Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/WUUlGR5BiUa3VAloQ9puXUuGBL4.roa
File: WUUlGR5BiUa3VAloQ9puXUuGBL4.roa (raw, json)
Hash identifier: tUHwvhZgHrqP39/JN3gs6JdXx3CHeZA4f4Sfjrpc5Pw=
Subject key identifier: 59:45:25:19:1E:41:89:46:B7:54:09:68:43:DA:6E:5D:4B:86:04:BE
Certificate issuer: /CN=4a751782fa4cd1425443d1efa12d6676213f44ec
Certificate serial: 13E2EF10
Authority key identifier: 4A:75:17:82:FA:4C:D1:42:54:43:D1:EF:A1:2D:66:76:21:3F:44:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/WUUlGR5BiUa3VAloQ9puXUuGBL4.roa
Signing time: Sat 01 Jan 2022 15:02:25 +0000
ROA not before: Sat 01 Jan 2022 15:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200097
IP address blocks: 185.37.101.0/24 maxlen: 24
185.37.102.0/24 maxlen: 24
185.37.103.0/24 maxlen: 24
185.37.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333639440 (0x13e2ef10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a751782fa4cd1425443d1efa12d6676213f44ec
Validity
Not Before: Jan 1 15:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=594525191e418946b754096843da6e5d4b8604be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:75:05:33:51:c2:26:3d:d1:4f:b2:41:dc:
77:7d:70:15:af:34:a7:75:cd:98:02:ab:b5:77:d4:
fe:e5:86:b0:e9:8c:00:cd:a6:27:6f:ec:47:04:5d:
8c:4a:69:c7:e9:58:90:3c:1c:03:d0:98:87:0f:cb:
48:77:5e:4c:00:83:d8:3a:ef:20:6a:98:25:74:fc:
6c:3c:62:eb:ce:03:3c:cf:85:e5:07:63:02:7f:74:
60:2e:f0:85:e9:fb:25:65:c3:87:66:9e:ea:64:1c:
26:7a:fa:fd:42:2a:b0:9b:1e:d2:cf:3d:45:5a:c8:
fa:63:c7:98:1b:6d:3d:b9:f3:f3:1f:de:6b:d3:7e:
2b:e3:bb:4c:5b:1b:d8:d5:d3:68:96:e1:a9:d2:4b:
1b:1d:61:18:91:9d:2b:66:3c:8b:a7:ec:fd:4b:33:
06:9e:33:62:43:0e:e9:28:e1:b5:64:cf:a1:34:06:
e8:98:d5:c6:63:2e:08:27:ee:93:27:49:77:58:6e:
7e:10:b2:58:e6:94:1b:ca:8b:c9:80:36:9b:01:f1:
6e:ba:ab:99:cc:55:9e:f8:32:5e:5e:6b:cc:d2:b3:
2d:2c:70:0c:60:6f:43:9b:66:9f:c5:99:d5:48:be:
8b:96:b0:1e:f6:4e:f2:f9:a7:06:df:c3:49:60:92:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:45:25:19:1E:41:89:46:B7:54:09:68:43:DA:6E:5D:4B:86:04:BE
X509v3 Authority Key Identifier:
keyid:4A:75:17:82:FA:4C:D1:42:54:43:D1:EF:A1:2D:66:76:21:3F:44:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/WUUlGR5BiUa3VAloQ9puXUuGBL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:57:1b:35:64:d9:56:fa:5c:f7:2e:b3:21:69:1d:b0:9f:3a:
ae:f7:a8:bd:07:95:75:94:14:ea:2b:6e:bf:6e:87:a6:aa:f5:
ff:de:88:e7:7b:87:52:11:38:3d:57:c1:60:02:6e:92:21:bf:
cf:04:18:63:cf:f5:69:9a:4c:8e:6d:34:88:15:20:44:e7:08:
d8:c4:47:d9:ed:e4:8a:b4:54:6a:f8:df:6b:08:86:6e:d7:0e:
98:c3:09:5f:27:6f:2e:ba:1d:c6:3a:85:24:cb:67:be:d9:71:
46:8e:64:a9:4c:64:6f:13:2e:65:4b:f4:7e:c4:75:04:41:d3:
f3:33:1f:68:ad:59:53:81:59:8a:a2:34:20:be:5c:6c:3d:7d:
63:7e:7b:53:d5:e4:62:53:82:dd:85:5c:07:c7:8b:a7:3c:77:
df:fa:88:8f:9e:17:ae:1b:79:d4:98:b8:28:37:c3:db:6c:98:
bc:64:d7:db:64:76:7d:04:54:ad:7f:e6:c1:19:3d:31:20:84:
e8:b9:c2:9e:db:8a:d8:02:1c:f2:87:f0:6f:b8:54:f6:7a:00:
ae:3a:cb:c9:3b:fd:e6:d7:5d:d8:b5:ef:21:cf:22:70:a0:46:
87:af:c2:ae:8f:53:e2:03:e3:62:77:4c:4b:2c:75:89:37:b7:
67:f9:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:53 2024 by rpki-client on console-fra.rpki-client.org