Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/JawrnlzZC1dUzONllmkznerDqI8.roa
File: JawrnlzZC1dUzONllmkznerDqI8.roa (raw, json)
Hash identifier: aThAjQYt866vAji5h6ZcU0Ynb5YxCuELC8OBok23aiI=
Subject key identifier: 25:AC:2B:9E:5C:D9:0B:57:54:CC:E3:65:96:69:33:9D:EA:C3:A8:8F
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 025872
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/JawrnlzZC1dUzONllmkznerDqI8.roa
Signing time: Fri 14 Jan 2022 23:01:56 +0000
ROA not before: Fri 14 Jan 2022 23:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201730
IP address blocks: 185.173.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153714 (0x25872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Jan 14 23:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25ac2b9e5cd90b5754cce3659669339deac3a88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:f0:be:5e:13:f6:d9:aa:9b:f2:c8:94:d0:
d4:80:e5:c8:d3:a1:06:0a:84:db:a2:17:b8:68:36:
bc:37:5b:0b:f5:74:2c:42:0a:74:be:5c:2c:3b:61:
b3:c9:90:3c:5b:28:34:2c:cb:c3:8a:15:19:b7:d0:
bc:4b:fa:ab:9a:51:cc:85:48:17:e2:3a:78:ca:0e:
b8:31:1b:49:8e:82:77:53:ff:01:a8:db:4f:34:2b:
e3:42:36:fa:c2:98:f0:6d:53:2d:35:61:cc:8a:3d:
8c:03:f3:53:1f:a6:be:61:e1:f1:33:c9:9d:75:5e:
3f:6d:65:ad:ef:f2:2e:b0:ed:40:94:00:c9:38:f8:
0e:34:c9:42:36:12:bf:6e:72:21:fb:fa:ee:41:c8:
09:14:f6:10:80:8f:29:30:d0:3e:c0:47:35:7a:63:
7f:85:fc:c1:6b:ad:ab:4b:47:db:ec:a2:66:f3:22:
74:db:a6:d8:29:9d:a9:dc:cf:4f:ec:99:f9:08:fc:
40:96:7d:a2:75:0b:da:5e:22:22:af:36:09:6f:f6:
b2:f1:e5:3f:79:65:7a:37:43:0f:58:b2:06:aa:e0:
4f:63:04:f7:ef:75:b3:ac:32:51:9a:eb:3e:18:79:
2e:c1:e6:f5:dd:66:82:b7:cd:8d:c8:23:4f:e3:42:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AC:2B:9E:5C:D9:0B:57:54:CC:E3:65:96:69:33:9D:EA:C3:A8:8F
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/JawrnlzZC1dUzONllmkznerDqI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:cc:7c:1c:60:74:08:4c:b1:ac:cb:41:db:d9:70:99:82:c0:
b6:4d:4b:e0:a2:c3:6a:d0:73:77:c1:e6:90:2f:3d:5e:43:50:
9b:c5:e1:a3:e6:35:48:51:ee:c0:c3:1c:03:59:71:0a:65:3c:
89:28:74:1e:00:99:da:bd:c6:96:4d:1d:bb:c4:8b:b7:42:9e:
ea:ee:f1:a8:21:99:fb:69:34:94:ef:92:99:89:e9:c5:cb:42:
21:69:ab:bd:f8:f8:bf:ac:43:3b:81:e0:5d:e7:0f:90:15:6a:
42:0b:0f:c0:57:a2:a8:27:d7:f6:6d:e8:41:a4:bf:ab:5f:ba:
c2:fd:fa:11:48:46:9f:b5:e9:61:3b:7d:e7:9a:4b:41:35:e7:
42:f8:61:9f:df:87:2d:85:f2:fc:46:a2:4b:d3:e1:cb:74:47:
37:c4:65:17:7a:fb:dc:9e:1a:a0:d7:11:21:09:53:d4:83:d6:
d5:9c:5e:d8:ca:f6:cb:8c:0a:90:c5:5b:fa:e3:97:4a:10:c0:
47:d6:f1:bc:b7:ca:82:b5:ff:7f:d1:3a:dd:dd:f4:12:76:97:
fb:ba:61:b7:d4:4d:62:69:40:ad:9b:dc:f9:23:95:b5:f8:66:
7b:07:4d:2b:25:2a:eb:cb:c8:90:f8:9b:5c:b5:53:cc:90:93:
37:d9:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:03 2024 by rpki-client on console-fra.rpki-client.org