Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/J4iCcjQqnBL-SPmCIrJ62-f-2eY.roa
File: J4iCcjQqnBL-SPmCIrJ62-f-2eY.roa (raw, json)
Hash identifier: /pD5dzZGy13vBJzz3aKBJVsstp1ByR7/QiJgHBAmMN8=
Subject key identifier: 27:88:82:72:34:2A:9C:12:FE:48:F9:82:22:B2:7A:DB:E7:FE:D9:E6
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 0954902C
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/J4iCcjQqnBL-SPmCIrJ62-f-2eY.roa
Signing time: Sat 01 Jan 2022 04:02:26 +0000
ROA not before: Sat 01 Jan 2022 04:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7155
IP address blocks: 185.136.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156536876 (0x954902c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Jan 1 04:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27888272342a9c12fe48f98222b27adbe7fed9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0c:09:6f:b4:1d:9d:2f:83:19:5c:d5:5d:c6:
8a:a4:2a:96:a3:6b:c9:be:7f:c3:36:78:2c:ac:9e:
1e:ca:39:4a:91:a7:06:bb:f8:6a:1e:c6:b6:a4:e9:
bd:e9:d1:bf:d4:c0:dc:d4:7d:3a:1c:e2:91:b3:b9:
cb:43:88:ff:46:78:1d:25:21:4b:5c:10:6d:50:8f:
ff:81:f8:29:a5:25:7e:ec:4a:79:16:74:0c:16:17:
ae:80:de:25:e0:89:3f:fd:56:5c:6f:50:7e:5e:ab:
9f:be:cb:db:32:19:1f:d3:df:b7:85:4c:13:b4:14:
35:cf:cb:2f:82:b8:bf:08:2b:c9:5a:aa:48:26:03:
09:63:53:a2:6c:eb:06:99:d2:5a:46:b9:8d:a2:2f:
b7:77:8e:2c:46:0c:3f:51:9d:6c:11:9f:37:85:bd:
aa:70:fe:ac:7a:dc:c9:79:20:df:bc:e1:30:d0:54:
39:1e:be:38:8f:29:a2:ea:f9:1d:87:49:d9:b0:aa:
62:e0:c1:4a:37:1a:9d:52:a7:8e:3c:ce:36:15:5e:
e9:7e:86:d6:f2:a6:a1:8a:43:0b:5a:49:95:b0:32:
db:09:00:cd:bc:85:21:fa:1b:84:cb:d6:df:af:02:
bc:8e:a6:85:c0:ac:5c:3e:42:ac:41:5e:fc:4a:1d:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:82:72:34:2A:9C:12:FE:48:F9:82:22:B2:7A:DB:E7:FE:D9:E6
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/J4iCcjQqnBL-SPmCIrJ62-f-2eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.44.0/22
Signature Algorithm: sha256WithRSAEncryption
31:d7:73:51:d4:98:94:fb:10:d5:db:83:9f:27:f3:97:fd:28:
7d:51:68:c9:96:c4:e1:93:29:7f:6a:4e:08:cc:63:7e:57:62:
57:1b:89:e4:2a:eb:8c:20:be:33:3a:c4:c6:b6:4e:48:55:bb:
11:c0:a1:0e:b4:04:4a:6d:de:d6:9d:da:48:a9:b6:eb:d7:22:
8f:e4:eb:0c:4d:db:6b:cf:d2:e0:26:86:4f:75:ff:e2:5b:a8:
4b:6a:be:62:7e:7e:00:e7:9a:8a:b8:e0:26:c3:3f:a0:de:a2:
e5:85:d6:81:8f:79:c6:d9:5d:26:22:61:03:07:d5:43:c5:67:
bf:4a:26:79:f5:e5:a0:da:d8:81:df:29:41:8f:ee:0e:d2:de:
84:67:d8:34:d8:81:b6:7e:63:f1:16:da:91:b6:9b:ec:31:2b:
c4:ac:0d:67:ca:fa:cd:43:17:c2:fe:58:6a:f8:8d:5e:10:e4:
06:06:9d:8f:eb:37:19:ec:4b:59:3a:a7:7d:8f:aa:30:14:e1:
e0:24:73:e3:da:73:ee:a4:11:1a:ba:e5:38:54:ed:d1:53:06:
96:04:56:03:6d:c4:4d:67:3e:7c:b7:b1:64:30:df:7b:97:19:
97:f9:27:2e:26:e1:af:43:ac:1a:f7:54:79:1b:3b:39:be:41:
0b:f4:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org