Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/K4jz8tEqYZAJa6cNSX386ooCclU.roa
File: K4jz8tEqYZAJa6cNSX386ooCclU.roa (raw, json)
Hash identifier: M869w28RupmT6kfLyqIQMc+aT+7FwSr0KceTsTSofFM=
Subject key identifier: 2B:88:F3:F2:D1:2A:61:90:09:6B:A7:0D:49:7D:FC:EA:8A:02:72:55
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 173DBC3E
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/K4jz8tEqYZAJa6cNSX386ooCclU.roa
Signing time: Sat 01 Jan 2022 14:56:49 +0000
ROA not before: Sat 01 Jan 2022 14:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198785
IP address blocks: 185.46.32.0/22 maxlen: 22
185.98.14.0/24 maxlen: 24
185.98.15.0/24 maxlen: 24
2a04:a7c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389921854 (0x173dbc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Jan 1 14:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b88f3f2d12a6190096ba70d497dfcea8a027255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:d0:c3:87:63:83:10:14:65:52:61:74:bd:
2f:fb:b3:93:9a:1e:fd:92:af:f7:7f:53:f1:b4:3e:
4f:f9:f7:6b:67:ab:a2:29:5c:6f:0b:5d:35:1f:87:
e8:64:cb:92:50:e7:75:9c:57:20:a8:d0:7f:aa:1e:
07:b6:aa:e9:df:40:53:29:ad:e2:88:f9:79:5b:64:
ae:f0:02:07:bf:80:bb:0e:7c:47:7b:3b:24:1d:cd:
7a:6e:4d:cb:a5:18:51:51:f7:81:09:19:40:53:45:
f9:c1:2e:57:3e:29:ee:7c:a0:a0:2a:0d:c2:4f:07:
23:26:52:17:5c:37:f6:48:04:03:a4:e1:c7:81:32:
01:bc:30:ed:a3:9d:d4:69:1c:4f:c5:5e:ea:8f:99:
11:e2:46:9b:30:1d:93:27:1d:0e:67:46:83:aa:40:
e2:fe:cf:ac:fc:db:45:0e:f5:bf:bf:d0:8b:5b:54:
b8:39:4f:7a:df:74:8d:99:79:d3:ee:18:9a:4c:2c:
ef:e1:eb:5e:ed:0c:11:2f:e9:ae:1e:49:3c:e9:83:
e2:da:99:7b:0f:b3:f0:cf:9b:1a:47:b6:bc:ef:fb:
20:ed:4e:e7:c4:ce:bb:77:b4:00:a9:cb:49:e7:02:
1d:62:9b:d3:80:49:23:bc:0a:ed:76:b3:a1:dc:d4:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:88:F3:F2:D1:2A:61:90:09:6B:A7:0D:49:7D:FC:EA:8A:02:72:55
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/K4jz8tEqYZAJa6cNSX386ooCclU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.32.0/22
185.98.14.0/23
IPv6:
2a04:a7c0::/32
Signature Algorithm: sha256WithRSAEncryption
28:9c:59:80:a3:3d:1d:df:d6:cd:6c:18:a3:58:28:b8:74:f8:
05:85:6b:f8:f1:98:b7:ea:79:a8:98:a4:3e:fa:1d:af:ad:c5:
9c:7d:13:ed:b6:24:dd:f7:94:be:34:4f:69:4a:a3:fc:71:4c:
0d:66:0f:6f:f3:38:22:47:67:05:69:25:a4:0c:66:dc:cc:c3:
dc:34:8a:86:2d:44:7e:a2:e0:e5:bc:6d:42:60:a7:9e:3f:8e:
67:6c:ba:fa:1e:cb:99:67:09:e8:2f:83:bd:36:0a:46:24:ef:
40:f0:64:2d:ad:02:92:9c:8a:e4:f4:d4:99:50:43:67:77:3c:
a9:b0:3e:a0:a3:44:d1:ae:d3:d2:fe:c4:34:a0:5e:d7:a4:a6:
62:5a:dd:90:ff:25:9a:89:6c:de:55:a6:93:da:eb:16:9c:7b:
dc:cc:29:59:49:40:da:04:40:a1:d2:0e:40:3d:02:87:bc:45:
ea:b1:01:f7:04:89:e9:d6:63:c3:0b:f6:33:e0:69:82:01:d7:
31:dd:d0:9d:b2:80:17:ee:ea:32:5c:f1:32:f6:6a:43:df:2b:
e2:9f:c2:bd:1f:21:78:22:55:82:9c:ce:d2:d4:60:a8:ee:6f:
45:18:67:8d:aa:ce:03:c6:01:76:65:59:d9:54:57:d5:f9:9a:
e1:e6:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org