Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/23rhEZ3RMDq1giD4Yk6mtO-3T78.roa
File: 23rhEZ3RMDq1giD4Yk6mtO-3T78.roa (raw, json)
Hash identifier: U9WNUCgEsiIpW2LY4e3ODw+l2T7xu875wRuCPfbmFUQ=
Subject key identifier: DB:7A:E1:11:9D:D1:30:3A:B5:82:20:F8:62:4E:A6:B4:EF:B7:4F:BF
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 03CAB8A0
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/23rhEZ3RMDq1giD4Yk6mtO-3T78.roa
Signing time: Sat 01 Jan 2022 06:55:21 +0000
ROA not before: Sat 01 Jan 2022 06:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203012
IP address blocks: 185.147.16.0/23 maxlen: 23
185.147.19.0/24 maxlen: 24
185.147.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63617184 (0x3cab8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jan 1 06:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db7ae1119dd1303ab58220f8624ea6b4efb74fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:41:99:d0:c6:74:c5:96:42:64:d4:86:5b:
91:2f:fe:a1:8f:89:f4:b6:40:43:e4:65:01:aa:ac:
1a:3a:35:77:f6:be:26:24:81:a7:bb:5c:33:06:3b:
27:1f:b6:b0:04:27:18:df:ab:e8:65:1c:49:6f:5c:
fd:47:f2:72:29:02:a7:ba:3b:f9:17:83:e0:74:08:
ed:6c:1c:ba:d8:1d:ea:b5:e9:44:69:08:ac:bf:a8:
bb:bc:5e:c7:d1:87:d9:1a:9c:ed:b3:43:15:f3:3f:
93:58:ff:a8:65:37:41:cf:34:10:eb:2f:d5:b5:7b:
2b:f1:ec:11:72:39:de:d0:4e:70:75:e6:de:49:18:
b5:9a:2a:11:43:97:96:cb:cb:44:6d:97:30:1a:63:
97:8d:19:63:04:79:6c:73:7e:fa:f8:26:9f:44:88:
23:c3:73:9f:0a:a9:c3:17:89:cc:96:6d:b4:1f:2f:
96:18:a5:e4:80:53:f8:5c:61:bb:73:0e:12:4c:11:
56:ea:1b:f5:27:d8:f5:79:4f:0a:5b:3c:5c:b6:e2:
a8:40:ea:7e:c1:a2:ca:da:cc:d7:40:e0:59:d4:36:
5b:d2:e4:c8:c0:39:d2:d2:d6:73:1e:cb:b5:05:68:
96:1e:3d:6d:b5:44:3f:05:20:d4:ab:b5:bb:a2:8e:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7A:E1:11:9D:D1:30:3A:B5:82:20:F8:62:4E:A6:B4:EF:B7:4F:BF
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/23rhEZ3RMDq1giD4Yk6mtO-3T78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.16.0/22
Signature Algorithm: sha256WithRSAEncryption
40:99:61:a9:e1:af:84:bd:2c:0d:aa:1c:99:61:e5:5b:73:9a:
a2:a9:a6:46:f5:a5:54:97:91:e9:23:dc:4c:5e:b7:8a:b0:85:
0c:b7:92:c9:a9:e0:59:bd:85:ff:1f:11:ea:ea:ca:3f:e7:61:
65:ca:f3:6a:7d:17:66:ae:dd:ef:f7:78:d1:89:21:31:32:5f:
20:23:d7:96:54:c4:8c:83:2a:a4:f4:aa:85:62:99:a5:f3:61:
5e:05:c5:1e:36:56:7d:73:1a:1f:43:e2:b5:c7:21:19:19:60:
2d:f6:23:ac:b8:ca:80:62:a1:3e:16:66:92:33:3c:88:43:20:
c0:b8:31:1b:ce:e6:b7:74:bc:98:d3:c7:ac:e9:7c:a9:29:b0:
82:9a:59:05:55:9e:c3:76:9c:45:dc:b2:a0:71:ca:9a:c8:e8:
14:f7:b8:e2:22:ec:d9:57:41:4d:97:bd:7f:ae:bf:d2:e6:8a:
64:06:ed:e8:16:3c:69:68:40:fb:f5:b2:a4:26:57:47:a1:e4:
d9:7c:3b:b4:7f:b8:25:61:1e:11:78:ac:a4:e8:d5:96:af:58:
d7:0c:02:f8:4d:bd:10:54:20:ea:f3:f0:f7:3d:ae:d7:44:af:
70:79:0e:dd:2e:1c:ed:0b:0e:74:e2:7a:6a:2d:71:59:30:8e:
67:e9:9a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:35 2024 by rpki-client on console-fra.rpki-client.org