Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/4SKDnhqUMpt4ZVvJfRIzLZDJpb0.roa
File: 4SKDnhqUMpt4ZVvJfRIzLZDJpb0.roa (raw, json)
Hash identifier: QqzTY6KcXhvpqv+9yb/t7f/P7ynZVgg1TDWPT6s485c=
Subject key identifier: E1:22:83:9E:1A:94:32:9B:78:65:5B:C9:7D:12:33:2D:90:C9:A5:BD
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 06F47DB9
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/4SKDnhqUMpt4ZVvJfRIzLZDJpb0.roa
Signing time: Sat 01 Jan 2022 01:52:34 +0000
ROA not before: Sat 01 Jan 2022 01:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.36.216.0/22 maxlen: 24
194.247.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116686265 (0x6f47db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jan 1 01:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e122839e1a94329b78655bc97d12332d90c9a5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:35:2b:b6:c0:05:98:67:c9:d6:23:ea:d5:
ea:60:da:e7:20:08:4e:52:d6:90:bd:2e:79:ce:3b:
da:d9:b6:c0:2d:87:ae:d2:61:71:d7:68:3d:20:4b:
a0:9d:1b:07:7e:88:61:76:11:9e:55:f0:d7:6d:f9:
b2:ee:b7:95:5d:6d:42:8c:de:4b:02:d8:ab:b7:f0:
c5:6c:5d:8f:de:da:48:ac:e2:10:15:e0:1e:e1:2b:
69:89:e7:18:dc:84:1e:c4:ed:45:d6:da:b9:0a:5a:
89:89:8f:c7:64:9f:6f:79:51:d9:59:c2:2a:b0:3b:
81:c1:1a:d6:5b:7e:ce:cf:f2:a8:48:98:20:6a:ac:
d8:92:4b:4d:a4:a1:cb:32:6d:6e:23:b6:09:58:69:
5e:0e:d8:ee:a2:25:01:ee:33:63:43:9c:60:3d:8c:
1f:36:7b:28:c6:4b:47:db:cd:1c:47:d7:27:51:c9:
3e:89:73:a4:a7:cd:c0:e6:60:31:cc:3a:7d:99:cb:
42:00:c1:13:5b:ba:d0:61:5b:90:f8:d2:a2:87:f3:
72:9b:7a:56:ff:96:65:85:53:f0:0f:e6:96:e3:ec:
b7:51:a4:88:56:0a:e8:db:f2:ff:fd:4b:c3:42:83:
f0:f0:b9:92:9c:05:ec:92:d8:b7:b9:82:07:0c:ca:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:22:83:9E:1A:94:32:9B:78:65:5B:C9:7D:12:33:2D:90:C9:A5:BD
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/4SKDnhqUMpt4ZVvJfRIzLZDJpb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.216.0/22
194.247.26.0/23
Signature Algorithm: sha256WithRSAEncryption
35:c2:ca:dd:bb:7b:4b:32:04:25:0f:e2:68:42:79:45:0d:9b:
3e:ae:3c:57:d1:91:d5:a4:3d:24:39:86:50:af:d9:01:06:21:
09:dc:dd:5f:20:ae:e4:e8:6d:1d:12:1b:f0:55:8a:f8:7f:62:
1a:b9:ea:f9:58:45:47:72:a4:1c:07:65:16:67:33:a2:7b:c4:
7d:71:b3:55:4b:b6:33:da:20:57:f6:60:85:27:5d:68:42:b7:
3c:ef:f6:1d:b0:92:96:ce:2a:bd:5b:87:55:a6:31:d6:d5:db:
f9:7b:bf:3f:72:72:09:b2:3e:81:9b:af:d3:77:94:77:30:31:
66:2b:0d:e3:ab:0b:5e:0c:9c:46:2a:3e:d8:34:af:e6:1c:f1:
2c:37:0f:db:16:60:f8:95:b4:a3:55:2c:b1:32:aa:12:fc:33:
ac:92:fb:65:7d:e8:45:a0:bd:da:de:97:c4:9c:89:19:d9:07:
e9:b7:22:0a:12:59:aa:e7:dd:31:75:6c:99:5b:77:69:f5:2f:
d8:9e:3f:0b:22:96:6a:4b:1a:a8:0f:a7:c2:e1:40:85:3e:41:
9e:b7:61:1f:47:a4:69:31:cd:b5:eb:6e:cf:ba:39:42:6e:4c:
31:1e:f5:79:d0:d8:ae:b2:06:98:85:3e:33:a2:a1:7f:8c:7a:
cd:1b:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:41 2023 by rpki-client on console-ams.rpki-client.org