Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/PsQaqedNWZM_orzHVdOkq95dxbM.roa
File: PsQaqedNWZM_orzHVdOkq95dxbM.roa (raw, json)
Hash identifier: ZJK16wBoR9vhqJzL02+BlfQ/cAPnYBGL04iwxxsf5yE=
Subject key identifier: 3E:C4:1A:A9:E7:4D:59:93:3F:A2:BC:C7:55:D3:A4:AB:DE:5D:C5:B3
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 2DE261
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/PsQaqedNWZM_orzHVdOkq95dxbM.roa
Signing time: Sat 01 Jan 2022 02:59:50 +0000
ROA not before: Sat 01 Jan 2022 02:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60111
IP address blocks: 185.183.40.0/22 maxlen: 22
2a0b:380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007073 (0x2de261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Jan 1 02:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ec41aa9e74d59933fa2bcc755d3a4abde5dc5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:85:91:3d:72:8a:18:1e:e2:10:8d:6a:0a:
d7:84:a2:26:ec:03:99:9b:03:64:d0:c2:11:a4:bf:
c1:42:1b:dd:89:bb:55:a0:4b:17:d8:5b:b5:10:6d:
74:21:a5:7e:3b:a8:45:e4:13:c0:bc:f8:a6:21:58:
fc:74:5d:72:7e:d1:e6:1d:ca:ac:7f:8f:da:8f:22:
66:ff:2e:d7:af:54:ee:07:69:a5:b0:aa:17:01:1b:
c9:ad:d0:7a:de:74:8d:59:d3:6a:b5:05:d1:d2:56:
ca:6d:98:6e:0b:94:84:03:8e:b5:48:f9:df:cf:4f:
d6:17:55:71:0d:e9:fc:ce:e8:9d:24:77:81:1a:4e:
3e:75:0d:db:a6:96:c9:03:34:d8:11:7c:06:2b:03:
4d:8a:75:55:ed:88:1a:53:3c:d2:3e:fa:70:77:fc:
a3:a7:f3:2c:12:da:9c:86:f1:19:1e:07:fb:55:28:
fa:d8:4b:9e:fb:57:16:c4:39:84:0a:bc:e8:6d:fd:
7d:eb:4f:dc:94:df:da:45:93:c1:e6:30:39:b0:e0:
0e:94:c2:91:c0:e1:3c:f0:59:6f:2b:c6:8b:b1:97:
ba:7d:06:df:c7:56:b2:03:a5:97:cb:0f:2b:9c:71:
dc:08:09:a4:f6:e0:d1:fe:b8:16:78:7b:88:d4:e1:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:1A:A9:E7:4D:59:93:3F:A2:BC:C7:55:D3:A4:AB:DE:5D:C5:B3
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/PsQaqedNWZM_orzHVdOkq95dxbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.40.0/22
IPv6:
2a0b:380::/29
Signature Algorithm: sha256WithRSAEncryption
42:51:4d:47:05:4b:73:3b:27:d6:cc:3e:8c:cd:03:84:e2:ac:
c0:7c:ad:23:d2:6c:82:9f:7f:8e:a1:e6:c2:0f:8a:1f:05:91:
dd:00:c8:27:d9:36:45:64:21:d1:77:24:05:67:3d:e0:39:0e:
5f:b3:bb:25:7d:82:6b:bf:b9:2f:db:6a:a1:8f:93:36:dc:de:
84:09:6d:c8:4a:28:85:80:99:1a:3f:4f:a9:bc:23:21:c2:85:
d0:14:28:dc:67:c5:05:fc:bc:54:e7:14:71:fe:80:82:9a:66:
7c:93:be:2c:c4:f2:71:3d:5a:03:da:7d:a6:f8:d6:0a:fe:43:
97:68:b8:d9:d3:55:8f:15:5b:f0:6d:d2:cf:39:ee:86:a8:b5:
de:13:24:8a:77:bf:3c:72:04:bc:36:d9:6f:89:1c:60:37:52:
e2:91:73:55:ef:c4:f1:a8:d8:27:3c:f9:1c:bc:c0:8c:96:c0:
b7:16:55:87:4d:c8:0a:14:93:0d:3b:28:2e:10:d6:48:22:34:
b8:07:2c:55:6e:d8:6e:02:85:d9:fd:63:b5:91:7c:c8:3a:e0:
6a:ac:2e:1f:4f:cd:ea:64:64:27:6c:29:d1:19:10:ab:3f:52:
6a:86:61:0d:1d:58:8a:7e:46:df:94:43:23:91:b8:c4:aa:3d:
de:1e:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:58 2024 by rpki-client on console-ams.rpki-client.org