Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/3JkQxDQQO0SWFpdGP-FV7MZ5cII.roa
File: 3JkQxDQQO0SWFpdGP-FV7MZ5cII.roa (raw, json)
Hash identifier: 7FG8NkD5Dz6017lLy+aRyMypZbzKoY1QomeTXuEmKS8=
Subject key identifier: DC:99:10:C4:34:10:3B:44:96:16:97:46:3F:E1:55:EC:C6:79:70:82
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 9B7CB1
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/3JkQxDQQO0SWFpdGP-FV7MZ5cII.roa
Signing time: Thu 02 Jun 2022 15:24:20 +0000
ROA not before: Thu 02 Jun 2022 15:24:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.173.144.0/24 maxlen: 24
185.173.145.0/24 maxlen: 24
185.173.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10190001 (0x9b7cb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jun 2 15:24:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc9910c434103b44961697463fe155ecc6797082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:a6:1a:08:69:4f:2e:f5:c8:85:f8:75:6e:
44:79:a5:cc:df:20:ca:54:b5:69:10:23:fd:61:cc:
79:87:e0:10:34:13:64:08:20:c8:b1:ca:3d:b9:e3:
02:b2:58:1e:13:51:e7:f9:bb:0e:d2:dc:c0:88:33:
42:4b:72:b7:6f:e0:66:b4:92:b0:c3:29:ee:1e:71:
ba:7b:52:23:92:8a:35:ea:d3:e6:2b:8b:bb:96:b4:
34:20:b0:0b:15:dd:63:3f:74:a2:25:6c:3a:fb:32:
e7:17:b2:cf:49:a1:83:d4:eb:8b:46:80:23:80:7e:
08:d4:8f:f7:03:71:62:7a:84:be:a7:a3:73:f0:e5:
a7:79:d0:18:a5:48:fc:fe:26:ba:cd:96:73:94:94:
06:40:a5:b5:22:a2:63:9a:64:32:38:b0:2a:88:08:
0b:f0:5d:0b:a4:73:86:39:a1:85:34:70:8e:1f:db:
fe:37:40:72:79:0f:47:bd:b7:09:40:9d:2e:4e:9c:
83:e3:22:c0:b5:8e:61:5f:85:1e:3f:d1:ec:73:1f:
5b:07:ad:45:1a:01:8b:81:1d:99:04:74:50:0a:3f:
dd:68:12:53:2d:fc:fb:92:d5:07:a8:0f:57:e0:c8:
9e:ea:f8:61:af:c6:43:67:7b:35:b7:0a:fb:6f:ed:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:10:C4:34:10:3B:44:96:16:97:46:3F:E1:55:EC:C6:79:70:82
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/3JkQxDQQO0SWFpdGP-FV7MZ5cII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.144.0-185.173.146.255
Signature Algorithm: sha256WithRSAEncryption
17:79:1d:42:f8:95:54:87:6c:dd:5b:fb:bf:19:f2:ce:20:19:
02:d7:1f:88:e7:fb:e5:d0:f0:8e:af:5d:78:21:22:e2:00:a3:
6c:43:b4:de:43:7b:ad:ce:c5:30:11:36:47:83:20:db:c6:43:
7c:1a:d2:13:0d:56:e6:54:97:b1:87:0a:92:4e:a6:60:06:32:
e4:ba:96:22:3f:fe:fa:c2:f8:e9:74:2b:6e:63:b7:23:9d:7b:
f9:fe:29:f6:e5:13:8f:ff:03:68:df:20:bb:c8:68:2c:aa:c4:
ed:21:e5:54:d3:68:fd:bb:05:23:2f:e5:bc:88:d8:5d:4f:82:
43:4b:85:e0:22:65:bd:24:a0:bd:b9:04:03:e9:66:1b:a7:d6:
c4:25:db:ef:80:cd:28:fc:88:0d:22:22:b2:22:18:84:36:23:
16:f1:3d:db:94:9d:bb:17:1b:79:a1:ab:a1:4e:23:dc:45:69:
20:41:a6:23:0a:cb:fa:d1:91:f5:9e:0f:1b:46:e2:7f:d3:7f:
79:69:9c:96:12:51:f5:84:6a:05:53:2e:bc:63:e1:8d:e1:38:
07:55:30:b8:80:1d:b5:43:d5:9d:dc:32:45:9d:9d:43:bf:90:
be:de:8c:cc:e0:6a:58:bc:71:8b:0e:ff:2f:1c:22:81:2f:fa:
c5:93:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org