Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Snt3ONp0KtLEGX0B4yL-4v1_p7w.roa
File: Snt3ONp0KtLEGX0B4yL-4v1_p7w.roa (raw, json)
Hash identifier: kOMTl2Wyyjb9y3VaO+Js8HLK1oti2+jfrfordTTpLmk=
Subject key identifier: 4A:7B:77:38:DA:74:2A:D2:C4:19:7D:01:E3:22:FE:E2:FD:7F:A7:BC
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 02E6AE67
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Snt3ONp0KtLEGX0B4yL-4v1_p7w.roa
Signing time: Sat 01 Jan 2022 15:59:47 +0000
ROA not before: Sat 01 Jan 2022 15:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201341
IP address blocks: 185.148.106.0/23 maxlen: 23
92.63.200.0/23 maxlen: 23
185.176.24.0/24 maxlen: 24
185.148.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48672359 (0x2e6ae67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 15:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a7b7738da742ad2c4197d01e322fee2fd7fa7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:7c:ae:b2:16:41:b4:9a:f4:44:bb:aa:51:
a9:4c:bb:57:2a:8c:1e:98:85:fd:b1:28:f1:43:8c:
28:64:eb:41:52:30:36:c8:bc:ea:78:40:cd:43:1b:
66:93:f3:23:93:96:5e:35:04:5a:a9:2d:a7:67:e6:
75:91:93:58:4a:c1:23:c8:a3:b2:07:33:7b:2c:e5:
36:39:4f:ec:be:6b:05:9b:99:12:f9:8b:cb:e0:e9:
39:2d:6a:8d:97:34:d8:75:2d:ff:6b:20:c5:29:e3:
b0:54:fa:6a:22:c8:c7:5f:dc:9a:0b:9e:e9:55:2c:
b0:34:a2:41:c4:50:50:e7:20:fb:46:65:9e:83:aa:
7e:58:f9:c3:f0:0b:ce:2a:d6:c7:d2:56:a6:de:6f:
b3:b4:99:cc:7a:7e:0a:8b:0e:40:b5:27:65:b9:4f:
da:42:cc:6b:49:9b:9d:72:dd:77:21:32:a4:97:8b:
36:a5:8a:dc:03:9e:da:c3:cc:21:45:c2:aa:bd:8e:
ff:ac:70:e8:3e:74:41:ca:e4:05:d1:e0:86:51:e9:
82:19:00:ed:f1:66:02:7f:f9:46:b6:4f:34:63:26:
f6:d0:b6:9c:30:95:18:d9:c8:25:bb:00:9e:17:49:
0b:c1:57:0e:ee:1d:4d:17:7d:91:7f:d4:3b:7f:e4:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:77:38:DA:74:2A:D2:C4:19:7D:01:E3:22:FE:E2:FD:7F:A7:BC
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Snt3ONp0KtLEGX0B4yL-4v1_p7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.200.0/23
185.148.104.0/22
185.176.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e3:df:37:16:2f:cb:f5:c9:f0:29:36:50:61:84:05:ee:de:
b4:37:9c:80:d2:76:9d:b8:02:fc:16:f3:9f:5c:e8:8c:1b:da:
b6:8e:3f:ff:a8:b2:6d:0c:76:3d:c9:1a:d5:ae:eb:a4:5b:85:
9d:ae:ae:da:95:17:e4:8f:66:5f:c0:45:e3:ea:c7:06:f8:a1:
16:50:79:34:57:44:45:0c:d8:b7:72:2e:66:2c:5a:2c:53:b5:
e8:17:77:e2:f0:4e:c2:0a:24:f7:de:3e:6c:d1:df:3e:6c:7e:
68:8a:a8:3b:8c:eb:96:da:6a:2d:f4:03:71:0a:ac:92:a7:02:
3e:11:e0:a7:c5:c6:6c:79:9f:c4:67:bb:49:fb:d2:29:26:49:
76:46:cc:4f:09:56:45:1a:6a:70:cc:ad:53:76:8d:19:e1:11:
cb:b4:02:99:87:62:ee:b9:2e:e6:ed:61:99:03:34:13:f1:f9:
81:d5:0e:7d:1f:08:97:0a:cb:f2:f7:09:e0:58:e1:fb:7e:da:
68:90:12:0e:65:56:b7:45:2b:30:21:31:97:9c:50:de:d7:29:
d0:59:67:c2:2f:23:c9:da:f3:85:55:39:c3:3f:3d:a4:db:39:
ec:7c:e5:14:15:33:09:46:44:eb:c8:bc:d2:ab:b1:79:71:4c:
e3:69:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:01 2023 by rpki-client on console-ams.rpki-client.org