Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/36RjvwkIXr8qt4q_bCrYKjBaUng.roa
File: 36RjvwkIXr8qt4q_bCrYKjBaUng.roa (raw, json)
Hash identifier: daPGHqvfQI+oqLERi69/6qj4I/LY39SrzX4zk1McZKc=
Subject key identifier: DF:A4:63:BF:09:08:5E:BF:2A:B7:8A:BF:6C:2A:D8:2A:30:5A:52:78
Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial: 067E5F8B
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/36RjvwkIXr8qt4q_bCrYKjBaUng.roa
Signing time: Sat 01 Jan 2022 11:02:28 +0000
ROA not before: Sat 01 Jan 2022 11:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60458
IP address blocks: 185.144.54.0/24 maxlen: 24
185.144.55.0/24 maxlen: 24
185.144.52.0/24 maxlen: 24
185.144.53.0/24 maxlen: 24
185.164.100.0/22 maxlen: 22
185.254.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108945291 (0x67e5f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
Validity
Not Before: Jan 1 11:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfa463bf09085ebf2ab78abf6c2ad82a305a5278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:db:41:37:34:ba:84:88:ac:4d:17:ea:c7:
3b:b2:d1:e5:26:38:51:ca:05:d9:33:9d:bb:ec:d5:
8b:d0:1d:e2:76:3a:24:3b:78:e2:57:bb:7a:6f:d1:
cb:c2:62:b8:21:23:87:07:89:d7:8b:2d:69:82:37:
44:18:f6:19:f8:b9:d6:11:87:ec:fe:eb:d5:23:a0:
12:da:60:f3:08:e0:37:b1:02:12:24:88:a7:49:20:
95:12:17:2c:00:4b:e5:72:2a:df:b7:22:80:7d:9d:
18:58:3b:f5:e2:45:fd:d8:4e:c1:9f:9a:7d:b5:2b:
1c:0c:75:b6:88:24:17:75:0e:c9:db:6b:64:69:5a:
13:bd:f7:5c:ca:a0:15:49:97:8c:6f:e2:02:05:61:
cd:1a:e5:19:4e:9b:f7:9e:35:85:b1:38:6c:75:c0:
38:47:45:18:04:01:c4:09:d6:4c:48:34:4e:d8:f2:
45:ac:a4:8b:f4:3b:a3:52:1f:10:02:0c:2d:bd:dd:
28:77:07:85:e3:26:66:09:70:a6:f6:4f:53:6c:f2:
40:03:1a:d9:c5:b0:65:9f:48:f8:7e:7a:3d:2b:6c:
6c:65:5e:8e:3e:b6:74:40:f6:1f:d1:a8:df:4b:77:
6c:d7:58:63:c7:01:de:65:c5:8c:a8:41:48:f5:5b:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:63:BF:09:08:5E:BF:2A:B7:8A:BF:6C:2A:D8:2A:30:5A:52:78
X509v3 Authority Key Identifier:
keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/36RjvwkIXr8qt4q_bCrYKjBaUng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.52.0/22
185.164.100.0/22
185.254.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:49:55:95:67:12:90:d3:4d:f7:1e:e6:4e:ed:af:74:51:ec:
26:f3:1b:71:d1:23:b6:a6:ba:09:93:7b:04:ff:bf:a0:28:cc:
cf:c5:a7:94:f6:e6:0a:a7:7e:09:0a:b5:a0:c4:d2:13:0f:17:
88:ef:3b:61:69:90:32:d3:9a:db:f0:08:fa:de:4f:c5:f5:7e:
1d:b6:c7:dd:dc:44:06:de:9c:25:f1:08:51:1d:2a:1f:c2:2a:
a9:4e:aa:0c:0d:8e:97:a4:0c:61:6d:f6:b5:36:f9:36:9a:19:
a6:3d:74:bf:65:c4:6f:64:7a:dc:1c:85:ed:91:7a:54:9b:8c:
47:dd:bb:6f:52:6b:1b:a6:58:62:dc:7c:6d:bd:97:98:dd:4f:
3e:31:37:14:63:f7:40:c5:e0:fb:62:d4:a3:00:1e:1b:57:70:
8d:02:89:88:4f:c5:5f:32:37:d2:d6:1f:66:b7:2e:a6:c3:65:
c9:83:c3:7a:8a:cb:4e:56:6e:65:8c:06:37:f8:23:a0:30:55:
6f:5d:77:41:fb:24:ac:86:b1:2c:5c:c7:d2:d2:2c:cd:7c:87:
6d:3d:bf:38:c2:25:c4:bb:90:d0:b0:65:9b:07:63:b3:e5:f6:
3a:10:cd:b9:cd:de:8d:6d:c4:bb:f4:b9:3b:38:00:52:37:3c:
81:61:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:39 2025 by rpki-client