:73:7b:3f:5e:1e:94:a1:c0:f1:75:86:95:00:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3D:F0:9A:B7:56:A6:84:0F:E6:36:0E:F2:1E:10:AD:24:69:5C:F6
X509v3 Authority Key Identifier:
keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/2D3wmrdWpoQP5jYO8h4QrSRpXPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.172.0/22
Signature Algorithm: sha256WithRSAEncryption
11:8e:a7:8e:e5:12:b0:76:cc:33:f6:0d:ce:1c:e6:15:fe:7e:
0a:e0:a6:cf:57:e4:b7:8d:73:ca:62:35:a9:aa:ef:16:2c:e9:
2d:eb:f8:e4:c8:50:36:bf:d3:fd:93:13:cc:db:cf:83:e0:2d:
c6:8b:1b:14:e2:1e:1d:b8:69:fa:b8:d6:39:b0:20:23:a0:8b:
ce:99:a4:74:b8:37:75:c0:81:83:27:5e:10:51:6c:9b:cf:3a:
b1:60:9b:8e:77:6d:9a:1e:86:8b:2c:a4:4b:7f:fb:5d:06:e8:
3d:55:b6:17:88:1e:78:89:6d:31:13:70:ff:b8:bd:67:0c:f2:
de:31:1e:b9:78:ae:6e:20:f5:82:e7:44:f8:e4:a3:98:47:29:
c2:a8:87:37:56:94:2d:18:79:cd:eb:2c:17:d5:24:82:33:f5:
4f:da:d2:42:43:65:79:b5:4e:fb:0a:4e:6b:b0:7e:5e:2f:90:
7e:2c:ff:bb:c4:53:cb:e4:f8:e1:3c:c9:34:b1:d8:74:b1:88:
ef:43:c9:bb:00:f3:3e:18:82:7c:80:80:89:3e:57:a0:ff:59:
d7:8c:01:82:d9:72:6e:c4:ec:b8:51:ec:e7:86:63:e3:0f:31:
49:6b:9f:7a:08:e8:5a:35:2e:d4:a7:77:5f:93:a6:c9:f3:10:
a1:03:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org