Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/3Xz_2y-rPiXESnbuY1NsQTQmlbo.roa
File: 3Xz_2y-rPiXESnbuY1NsQTQmlbo.roa (raw, json)
Hash identifier: Y7x+PkUyfxYVxJnMAnk8lbPXwELA3btUaev36R8FDLQ=
Subject key identifier: DD:7C:FF:DB:2F:AB:3E:25:C4:4A:76:EE:63:53:6C:41:34:26:95:BA
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 04A7C04F
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/3Xz_2y-rPiXESnbuY1NsQTQmlbo.roa
Signing time: Sat 01 Jan 2022 03:01:36 +0000
ROA not before: Sat 01 Jan 2022 03:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206608
IP address blocks: 185.180.81.0/24 maxlen: 24
185.180.80.0/22 maxlen: 22
185.180.80.0/24 maxlen: 24
185.180.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78102607 (0x4a7c04f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jan 1 03:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd7cffdb2fab3e25c44a76ee63536c41342695ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:c3:16:07:9c:e4:99:21:84:0f:41:24:55:
d4:5f:58:91:72:57:e0:5e:a3:63:c8:15:e0:c3:b2:
fb:c3:b9:66:92:a2:b8:1b:67:da:b8:e3:48:93:43:
81:b6:42:10:f2:d6:f1:98:fb:0e:33:f7:ff:52:1b:
87:67:62:ed:f6:4e:c6:79:22:08:79:b5:7c:8f:e0:
65:82:80:ca:c4:bc:eb:b0:41:61:52:8a:cf:66:cf:
d2:cf:34:df:a3:73:2b:61:92:08:d7:d8:54:e2:f9:
5f:63:c3:db:a2:4c:73:96:a3:1c:cd:de:09:5e:a1:
f5:d2:5f:af:9a:51:40:56:da:8e:88:4a:0e:85:fa:
bd:d2:a8:ca:19:54:5d:07:8e:ed:dc:6c:10:1c:d1:
97:e7:9c:c4:67:82:c8:3c:ec:01:3e:09:6b:49:dd:
50:02:36:40:ca:cd:83:4e:70:cf:95:16:74:0e:2c:
fa:9a:6c:79:bc:b1:bc:15:25:8a:46:01:bd:78:15:
07:7b:0b:e8:82:a6:c1:d1:f8:0f:8e:32:fc:b5:fb:
17:db:bb:48:8f:f9:fd:b9:19:4e:4d:14:e3:6e:54:
05:10:18:37:5e:4b:7d:99:81:99:dd:90:87:b5:e0:
b6:27:de:ad:57:4d:f4:c7:df:45:d2:0b:99:2d:b2:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:FF:DB:2F:AB:3E:25:C4:4A:76:EE:63:53:6C:41:34:26:95:BA
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/3Xz_2y-rPiXESnbuY1NsQTQmlbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:b4:61:3f:e6:c7:91:bc:d1:94:41:0c:f3:dc:df:0b:f5:fe:
15:a3:b6:8c:fe:df:e0:c4:a0:65:de:ff:43:aa:51:4d:cb:f4:
e0:9b:4c:71:9e:d6:2b:56:29:8b:8a:20:85:b4:c6:d6:40:a4:
58:20:10:94:37:a6:e6:90:7b:e9:74:ad:d4:fd:47:84:de:9f:
16:6a:9b:ff:7a:78:5d:e8:a5:e7:08:ff:fe:f3:93:1c:0b:8c:
10:1e:0f:85:cc:6c:3d:33:f9:a9:17:d3:42:fb:81:dd:87:12:
18:d6:07:23:17:11:ba:40:aa:ad:13:1e:35:0b:c0:a1:fa:4e:
a9:4c:a4:be:a0:64:7f:49:b8:2b:5c:be:89:38:bb:95:5c:d9:
3c:27:a8:ab:cb:26:96:04:d8:f4:31:73:38:a6:d8:16:df:46:
53:1c:f9:b8:24:89:c4:34:db:83:7b:1a:6d:1b:ce:61:46:2b:
74:d3:d5:03:c0:32:5e:a8:31:58:58:98:1c:95:ce:23:7e:49:
98:b5:e5:a1:3e:cd:34:66:1a:5d:83:c7:9b:2d:e7:b6:f9:c2:
07:9c:6d:7a:d1:b5:17:df:de:2a:53:3b:83:b6:7e:2f:9c:47:
b0:b1:f6:86:7e:49:eb:5d:8b:8f:4c:5e:0f:a6:55:2b:bb:42:
89:04:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:45 2024 by rpki-client on console-fra.rpki-client.org