Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/P-xPICRS-Wgh9PkPsNlLf9PFrmc.roa
File: P-xPICRS-Wgh9PkPsNlLf9PFrmc.roa (raw, json)
Hash identifier: aJDnejTVHYNjs64bRkqtEGfDD9QH2G50pQ9uA451A/s=
Subject key identifier: 3F:EC:4F:20:24:52:F9:68:21:F4:F9:0F:B0:D9:4B:7F:D3:C5:AE:67
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 0184B5CB4F23136D7148736CD1958225507B
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/P-xPICRS-Wgh9PkPsNlLf9PFrmc.roa
Signing time: Sat 26 Nov 2022 21:15:10 +0000
ROA not before: Sat 26 Nov 2022 21:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206912
IP address blocks: 185.166.64.0/22 maxlen: 22
185.170.232.0/22 maxlen: 22
185.105.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b5:cb:4f:23:13:6d:71:48:73:6c:d1:95:82:25:50:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Nov 26 21:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fec4f202452f96821f4f90fb0d94b7fd3c5ae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:5d:95:ed:e8:01:a9:fc:ca:6a:2d:98:16:
4c:a7:82:71:ec:31:73:97:64:97:4a:79:82:57:b1:
7e:f2:c6:79:66:fe:ac:ab:aa:57:9e:b3:c8:99:c7:
cf:e3:df:e7:60:8b:9b:af:02:0d:e1:15:b4:1f:cd:
34:1c:6a:f9:68:54:ad:e3:c6:9c:3d:f8:d2:5c:8b:
60:b4:c5:e4:6c:e8:4a:13:ff:e4:5a:a2:8c:5e:59:
1d:69:c1:31:8d:a0:a8:ee:60:24:74:cc:8a:85:73:
07:19:ee:c4:34:dd:8b:a5:d4:f7:b0:94:73:13:19:
2e:b2:2e:b2:7d:01:71:c8:54:7a:d9:00:0e:7d:9e:
b6:43:f8:83:92:69:bb:47:68:a5:0d:84:3a:92:04:
ee:d1:0d:bc:92:f6:a7:4b:7e:a6:59:5c:3a:6b:f3:
06:35:7e:1a:32:13:fd:3c:86:40:52:9d:58:94:75:
e4:ff:01:7f:4e:00:4a:57:f6:78:b1:d7:57:17:02:
fc:02:ed:65:e0:ad:59:13:2f:6d:82:a9:bb:95:e5:
b1:24:3b:df:c1:fe:80:7d:d1:da:c5:b3:47:c4:de:
73:cb:c2:ab:52:7b:6a:d7:59:4b:79:2f:e0:25:93:
6b:0f:d0:35:dc:be:a9:a2:c2:5c:c1:1f:21:6d:af:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:4F:20:24:52:F9:68:21:F4:F9:0F:B0:D9:4B:7F:D3:C5:AE:67
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/P-xPICRS-Wgh9PkPsNlLf9PFrmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.172.0/22
185.166.64.0/22
185.170.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f9:8e:c4:af:49:81:c7:63:a9:65:6a:ac:ab:77:7f:d7:63:
43:73:b2:3a:99:cd:19:bc:11:b5:07:25:5a:4c:56:43:cd:05:
c2:fc:9a:78:b4:76:bf:02:45:44:20:6b:ba:79:ac:c9:a7:8d:
b6:a8:16:6e:6a:c1:fd:6e:db:69:79:6c:59:cb:d9:14:06:b1:
ef:c2:bd:cb:39:71:88:57:12:f5:ea:fe:7a:9d:87:85:57:9c:
af:9f:ee:6f:d6:50:f1:65:ad:06:e4:eb:d4:7c:67:11:67:37:
1d:4f:c0:57:ab:35:6f:ab:06:a1:c4:46:d2:1d:af:87:95:64:
2d:f3:50:f1:4d:e6:5c:f0:7f:f3:f3:6d:1e:18:29:f3:97:55:
3d:ad:34:b5:ff:c9:8f:70:ac:b0:e5:17:57:f1:df:a8:12:96:
84:89:95:b8:92:02:d5:97:e0:4c:9a:23:88:90:77:32:34:c4:
19:4d:6e:72:59:80:2b:13:03:c8:39:71:74:4e:4c:6f:2d:90:
6c:ed:39:c6:b2:4c:92:e0:d0:6e:0b:86:34:67:b0:2d:7a:d3:
be:b0:50:5b:06:71:1a:60:a4:ec:ab:37:05:ef:33:e7:a7:90:
51:ec:1d:3b:fa:04:5c:cb:57:f5:cf:d2:41:2a:d5:36:96:78:
88:56:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:42 2023 by rpki-client on console-ams.rpki-client.org