Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/Qh4rNwWwJ1J2foh-ZPmZxentDZU.roa
File: Qh4rNwWwJ1J2foh-ZPmZxentDZU.roa (raw, json)
Hash identifier: 3M0bL0EK2i0tk7CjFrKO5pyICdama87piL2j3C4FdBY=
Subject key identifier: 42:1E:2B:37:05:B0:27:52:76:7E:88:7E:64:F9:99:C5:E9:ED:0D:95
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 7ADA7B
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/Qh4rNwWwJ1J2foh-ZPmZxentDZU.roa
Signing time: Sat 01 Jan 2022 02:53:57 +0000
ROA not before: Sat 01 Jan 2022 02:53:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42237
IP address blocks: 185.237.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8051323 (0x7ada7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Jan 1 02:53:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=421e2b3705b02752767e887e64f999c5e9ed0d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:97:51:77:f9:74:b9:2d:79:19:57:84:c2:
7b:6c:26:46:55:58:f1:00:49:b4:c0:62:d9:7a:01:
7d:6c:fe:5c:31:f2:8c:e9:28:59:89:6f:bd:ad:55:
3f:59:53:e6:20:91:6d:96:ce:1b:fa:a1:ca:0c:6a:
d6:e3:c8:7f:44:ee:3e:a0:59:09:48:7a:90:ec:58:
02:42:8d:c6:ce:67:91:ef:63:9a:82:8f:76:47:0b:
3d:0d:80:d2:c6:ae:55:33:33:22:a4:da:a4:63:57:
d0:97:8c:b3:a4:0d:83:f1:f1:a0:be:c3:f9:c0:12:
dd:a4:17:9d:54:e2:f7:3f:5a:7b:20:5a:32:91:7b:
0f:f5:dc:4b:66:4b:c2:6b:58:1b:5c:81:b2:c9:aa:
7a:63:d1:42:a0:48:34:c6:c1:27:aa:13:b7:d6:0b:
30:af:c7:a0:a0:ef:0f:e4:1e:f7:47:fd:3c:a9:49:
69:4a:f4:8a:2a:9e:22:d0:90:a2:d1:fc:35:51:99:
a7:a4:e5:69:ad:1f:1f:33:5d:b0:2a:9b:90:e5:64:
b4:0c:d4:9d:70:84:d8:fc:9a:e2:71:ac:f7:86:2a:
7f:ae:ec:09:58:a9:31:5e:f4:08:af:2b:b3:68:32:
4d:28:35:1a:45:ff:b9:c3:bd:f6:ad:31:ca:c1:c9:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1E:2B:37:05:B0:27:52:76:7E:88:7E:64:F9:99:C5:E9:ED:0D:95
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/Qh4rNwWwJ1J2foh-ZPmZxentDZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.185.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c0:79:b0:df:02:f2:e0:a9:f1:9c:99:50:0d:52:55:2d:91:
db:c7:22:38:77:fe:7c:c1:e5:bb:21:56:7a:4b:73:7d:02:c4:
e3:30:01:b7:7b:1d:ee:6a:fb:d9:2f:aa:6c:03:40:fa:34:38:
a3:ef:75:37:36:86:89:35:13:3c:5f:18:6a:c8:15:d9:35:72:
64:a1:9e:1d:8e:84:45:bc:a7:a3:7b:00:39:e5:ca:37:0c:64:
ad:4f:7e:be:84:2d:c1:f5:5f:ce:9d:5a:b4:a0:42:f6:e7:87:
3b:ff:3d:65:9b:a3:ef:b5:b8:4c:01:fb:35:88:80:4d:35:c3:
02:5e:1c:ba:77:d7:66:70:26:52:a2:55:0e:f2:e5:8f:30:67:
b6:38:09:8e:14:80:bc:82:d2:0d:49:01:b2:22:a3:e3:b0:38:
af:71:45:59:c3:46:92:9c:cc:76:cd:76:09:38:eb:0a:85:4b:
4e:83:f3:de:68:9a:44:fb:0d:91:8b:ac:29:6e:a1:e5:a6:5f:
a5:9a:92:1b:a0:7c:8f:39:60:a5:42:b4:3d:71:1f:29:2c:cd:
5e:8a:e1:cf:c8:99:3c:4e:58:c8:82:88:0f:d4:c8:f4:c1:25:
13:b8:30:64:70:ab:00:7e:6f:d2:38:a8:c1:c5:ae:1c:ec:3b:
fe:ea:ab:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:22 2023 by rpki-client on console-ams.rpki-client.org