Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/Ce_fHD185mlVjAJP7y6kai8lVxc.roa
File: Ce_fHD185mlVjAJP7y6kai8lVxc.roa (raw, json)
Hash identifier: Gm+TADKYPnu+/LrVMSchEsySmQguhyFSFkKyG2GTGNg=
Subject key identifier: 09:EF:DF:1C:3D:7C:E6:69:55:8C:02:4F:EF:2E:A4:6A:2F:25:57:17
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 0B1F59FD
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/Ce_fHD185mlVjAJP7y6kai8lVxc.roa
Signing time: Sat 01 Jan 2022 13:03:56 +0000
ROA not before: Sat 01 Jan 2022 13:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51862
IP address blocks: 185.122.180.0/24 maxlen: 24
185.122.180.0/22 maxlen: 22
185.122.182.0/24 maxlen: 24
185.122.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186604029 (0xb1f59fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Jan 1 13:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09efdf1c3d7ce669558c024fef2ea46a2f255717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:92:7b:31:97:0c:36:b4:e3:d2:ab:2e:3e:
14:75:eb:68:5b:67:da:9a:dc:f9:d8:c1:3d:1b:f1:
38:c9:ed:62:d3:17:ab:10:6c:b8:4a:33:48:e9:98:
88:94:27:f8:81:31:55:39:77:4b:c5:a0:af:a1:2a:
66:ac:db:cc:a2:4e:de:54:69:9a:d5:4d:51:03:e4:
85:5f:1b:0f:4f:5b:3e:d5:33:e1:7d:97:ff:b0:84:
49:c6:05:13:ea:9e:f2:1a:50:31:52:4a:3c:a8:2a:
47:17:06:e2:e7:ed:14:27:12:5b:48:29:c7:7d:63:
58:91:5e:ae:60:a3:bf:3d:a2:52:11:26:17:b8:cb:
62:b2:9e:05:c5:84:05:d9:8c:a1:63:68:a0:79:4b:
fc:c2:72:b6:d9:6f:5e:2b:12:c3:09:92:1c:f5:c5:
fc:fc:49:ae:82:4b:2e:67:68:86:95:53:5d:fa:c0:
6b:90:2c:9c:25:ff:e9:98:9f:06:1f:2b:f9:26:23:
1c:ef:b2:46:f2:b2:54:19:33:34:05:ea:18:45:67:
cc:94:c7:80:f2:e1:63:98:84:c8:b1:2a:f1:f4:b3:
6e:ca:eb:75:0d:01:fd:43:a0:2c:24:31:2d:0b:7b:
39:f5:08:49:95:c9:a0:5d:d3:ce:9b:0f:42:5d:f5:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:DF:1C:3D:7C:E6:69:55:8C:02:4F:EF:2E:A4:6A:2F:25:57:17
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/Ce_fHD185mlVjAJP7y6kai8lVxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:ea:9b:19:ac:62:cb:91:45:1e:1f:ab:d6:5d:ab:14:d4:8b:
11:c4:f2:bf:7c:66:39:2c:8b:fa:ab:e9:0d:c5:a0:87:dc:a3:
e0:b9:a6:be:14:e1:9e:b6:ca:a5:b4:fc:d9:c1:7a:db:a9:cc:
9a:57:42:9c:19:26:6e:f2:4b:c5:11:43:55:c8:e8:cf:25:ce:
21:6d:66:47:00:60:3e:1f:4b:6f:cd:6d:25:64:89:ab:53:b3:
26:b2:ff:ae:db:d1:e8:9d:06:a0:a7:62:27:ed:35:4e:0c:f4:
be:53:06:b5:75:68:88:fd:bf:5b:b2:0c:b2:76:2d:c1:0c:c2:
79:68:c1:e0:eb:ff:d1:3c:5d:8f:f7:14:93:b7:79:3e:5b:72:
20:76:40:ee:a9:c5:8f:30:2c:bb:c6:33:2b:af:ee:d2:a3:d0:
e4:8d:ea:e8:42:25:f0:06:e7:26:c9:97:6e:85:33:f8:15:c9:
e5:31:8b:9f:cb:f8:3a:56:b6:dd:c4:9a:2d:38:c6:1e:8c:a4:
d0:3f:bf:b3:74:e3:ba:ca:20:58:74:1a:b5:3b:9e:1d:2b:62:
45:3b:fc:09:f1:11:51:56:51:80:e8:1b:cb:b0:74:50:c3:6f:
b4:21:6a:76:2a:79:1d:39:8c:35:ef:97:63:fd:93:a3:32:5a:
bc:dc:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:54 2023 by rpki-client on console-ams.rpki-client.org