Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/T0TbUOa3YrMGCf8YGoCpcXsslg0.roa
File: T0TbUOa3YrMGCf8YGoCpcXsslg0.roa (raw, json)
Hash identifier: SNUMW1AKQXIWYceHxHFBZnBezH1lFi4Ps4eYqZ0SZws=
Subject key identifier: 4F:44:DB:50:E6:B7:62:B3:06:09:FF:18:1A:80:A9:71:7B:2C:96:0D
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 07C1F459
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/T0TbUOa3YrMGCf8YGoCpcXsslg0.roa
Signing time: Wed 02 Feb 2022 13:20:55 +0000
ROA not before: Wed 02 Feb 2022 13:20:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203136
IP address blocks: 185.143.176.0/24 maxlen: 24
185.143.176.0/22 maxlen: 22
185.143.179.0/24 maxlen: 24
185.143.178.0/24 maxlen: 24
185.143.177.0/24 maxlen: 24
2a0e:2702::/32 maxlen: 32
2a0e:2700::/32 maxlen: 32
2a0e:2703::/32 maxlen: 32
2a0e:2701::/32 maxlen: 32
2a0e:2700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130151513 (0x7c1f459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Feb 2 13:20:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f44db50e6b762b30609ff181a80a9717b2c960d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:24:7c:9b:7c:70:ac:fa:88:a5:64:2f:06:45:
6b:db:66:eb:ec:1e:58:31:80:8b:06:c6:8f:1d:89:
ff:74:10:29:0c:e9:b3:36:af:54:b6:77:ed:2e:d8:
e8:d2:28:db:87:cc:eb:13:08:2b:72:47:ef:c6:7d:
30:60:af:35:de:1a:8e:da:aa:11:05:d7:ba:a6:ab:
08:96:87:c9:b7:22:fb:b2:48:d2:d7:b4:b4:68:73:
2b:d8:ae:45:31:d7:91:76:d3:c1:9e:30:5a:6f:a1:
20:99:0e:8b:35:4a:53:5f:8f:20:af:79:d7:ae:3a:
4b:f5:60:23:01:4f:92:02:64:b6:0b:6c:8c:5e:1b:
56:62:19:de:af:74:ca:ae:34:cb:5d:ae:91:47:0d:
07:e3:cd:aa:b8:95:49:a2:9f:b7:06:ef:b9:f9:01:
00:57:0c:72:53:35:02:86:f1:30:4c:70:85:3c:a6:
63:28:da:c7:02:62:dc:29:01:78:be:b9:5a:9d:97:
f6:2d:21:12:2d:7f:28:07:31:bb:62:3f:73:e9:15:
ad:21:ea:d4:21:87:01:9f:42:40:dd:d0:50:78:44:
f3:93:5d:c5:80:fa:fc:c3:9a:af:53:65:fb:9f:c8:
45:ca:54:19:17:91:8b:32:fb:6a:b5:41:67:f2:08:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:DB:50:E6:B7:62:B3:06:09:FF:18:1A:80:A9:71:7B:2C:96:0D
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/T0TbUOa3YrMGCf8YGoCpcXsslg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.176.0/22
IPv6:
2a0e:2700::/29
Signature Algorithm: sha256WithRSAEncryption
a4:2e:fa:08:bf:d8:ca:64:0f:2a:fa:fa:ca:70:04:29:25:0e:
69:c8:f0:9d:af:92:50:22:69:c8:eb:d3:2b:58:35:fb:5f:4d:
06:61:37:76:46:f5:91:f8:e0:64:1c:a7:e6:fd:d7:01:a9:58:
a5:48:60:71:c1:fe:e8:01:44:6a:f3:dc:ee:e6:20:bc:c7:33:
f3:88:37:3e:a2:08:36:9e:85:17:9b:5f:d9:b7:22:08:41:7c:
b0:5e:76:90:9a:21:58:e7:67:7b:20:ea:f3:d5:53:4f:03:c1:
34:e5:da:bf:5e:03:d0:44:dd:48:fc:f9:b0:9b:9b:00:94:f3:
0e:ad:01:f3:2a:ad:c9:8e:f1:2d:6c:4d:9c:7d:95:bf:a8:17:
45:84:5c:bd:cc:7f:4d:24:21:25:b5:af:49:ba:b3:2e:ee:c2:
3f:bd:b0:9e:a0:27:1e:80:a3:ae:94:fd:67:15:15:e6:30:dd:
fd:13:02:a0:2b:23:ba:a9:1d:b4:93:de:f5:4c:57:d8:59:c4:
24:7a:56:19:9f:c3:f1:32:cb:2c:cf:ff:be:39:c2:b9:f4:a5:
70:f1:f9:80:02:f2:9d:32:ca:90:77:24:3c:87:68:98:5d:f6:
8f:65:a2:29:dc:85:e6:d2:e8:3f:d4:24:65:e1:43:a2:04:1c:
77:18:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:32 2024 by rpki-client on console-ams.rpki-client.org