Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/S-i6W0D3-1B0NJaf3HfmYL9nIYI.roa
File: S-i6W0D3-1B0NJaf3HfmYL9nIYI.roa (raw, json)
Hash identifier: gLm8CduGVdi8Ys+JXiej2mM69MqilsDN1evGHcK1Prk=
Subject key identifier: 4B:E8:BA:5B:40:F7:FB:50:74:34:96:9F:DC:77:E6:60:BF:67:21:82
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 0A37C13F
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/S-i6W0D3-1B0NJaf3HfmYL9nIYI.roa
Signing time: Sat 01 Jan 2022 06:05:30 +0000
ROA not before: Sat 01 Jan 2022 06:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202991
IP address blocks: 185.178.240.0/22 maxlen: 22
185.148.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171426111 (0xa37c13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jan 1 06:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4be8ba5b40f7fb507434969fdc77e660bf672182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:59:1d:31:52:3c:c1:79:9e:95:de:16:00:
b0:b6:46:ff:bc:9e:d4:2c:a5:d6:d8:65:fe:37:ee:
c7:14:97:cc:36:08:6f:ea:6b:4e:09:2e:e2:09:58:
96:5a:b3:ab:54:63:8c:86:52:f7:d4:0a:10:d0:6e:
43:a8:50:cc:15:ce:6b:29:d5:5e:8c:40:2b:62:b4:
2e:63:88:bf:d4:85:c7:ed:93:d5:e2:b4:ef:b9:fa:
5c:77:a4:1e:35:f7:75:2e:3d:1f:da:dc:d5:53:6e:
da:32:71:86:88:c9:12:f3:56:b7:f4:c3:67:de:dc:
15:cc:6a:1e:55:2e:81:cc:00:4a:4b:c2:66:5c:82:
fe:34:52:01:fb:57:c3:6a:a7:ae:fe:6b:a8:60:69:
3a:16:78:03:e4:88:5b:c5:40:2c:d7:80:c6:be:df:
f5:2b:d8:75:be:f4:57:f7:64:22:20:b0:25:7c:b3:
ea:85:fd:1a:db:6c:3b:21:16:03:68:1c:76:17:5d:
f8:8c:5a:70:0a:e9:12:53:40:7c:73:22:5b:4f:fa:
b1:66:75:e6:ec:2d:46:bf:1c:03:63:92:c1:f6:b5:
57:85:30:1e:b2:e3:c3:75:f3:ee:ad:14:89:7b:37:
c1:f4:d2:13:fc:2f:5d:b0:1b:f3:38:6d:2c:5c:fa:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E8:BA:5B:40:F7:FB:50:74:34:96:9F:DC:77:E6:60:BF:67:21:82
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/S-i6W0D3-1B0NJaf3HfmYL9nIYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.84.0/22
185.178.240.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ee:04:5f:ba:20:97:9f:55:48:91:45:f0:bd:4f:9c:30:26:
b2:d9:fa:5a:4c:4d:fb:79:5f:cc:a9:37:1e:7e:8d:37:75:88:
cd:6a:36:38:95:dc:0b:06:cd:54:52:06:66:8d:8d:bc:51:d4:
e9:7f:e7:73:14:21:0d:7a:a7:e5:98:8e:ee:21:3e:a6:75:a2:
20:d7:39:3a:0b:2a:1b:e1:0d:cd:0e:6b:62:eb:a0:0d:86:48:
12:d1:25:0e:0a:03:d9:18:f7:91:f1:05:67:4c:b1:16:a5:2d:
dc:77:54:03:23:79:4f:05:b7:f7:b6:0f:ed:f1:21:fc:ba:27:
55:a3:b4:ba:d1:f8:01:8e:a6:6f:c2:80:df:fd:9b:0f:0b:6f:
0a:2c:fd:02:32:f5:94:6f:01:04:f9:f1:cd:19:ef:ed:3e:53:
3b:6d:cf:7d:40:d7:60:3a:04:07:41:81:1f:c2:7c:81:a7:cf:
da:25:d3:56:8b:d4:67:5c:3b:2b:58:7a:ee:69:46:76:40:2a:
1f:33:09:7c:bb:43:02:3a:45:2d:f9:02:ff:84:bc:d0:78:87:
7c:7f:8f:d6:a3:cc:29:91:80:d8:37:67:00:91:95:35:91:0e:
dc:30:55:bb:25:7a:e5:2c:95:4c:9c:f1:80:01:14:e2:73:98:
d7:2f:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:05 2024 by rpki-client on console-ams.rpki-client.org