Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/A54qlaHaJuryTL3TRgb2pm92E6U.roa
File: A54qlaHaJuryTL3TRgb2pm92E6U.roa (raw, json)
Hash identifier: uCprR45nSkLD4Pj7Y53wMaKolkX+/yCGxLVjZRUhLXk=
Subject key identifier: 03:9E:2A:95:A1:DA:26:EA:F2:4C:BD:D3:46:06:F6:A6:6F:76:13:A5
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 0D5F6196
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/A54qlaHaJuryTL3TRgb2pm92E6U.roa
Signing time: Thu 06 Jan 2022 08:07:12 +0000
ROA not before: Thu 06 Jan 2022 08:07:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 37468
IP address blocks: 185.148.112.0/22 maxlen: 22
185.148.114.0/23 maxlen: 24
2a07:6040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224354710 (0xd5f6196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Jan 6 08:07:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=039e2a95a1da26eaf24cbdd34606f6a66f7613a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:f8:55:86:7c:93:9f:c6:0e:27:91:d6:7c:
b0:9f:2d:67:6f:33:84:06:e6:48:8c:15:4a:9e:1d:
b9:2d:37:98:00:e8:89:00:cd:9f:11:eb:bd:4f:1c:
bb:85:61:4a:7e:74:39:6a:c7:e8:5a:4d:d9:33:03:
65:d4:0a:10:be:40:4d:62:3e:a7:47:55:5d:58:2d:
a9:c2:40:d3:cc:4d:98:96:9f:92:79:a8:e6:dd:75:
02:ff:09:55:98:29:98:99:87:80:45:68:86:7c:f0:
45:da:cd:f3:2f:80:9e:6c:e4:b7:76:50:c7:d2:de:
f8:f3:ce:27:53:c3:47:25:ef:ea:cd:41:d8:a1:06:
06:6a:85:46:1a:8f:0c:7a:56:cc:78:dc:60:8d:6f:
b6:8f:54:b4:3d:32:39:ee:11:10:13:62:79:ca:02:
d7:06:96:07:90:58:1c:4a:fb:f4:3d:3a:96:42:29:
e9:64:21:f7:eb:8c:f6:7b:8e:d1:c4:1e:45:84:4a:
10:e8:8b:33:4e:e6:16:a8:ae:27:0a:0e:e7:ac:60:
91:b9:49:76:3b:a3:13:c8:23:0a:52:ed:6e:63:03:
f9:83:7d:38:2a:d5:30:4d:b6:3a:b9:64:c9:e5:98:
86:56:c6:32:df:be:40:e7:cc:f6:b9:71:85:15:4c:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:2A:95:A1:DA:26:EA:F2:4C:BD:D3:46:06:F6:A6:6F:76:13:A5
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/A54qlaHaJuryTL3TRgb2pm92E6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.112.0/22
IPv6:
2a07:6040::/29
Signature Algorithm: sha256WithRSAEncryption
1b:fc:a8:30:ad:1e:dd:d0:67:11:ca:39:8d:a9:7e:d5:2c:cd:
8b:8a:89:0d:d1:0c:e6:3e:6e:d0:c4:39:9b:f0:50:26:5d:79:
37:07:cf:8d:c9:ce:78:18:61:99:75:5b:28:39:fe:56:0e:0f:
4c:cf:4e:3c:28:93:4c:c4:9e:92:be:19:32:51:47:b3:6d:da:
a9:f3:2b:a6:d7:1d:4b:13:5e:8c:a8:97:da:a7:38:84:dd:d3:
46:8e:b8:81:d9:6b:1c:88:ab:cd:18:07:77:40:83:ad:dd:8f:
45:39:3f:39:b9:fe:93:af:fc:f8:08:42:a8:6a:de:27:48:ad:
36:d1:67:32:47:98:3e:f5:d5:1a:58:e8:bc:31:0c:6d:ca:fb:
85:e3:ff:6a:19:de:6a:2c:93:f9:d5:8f:ac:9e:d9:eb:79:38:
fb:52:2f:1e:96:9e:7a:69:1c:fb:6c:ed:65:21:54:a0:94:d4:
8b:0b:33:c0:1f:8e:26:68:0f:47:a6:32:db:77:76:0a:b8:3a:
9f:9c:50:ce:dd:fd:f7:d4:11:9a:d5:3a:28:31:b9:4f:1d:1a:
1d:ed:5a:22:48:18:78:2f:01:92:42:61:fb:f5:c2:c7:b2:6c:
3b:e7:e7:36:60:78:1d:c5:f3:12:2b:fa:1b:07:91:c1:88:96:
1d:09:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-ams.rpki-client.org