Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/0WajB_k1VB2lxjEBMgCIPCJ4fig.roa
File: 0WajB_k1VB2lxjEBMgCIPCJ4fig.roa (raw, json)
Hash identifier: onDfxTfDmWkbpWuzngvxe2d2fhzrMZAjgSrmuPg8KKA=
Subject key identifier: D1:66:A3:07:F9:35:54:1D:A5:C6:31:01:32:00:88:3C:22:78:7E:28
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 0565B287
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/0WajB_k1VB2lxjEBMgCIPCJ4fig.roa
Signing time: Sat 01 Jan 2022 11:04:36 +0000
ROA not before: Sat 01 Jan 2022 11:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33657
IP address blocks: 185.215.116.0/22 maxlen: 24
159.197.144.0/20 maxlen: 24
159.197.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90550919 (0x565b287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 11:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d166a307f935541da5c631013200883c22787e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:09:1b:76:38:df:76:d0:e1:ae:4f:3c:90:
3d:ed:07:48:5c:b7:be:a6:fd:d7:a8:e4:76:8e:dc:
70:0f:94:d0:56:fe:ab:50:c7:11:dd:a9:f7:66:ff:
5d:43:77:1a:a5:0b:75:3a:09:51:9c:e9:09:21:8b:
39:1b:6c:9b:ce:4a:9e:89:40:d4:37:91:7b:6a:37:
a6:71:83:18:d2:6f:d9:2f:01:81:8e:94:c0:38:a6:
ad:aa:dc:53:4b:47:db:c4:6b:9c:8b:29:55:be:c9:
a2:22:41:9b:2c:38:f9:44:03:48:92:34:eb:8d:8e:
13:2b:93:37:f9:71:1e:20:44:2b:8a:2d:c0:72:2d:
4f:56:4a:37:5c:0a:54:46:bc:68:56:1d:ac:ca:3e:
47:71:b8:5d:f1:ae:4f:ad:e8:ee:02:c6:dc:6c:da:
ae:7f:18:67:83:76:48:f0:6d:17:3c:67:12:b7:76:
d9:a5:57:74:71:5c:43:cf:6f:fe:29:2e:c6:56:b8:
c0:db:54:cd:84:d8:ec:d6:68:c6:62:a5:da:c2:59:
d8:48:20:62:53:f6:1e:85:aa:e7:d4:af:a7:9a:4e:
35:e7:f6:48:d3:c0:f8:3c:7c:cc:e5:f7:a6:05:54:
2e:5a:2e:69:4e:6c:8a:04:00:81:fc:49:93:fa:07:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:66:A3:07:F9:35:54:1D:A5:C6:31:01:32:00:88:3C:22:78:7E:28
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/0WajB_k1VB2lxjEBMgCIPCJ4fig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.144.0-159.197.191.255
185.215.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:61:e6:40:54:7c:29:1f:d4:7c:3d:09:05:69:92:1e:5a:82:
45:f7:d9:34:bc:f3:78:fc:e0:7b:59:9f:31:e0:3d:88:20:47:
a8:8c:75:ac:51:90:f8:32:0f:ec:1d:44:0e:e4:8b:a7:b1:50:
a3:ce:d5:81:92:c0:8b:46:1f:f0:cd:a6:cd:ce:4a:bf:87:40:
13:91:39:e2:69:57:6d:10:39:9e:d1:8b:7f:a9:80:42:12:68:
bb:c0:c2:7e:da:d7:4b:cb:51:0d:3d:4e:9b:c5:1f:8a:23:f9:
04:7f:de:d3:7f:6a:5a:9f:6a:9b:10:c1:4a:33:90:43:3e:07:
14:6b:64:f2:65:94:24:43:66:32:ae:7c:36:9b:eb:76:80:db:
b1:9f:49:10:37:b3:09:3f:83:c5:92:2f:13:10:eb:db:9b:ba:
96:78:64:ed:9a:e3:07:3a:03:74:7e:65:dc:93:21:0a:3a:37:
99:e4:5e:36:ce:0c:65:e0:b6:d5:29:ba:58:d6:88:e2:ae:5d:
8b:52:02:15:52:1c:0c:02:11:0d:8c:09:82:a5:b4:06:fa:01:
46:61:c9:11:e8:3a:2b:3c:d2:c8:dc:66:5d:71:d4:2f:6f:54:
a1:1c:a9:47:44:9a:aa:dc:42:2d:9e:d1:15:e3:6e:11:8d:90:
51:eb:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:23 2024 by rpki-client on console-fra.rpki-client.org