Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/yWA396P855iUN0uW0A_zt0530hc.roa
File: yWA396P855iUN0uW0A_zt0530hc.roa (raw, json)
Hash identifier: ppAQak2TDs+xWb4Tl2Gj9CQH7j4Vi+7JOJr5prwMCBA=
Subject key identifier: C9:60:37:F7:A3:FC:E7:98:94:37:4B:96:D0:0F:F3:B7:4E:77:D2:17
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 1957C46D
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/yWA396P855iUN0uW0A_zt0530hc.roa
Signing time: Sat 01 Jan 2022 05:53:57 +0000
ROA not before: Sat 01 Jan 2022 05:53:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199837
IP address blocks: 185.44.212.0/22 maxlen: 24
2a04:9f00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425182317 (0x1957c46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Jan 1 05:53:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c96037f7a3fce79894374b96d00ff3b74e77d217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:1a:0e:20:17:d6:b2:a2:3c:e4:e7:9b:f4:
d8:c4:a8:38:7b:6d:f3:64:cb:d3:26:d5:de:53:64:
78:0c:71:22:b8:5b:f0:52:5a:48:a6:23:4b:d3:86:
08:c4:43:77:e1:38:3a:b8:ce:08:15:16:c1:03:99:
27:18:2f:a8:95:53:5b:6a:cf:0d:d7:9b:71:f2:bd:
f5:0c:46:17:76:d2:c7:0f:b1:7d:8d:91:0e:a0:8a:
d1:94:4c:79:e4:3c:b3:26:c1:38:6d:80:d3:bd:a7:
ef:87:b2:df:7e:dc:03:56:09:44:ce:27:af:6f:1f:
46:ed:b8:da:4f:bb:c2:39:0a:01:c2:2f:2c:ce:66:
4e:22:b2:fa:9a:de:d4:4e:35:b2:af:4e:b6:41:c0:
02:38:c2:f2:3f:20:c7:98:35:af:05:ee:ad:1a:1c:
f9:49:7f:65:f5:c4:3c:8a:08:cd:4d:f3:bf:fe:45:
a9:87:e1:a6:ab:52:73:86:0d:f8:28:d1:67:e8:93:
09:86:3d:f3:68:32:13:00:e2:bd:c4:bb:57:67:c1:
cf:cd:2d:60:b7:55:f0:25:38:df:ac:7b:e4:b6:98:
e8:56:e3:5b:89:3a:8f:44:ab:d7:6e:f6:78:8b:1b:
8e:7b:02:36:9b:f4:47:ce:ae:64:cc:57:4f:b0:f5:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:60:37:F7:A3:FC:E7:98:94:37:4B:96:D0:0F:F3:B7:4E:77:D2:17
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/yWA396P855iUN0uW0A_zt0530hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.212.0/22
IPv6:
2a04:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
54:8d:d2:16:29:87:29:ef:24:4d:9c:65:6d:0f:7f:8a:29:bd:
38:e7:68:d3:a5:9f:af:5d:93:b8:ce:58:90:c1:e4:41:64:08:
9f:f4:d6:31:30:d7:6c:9c:40:9f:e7:bf:6e:4e:0f:ce:d9:a7:
eb:f0:44:b0:a5:56:50:5c:06:2f:f0:9c:b6:1a:d7:19:e5:6b:
f7:02:2b:96:a3:46:22:62:c2:cb:03:9a:37:89:16:b1:99:a6:
2b:bb:84:2b:57:07:dd:59:39:7b:19:5b:4e:14:09:15:a3:77:
13:02:4c:a3:bd:c3:4a:a7:89:20:a9:a9:93:55:3f:d3:92:5a:
4c:8f:60:57:c7:44:2b:09:96:f7:f1:bb:fd:75:ad:3b:e0:34:
19:18:41:9c:f5:3e:b9:8e:31:57:26:72:df:0e:52:c4:8d:7c:
7e:cb:4e:01:35:50:79:5a:85:8a:6e:65:62:d4:9c:6d:a8:91:
c2:b2:48:cf:cf:23:ee:2c:4d:d7:0a:ee:16:a5:8b:ee:35:62:
7f:64:99:a5:cf:37:06:7c:74:17:d5:9c:8d:71:89:d8:88:35:
fe:cb:03:ac:e7:d7:48:fb:44:da:93:3d:5a:38:38:01:e6:c9:
75:c6:85:0e:ff:7f:3e:16:0a:fb:1c:2f:99:20:93:5d:b6:ad:
35:3f:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:25 2024 by rpki-client on console-ams.rpki-client.org