Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oUPMQchy4FFEy9_GnFc7L_RNgJk.roa
File: oUPMQchy4FFEy9_GnFc7L_RNgJk.roa (raw, json)
Hash identifier: bjcfo2jGGc61o6F3v9FIuuVYfrUWqPguIT3bgyrjsAA=
Subject key identifier: A1:43:CC:41:C8:72:E0:51:44:CB:DF:C6:9C:57:3B:2F:F4:4D:80:99
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0182590DA7D136B7081CB5B5F8E26BF5E7A5
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oUPMQchy4FFEy9_GnFc7L_RNgJk.roa
Signing time: Mon 01 Aug 2022 10:57:23 +0000
ROA not before: Mon 01 Aug 2022 10:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 185.192.70.0/24 maxlen: 24
89.40.92.0/24 maxlen: 24
194.32.120.0/24 maxlen: 24
178.239.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:59:0d:a7:d1:36:b7:08:1c:b5:b5:f8:e2:6b:f5:e7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 1 10:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a143cc41c872e05144cbdfc69c573b2ff44d8099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:27:0f:c1:d9:36:89:1a:6e:5c:a8:f6:d2:
51:10:7d:f3:ca:7b:2a:5a:6f:9f:fd:8e:82:e6:33:
1a:c8:53:9e:e5:a5:86:32:ce:f4:a6:ad:dc:fc:4c:
5c:6a:2a:e4:93:ad:78:18:23:20:10:3c:48:6a:4b:
2f:e4:e5:e8:63:98:26:14:f2:7b:cd:1f:2c:76:bb:
36:88:a7:a3:c6:88:38:cb:23:b5:5b:ec:78:ff:5d:
b8:9f:38:47:aa:ad:41:ad:45:c3:3c:e8:80:fc:b4:
3a:71:35:4d:85:01:b5:db:72:3f:c1:4a:cc:49:bd:
b7:4d:1f:d1:a1:4c:c7:61:8a:a5:fd:50:86:22:ee:
94:1c:bc:11:c2:11:aa:23:d1:0c:4b:f2:e0:12:98:
dc:83:cf:8e:f5:02:13:c3:a3:27:3b:8a:a8:7b:40:
19:b3:a4:55:8a:15:26:06:1d:47:52:6c:b2:d0:b7:
74:b0:b6:1a:bb:96:d4:f4:2b:cd:4a:b8:69:1e:ae:
06:31:ef:da:aa:85:88:5b:26:de:eb:ce:07:73:94:
fd:2b:33:87:0c:c5:d5:99:59:0b:f6:d8:e3:f8:f4:
d8:f2:fb:c2:0c:43:87:31:3a:46:2f:a1:3e:76:7b:
af:7e:47:de:0b:f8:95:a5:61:b8:23:27:a0:11:6e:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:CC:41:C8:72:E0:51:44:CB:DF:C6:9C:57:3B:2F:F4:4D:80:99
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oUPMQchy4FFEy9_GnFc7L_RNgJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.92.0/24
178.239.198.0/24
185.192.70.0/24
194.32.120.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a1:e1:79:f4:a5:b0:40:7e:17:5d:bd:ae:38:9f:52:ea:8a:
c6:0b:33:bb:ee:67:bd:d2:06:c4:6b:f0:be:65:b9:e5:c7:91:
1a:d7:ad:55:c6:bf:53:d0:e2:b5:cd:02:c9:db:ae:82:b3:0d:
b0:4b:16:0c:02:38:23:2b:59:91:68:89:4c:e3:26:3b:f9:db:
ea:8f:ba:6c:38:0c:e9:40:b3:eb:b3:22:07:f4:90:bb:cd:6b:
04:f1:06:35:4b:25:20:41:6a:a5:d8:1a:ad:7e:58:69:f3:42:
a7:a3:b1:fd:89:b6:6e:92:31:f0:2d:e4:55:44:d9:43:64:87:
34:fc:a7:a3:54:e2:e8:0b:4f:cc:27:d3:c2:65:94:f2:1f:32:
da:30:7c:a6:63:cd:f1:a0:3a:52:1e:e8:45:d1:c8:7f:2d:95:
44:ff:80:40:6b:64:5a:3b:9d:36:85:fa:46:52:bf:e9:ff:d4:
d8:67:66:5e:e6:00:b5:5f:5c:25:85:bf:1c:e2:29:7d:9e:bc:
64:db:16:23:85:08:b3:13:4b:25:bc:46:24:71:17:67:e6:9d:
51:9e:9e:d5:32:5e:a7:9f:ce:1e:80:64:8a:73:f1:f0:ff:4d:
88:4e:cc:a9:73:67:59:c4:34:7d:bf:0d:fc:22:a6:3c:1d:13:
81:62:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org