Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/VXd3Axilmd4ZLjfII4Kn3pt3NQo.roa
File: VXd3Axilmd4ZLjfII4Kn3pt3NQo.roa (raw, json)
Hash identifier: 8+zyDqJsbzmzOuY16rM7Os/cDSVMu0hDvdc+x2zjztk=
Subject key identifier: 55:77:77:03:18:A5:99:DE:19:2E:37:C8:23:82:A7:DE:9B:77:35:0A
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 12B635FB
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/VXd3Axilmd4ZLjfII4Kn3pt3NQo.roa
Signing time: Sat 01 Jan 2022 09:53:28 +0000
ROA not before: Sat 01 Jan 2022 09:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203063
IP address blocks: 185.145.0.0/24 maxlen: 24
185.145.3.0/24 maxlen: 24
185.145.2.0/24 maxlen: 24
185.145.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313931259 (0x12b635fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jan 1 09:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5577770318a599de192e37c82382a7de9b77350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:7d:33:08:93:61:a1:e3:9b:5f:80:83:01:
b0:20:06:39:f1:fc:57:bf:02:f6:62:f1:06:30:3f:
e2:c6:65:b7:1d:7e:b8:aa:b3:f2:64:d0:7e:c3:cf:
8b:36:75:f4:e8:0a:35:d2:6a:72:1d:f0:1f:45:53:
ba:62:1f:6d:a8:4d:df:fc:18:2e:cc:94:01:2b:6e:
d9:60:48:a9:17:4c:fd:2e:0b:7c:9c:ff:1a:16:c0:
1d:46:82:26:74:49:2f:1a:14:ba:b2:38:0a:fd:a3:
7d:a1:37:16:d3:24:f5:9a:d5:8e:0d:e9:5a:81:70:
c2:a6:fc:05:ac:99:c0:73:26:04:8d:74:b6:27:85:
46:09:b2:7e:10:5d:5e:22:c6:0b:7c:aa:fd:5d:10:
f6:a2:fd:b5:ab:1b:88:7d:ea:06:ef:71:c1:76:b5:
0c:d3:75:84:8c:71:30:e7:74:d6:a3:f5:7a:26:df:
ca:57:fe:e6:05:fa:2c:30:ea:75:b2:a1:b2:a5:d0:
2a:b5:30:38:7a:fb:8d:8e:4d:5a:30:05:9f:b7:06:
1d:73:5e:0d:29:f2:d0:c6:d2:b3:35:0f:07:72:7f:
36:44:07:06:1c:f7:01:ca:b6:af:79:ad:be:9f:55:
9f:52:3d:d9:33:6f:1f:0d:76:d0:76:09:f2:1a:69:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:77:77:03:18:A5:99:DE:19:2E:37:C8:23:82:A7:DE:9B:77:35:0A
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/VXd3Axilmd4ZLjfII4Kn3pt3NQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:15:d2:08:0f:07:8b:aa:a9:dd:f3:73:1f:02:7c:28:95:25:
cd:b5:b3:31:10:be:24:2e:56:bb:5d:55:bf:66:5e:db:84:5b:
23:fd:78:2a:43:58:7b:ec:dd:e7:d3:f3:4b:8d:8c:f0:63:1c:
a3:5b:57:d1:d0:c8:38:d9:4e:52:1e:c1:45:dd:a9:3c:0f:8f:
9e:84:b0:01:b9:20:7a:13:b8:ee:41:12:38:57:5c:56:0f:d9:
2c:75:c1:53:1c:a3:73:f8:c9:10:4c:0a:44:08:6d:ba:f8:bd:
94:8c:00:a4:e4:c8:02:19:1c:0f:d8:3a:d4:b9:87:15:23:f2:
19:43:45:20:37:2d:13:b8:c4:cb:6f:2a:95:e1:44:61:b5:19:
43:13:c0:c7:df:27:69:d2:56:61:ec:49:fa:e6:a8:c4:27:e0:
a8:de:7d:ff:ba:15:e8:0c:d5:a9:bd:ef:70:a9:fe:cb:9a:43:
de:45:7e:29:64:ca:da:f1:e6:91:5c:79:39:ac:3d:86:fa:a7:
25:76:a2:dd:05:3f:a7:da:f6:0f:a9:f5:e0:b3:91:a2:c6:cd:
83:91:af:6f:69:87:50:3a:7e:48:e0:01:9d:d1:e9:d5:5f:4b:
d4:85:e0:e3:dd:fc:81:40:99:74:49:68:e5:cb:76:fe:66:9a:
97:d6:fb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:49 2024 by rpki-client on console-ams.rpki-client.org