Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/nWAkUKnj1Z_tZvPcuxgPYwOECRQ.roa
File: nWAkUKnj1Z_tZvPcuxgPYwOECRQ.roa (raw, json)
Hash identifier: S6Rst56HQzpT2nRxSAiOtkHXlCmeQ/kv7soUfrygUKY=
Subject key identifier: 9D:60:24:50:A9:E3:D5:9F:ED:66:F3:DC:BB:18:0F:63:03:84:09:14
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 04A65DBF
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/nWAkUKnj1Z_tZvPcuxgPYwOECRQ.roa
Signing time: Sat 01 Jan 2022 08:56:58 +0000
ROA not before: Sat 01 Jan 2022 08:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42487
IP address blocks: 185.173.200.0/22 maxlen: 22
2a0e:e080::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78011839 (0x4a65dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Jan 1 08:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d602450a9e3d59fed66f3dcbb180f6303840914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:cc:8e:be:1a:78:88:14:b0:13:2c:b8:10:
42:37:33:98:18:8d:57:42:8e:8c:7c:b8:84:17:ce:
bc:ad:21:ec:aa:4e:97:1c:8a:db:91:5c:7f:28:9a:
e7:11:c2:32:3e:08:e4:e7:65:c0:ed:50:bf:b8:95:
3b:4b:bd:83:21:0a:f3:f4:bf:fa:40:a0:bf:1f:0c:
f4:88:fe:21:23:d9:13:e6:f8:af:b4:1e:fa:6b:8a:
71:7c:2b:82:7c:24:cd:d7:53:dc:2f:d8:a6:6b:55:
05:3d:e3:9f:ed:5c:bb:27:eb:06:32:43:7d:31:53:
14:1d:83:a5:14:3a:db:7d:a3:e6:df:5e:61:fd:e4:
2a:f4:09:61:73:e9:ae:b4:d0:c4:7f:28:d6:4b:00:
8c:4e:84:ce:39:3c:cc:97:1a:ea:ab:24:99:7a:28:
b7:a3:29:5c:05:a4:ca:8c:78:cd:80:76:fa:43:ef:
39:07:37:54:94:ea:c0:e4:a4:56:23:f7:e3:1e:56:
22:7e:5e:50:ee:b6:6c:c0:df:db:89:8e:d6:80:fa:
cb:56:db:57:a8:9f:f8:7d:06:d0:09:05:72:cd:a2:
46:bb:6e:ab:09:91:5c:13:07:6f:27:21:21:30:20:
e6:34:ef:9c:9b:20:5f:da:99:41:93:d0:71:a4:a9:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:60:24:50:A9:E3:D5:9F:ED:66:F3:DC:BB:18:0F:63:03:84:09:14
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/nWAkUKnj1Z_tZvPcuxgPYwOECRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.200.0/22
IPv6:
2a0e:e080::/32
Signature Algorithm: sha256WithRSAEncryption
69:85:7a:33:ef:b7:5b:9a:94:29:74:4a:64:22:99:d7:fa:67:
12:de:1b:55:42:f4:d4:07:4c:5b:07:12:23:05:0a:e4:92:6a:
42:24:95:27:a4:fd:20:93:8a:78:7c:f9:a1:3f:8c:1a:8e:27:
83:f5:08:ae:b0:99:0c:88:43:8a:6f:02:f3:f0:ea:ac:2f:91:
cd:77:74:b1:77:30:79:a8:43:9a:75:72:b9:7c:9a:4a:4d:c8:
4c:62:d8:bc:fa:7e:39:07:3b:8c:6c:a1:7b:cb:4c:1c:04:cc:
05:10:56:94:e3:36:bc:b7:68:e7:fd:5a:cd:fd:ba:ec:99:70:
ec:52:54:3e:84:66:e8:f6:07:93:bb:fe:27:a5:c2:6b:a9:25:
89:cc:df:d5:21:50:9b:cb:48:5b:3f:6e:0e:fa:64:6b:a2:39:
85:ef:f3:ef:8c:de:48:c5:a6:6a:66:c5:0e:4d:af:31:ad:76:
6b:08:11:56:9f:8a:a9:5d:92:16:e8:3e:fe:75:db:64:1c:62:
9f:a4:96:ba:50:1e:33:05:43:51:cd:0a:9e:1b:3a:27:28:11:
49:9f:22:ff:d9:1a:dd:65:6d:97:19:7b:6a:a3:ac:b3:b0:5d:
78:4a:73:7a:c8:b3:4e:0e:a9:a7:d2:10:9d:b4:31:ea:2e:b5:
7d:1c:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:26 2024 by rpki-client on console-fra.rpki-client.org