Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/NtI20TygbQ5OY2Ta-dKcCKpMEoo.roa
File: NtI20TygbQ5OY2Ta-dKcCKpMEoo.roa (raw, json)
Hash identifier: GaTd0y26ZFHGXX/cS8Sk4J4ASydtGHwAAXgUCO9+ULM=
Subject key identifier: 36:D2:36:D1:3C:A0:6D:0E:4E:63:64:DA:F9:D2:9C:08:AA:4C:12:8A
Certificate issuer: /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial: 0FA8E49B
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/NtI20TygbQ5OY2Ta-dKcCKpMEoo.roa
Signing time: Sat 01 Jan 2022 13:07:50 +0000
ROA not before: Sat 01 Jan 2022 13:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203116
IP address blocks: 185.143.24.0/22 maxlen: 22
2a07:4540::/29 maxlen: 29
2a07:4540:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262726811 (0xfa8e49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Validity
Not Before: Jan 1 13:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36d236d13ca06d0e4e6364daf9d29c08aa4c128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:55:f0:37:61:a0:84:29:88:c8:2d:8b:7d:
b4:4b:75:7c:5f:df:4f:30:cf:30:86:11:a7:aa:1a:
a6:19:c7:d6:a2:51:bb:3d:3e:67:73:13:10:fe:8b:
30:f2:bf:aa:f6:01:47:69:25:61:36:ee:08:4b:a8:
64:91:9c:d1:36:b2:ba:3d:72:ea:60:96:d5:e5:6d:
65:07:1b:bc:98:12:0a:79:a9:d3:f5:52:ef:0d:45:
06:36:81:a9:b2:c6:b2:8b:81:85:60:92:53:0a:47:
0e:c7:49:86:a5:a5:b3:b0:ab:af:2d:15:a9:a7:34:
03:42:e4:0c:c4:de:55:80:0c:28:b0:ab:b2:9d:5d:
d3:41:fc:6d:b9:e9:97:97:84:2d:2f:28:86:77:69:
f2:81:a1:48:03:54:3e:7f:96:a7:15:b5:61:0b:11:
11:56:2b:55:0f:44:42:6a:2e:da:a9:f1:c7:f3:94:
bc:43:2c:fb:bb:db:8d:6f:8c:27:62:61:b5:bb:9c:
db:17:3b:ed:fa:ab:2d:33:f9:a9:04:bb:9f:53:72:
5a:d0:6e:92:bd:f0:4f:09:d5:f0:8e:c9:68:74:97:
ed:02:6b:e0:36:d7:06:bf:9f:27:f9:50:da:bd:4a:
6f:50:e8:dc:48:36:cb:d4:58:29:81:ab:46:31:6b:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D2:36:D1:3C:A0:6D:0E:4E:63:64:DA:F9:D2:9C:08:AA:4C:12:8A
X509v3 Authority Key Identifier:
keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/NtI20TygbQ5OY2Ta-dKcCKpMEoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.24.0/22
IPv6:
2a07:4540::/29
Signature Algorithm: sha256WithRSAEncryption
f5:ef:58:c7:db:a2:b7:b1:de:99:0d:94:0d:33:0b:dc:1c:0e:
c4:e4:17:e2:e3:f9:f3:00:c3:16:92:d7:a6:1f:58:d9:26:65:
a5:0b:30:fc:4a:34:2d:a1:ad:82:58:64:3b:6f:bd:c6:66:7b:
07:a5:6d:0b:01:8d:c5:c7:bc:1f:89:e2:f1:b8:73:b6:a4:27:
48:fb:12:7b:30:56:9b:5d:58:e4:29:8e:4e:61:87:f6:00:ac:
0d:da:7d:68:00:19:3d:ee:75:8a:48:08:44:d3:11:0a:67:3f:
b4:d0:1d:3c:31:42:0b:41:bf:80:51:02:b6:de:f2:a4:02:6c:
de:e6:45:c2:11:9a:7b:20:b7:ce:10:ef:73:bf:38:68:d9:c6:
94:d8:03:90:cc:92:45:22:bd:e6:e5:f3:89:a4:39:ab:f4:c4:
1a:ef:5b:fb:fd:f0:0c:bf:f0:76:1a:b0:7f:cc:94:4e:3f:5e:
16:5d:9c:79:97:40:c0:71:5b:ea:39:32:28:26:ff:74:e6:b7:
a2:f0:6d:2c:a5:ed:e7:a1:80:76:aa:3a:4b:01:8f:36:d3:58:
01:75:d0:32:00:c0:38:fb:30:0b:91:3b:30:27:cc:b2:46:56:
60:10:2d:65:2d:9a:3a:1b:b4:85:a2:fb:2a:36:3b:9a:e8:ab:
7a:34:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:07 2024 by rpki-client on console-ams.rpki-client.org