Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/UTZnCgF6q3JIoZlwlhixeVp8W1w.roa
File: UTZnCgF6q3JIoZlwlhixeVp8W1w.roa (raw, json)
Hash identifier: 6U2Z1TJ9GTk5qToN/sBmo/+o94RZVEXs+fa8zoySWk0=
Subject key identifier: 51:36:67:0A:01:7A:AB:72:48:A1:99:70:96:18:B1:79:5A:7C:5B:5C
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0182F2FF6FB96391594303E02FEBF6C4B2A3
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/UTZnCgF6q3JIoZlwlhixeVp8W1w.roa
Signing time: Wed 31 Aug 2022 08:23:22 +0000
ROA not before: Wed 31 Aug 2022 08:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 185.238.84.0/23 maxlen: 23
185.238.87.0/24 maxlen: 24
185.238.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:ff:6f:b9:63:91:59:43:03:e0:2f:eb:f6:c4:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Aug 31 08:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5136670a017aab7248a199709618b1795a7c5b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:53:d1:b9:c7:82:28:d3:98:6e:c5:49:86:
d7:16:a4:89:56:34:3c:51:f5:0c:42:fb:29:c2:70:
3e:3b:c5:ea:92:96:6f:7f:52:a7:08:0e:f3:40:b3:
1f:ef:34:77:c5:3f:a4:41:a2:23:fd:f7:30:ed:9e:
94:1f:19:84:83:f5:24:49:ca:d2:87:32:d6:70:68:
29:b0:d3:0a:2a:0d:33:53:8e:27:e2:2b:32:1e:75:
30:0b:4e:06:23:c3:35:99:67:0e:20:98:75:29:5b:
44:06:cd:62:71:78:cf:20:de:0a:a0:b7:d4:e2:b0:
19:f5:42:eb:ee:46:d4:bc:66:45:f3:f6:67:46:da:
f5:67:76:7a:b6:2b:2f:75:03:60:1c:d7:7f:e3:03:
bb:62:2a:0e:e3:3c:29:9a:f8:cf:72:fa:22:e0:3c:
be:2f:b1:de:2d:75:3f:32:b3:70:58:dc:6d:2a:53:
3c:c5:f6:f8:b0:b1:bb:55:64:7f:95:fe:9a:bd:8d:
01:8c:df:8a:c7:28:5c:fa:c0:3d:97:36:a6:69:e3:
4b:98:fc:68:e3:f1:cc:e4:2d:31:e6:29:42:b7:1d:
a5:9f:d6:e1:19:cf:06:f2:9f:54:42:58:d3:7a:d7:
3d:2b:5d:66:e2:00:9a:6b:6a:24:8f:84:a7:fa:10:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:36:67:0A:01:7A:AB:72:48:A1:99:70:96:18:B1:79:5A:7C:5B:5C
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/UTZnCgF6q3JIoZlwlhixeVp8W1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.84.0/22
Signature Algorithm: sha256WithRSAEncryption
64:40:e1:de:49:8a:dd:e2:8c:f4:72:5d:78:53:09:cf:23:b6:
07:77:bf:03:d1:d6:8c:c1:12:e5:53:6f:60:87:f3:ab:57:30:
6a:44:10:41:f3:2a:7f:00:95:57:f3:51:0b:67:20:f7:b2:fa:
0b:09:a9:10:6b:50:5c:74:63:af:ed:a0:58:2f:85:6e:eb:5b:
b2:37:2b:fe:f5:a6:bc:f0:be:0a:b4:64:43:d4:11:0b:49:e6:
83:6f:94:93:1f:40:32:58:a7:31:8f:ed:da:87:62:c8:e6:22:
ce:b4:bc:c2:cd:88:70:0b:ca:d8:b5:1c:15:46:56:3d:c4:ae:
50:5a:7c:ef:1b:27:d4:53:2a:e7:75:75:02:f3:6e:d1:97:5a:
d1:d8:b1:aa:c8:a9:1b:1a:b4:68:30:18:dc:7d:d9:ea:53:e1:
c3:d2:fc:cb:35:0f:f3:43:b7:f8:cf:03:e4:c2:69:86:8a:1a:
8a:11:51:3e:00:3b:4e:6e:c0:2a:d9:e6:51:41:9e:32:a2:a5:
c1:97:af:d6:b4:88:35:33:96:8b:92:fd:93:c7:ce:35:3d:b0:
5f:59:e4:3a:b5:1e:58:b5:68:f0:90:b2:7c:7f:87:b5:8d:73:
60:52:53:18:b3:5b:ac:b1:9d:bb:8f:7b:5c:d7:47:e3:1d:8f:
fb:f4:36:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:22 2023 by rpki-client on console-fra.rpki-client.org