Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/OkWLkOO3kdkARpCG0rmORtNvzoo.roa
File: OkWLkOO3kdkARpCG0rmORtNvzoo.roa (raw, json)
Hash identifier: fmSA5/LdKyIxzwx2ZYkemCSf6Yo83J39hcaIus013d0=
Subject key identifier: 3A:45:8B:90:E3:B7:91:D9:00:46:90:86:D2:B9:8E:46:D3:6F:CE:8A
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 03598AC5
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/OkWLkOO3kdkARpCG0rmORtNvzoo.roa
Signing time: Sat 01 Jan 2022 11:57:55 +0000
ROA not before: Sat 01 Jan 2022 11:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43685
IP address blocks: 185.183.244.0/22 maxlen: 24
2a0b:2280::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56199877 (0x3598ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 1 11:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a458b90e3b791d900469086d2b98e46d36fce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:9a:ff:d7:5e:06:49:12:fb:1b:a2:7a:39:
62:25:e4:e8:73:73:2d:ac:fc:47:d8:93:ef:af:fb:
77:de:7c:c9:3e:17:16:a8:31:c1:73:3f:0d:a0:1f:
09:db:a4:e7:3f:76:6e:ce:33:0e:d9:00:16:77:ac:
1c:cc:8a:39:b4:1c:7b:14:7f:4f:38:9e:c7:64:44:
76:e8:b9:c6:81:ad:61:6d:de:41:0b:f3:be:10:53:
79:35:10:36:e2:47:01:ae:b2:ba:e6:af:b0:b7:ff:
93:74:95:80:d7:80:24:19:99:dc:21:a9:2b:11:6e:
5d:ae:b0:3f:f6:66:73:77:73:28:1d:89:31:49:f2:
84:54:f6:9a:c4:b5:36:34:d9:08:57:9b:5d:34:93:
cf:8f:54:2f:5e:af:00:23:3c:eb:11:8f:60:d7:fb:
27:c4:03:b5:b4:d4:8e:71:82:35:48:54:16:6d:18:
c7:74:2a:7c:6f:77:10:09:36:58:57:8c:89:4e:1f:
b8:4a:21:77:47:8f:04:ad:a6:8f:d0:1f:27:22:ba:
bf:92:58:5d:fd:7a:d7:0e:2f:a9:1d:45:73:c3:aa:
c2:81:cd:13:a8:00:cb:1f:0f:3c:db:30:a7:04:c8:
67:23:3c:d4:49:52:e7:55:d6:8d:bb:11:a1:ec:b9:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:8B:90:E3:B7:91:D9:00:46:90:86:D2:B9:8E:46:D3:6F:CE:8A
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/OkWLkOO3kdkARpCG0rmORtNvzoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
IPv6:
2a0b:2280::/29
Signature Algorithm: sha256WithRSAEncryption
3b:b2:e9:47:69:55:53:94:45:72:8f:1b:64:b2:8c:32:0e:84:
33:38:f1:9b:0f:db:69:0f:c0:33:14:e9:cf:b7:e7:a1:32:e7:
18:10:a2:e8:d9:10:9e:c6:2e:d6:6d:19:ea:f0:23:4f:57:97:
05:11:61:58:24:6f:62:25:ab:e5:f1:94:49:36:73:98:4f:0e:
de:a3:82:44:f2:19:ec:7f:73:fc:81:68:07:bb:30:66:a7:f4:
e7:7e:09:46:df:40:9f:9d:29:55:c7:ff:9e:01:46:7f:48:8c:
48:aa:f5:83:7d:d7:a4:55:0b:3a:86:59:83:64:87:b4:b6:e5:
2d:93:2e:1f:a1:b0:9e:62:bd:22:f7:d6:5c:e4:fd:96:06:4e:
d5:72:6a:f1:70:da:32:8a:e7:d4:95:21:1a:d5:d1:df:d0:4c:
ff:50:3d:b3:bd:74:4a:6a:db:62:80:09:05:d8:39:64:57:51:
8f:2c:2c:f9:2e:68:90:ee:2f:a9:00:e5:b0:df:90:e6:29:76:
65:b2:a0:ab:cb:6f:01:e6:b3:e9:93:27:fc:6d:a5:12:c3:55:
84:2b:d1:88:81:35:58:be:ee:2e:1b:48:dc:4e:03:bd:c0:97:
3a:a8:8d:24:3e:62:a7:0a:fd:50:51:ad:7d:75:45:8e:f5:08:
c1:e0:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:54 2024 by rpki-client on console-ams.rpki-client.org