Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/e1PzcksTDLHF9N-Cbsq367gw31I.roa
File: e1PzcksTDLHF9N-Cbsq367gw31I.roa (raw, json)
Hash identifier: 609yEB4TwwPE447W4ivPQ6wFZso1nFVImnV17BDX3Yk=
Subject key identifier: 7B:53:F3:72:4B:13:0C:B1:C5:F4:DF:82:6E:CA:B7:EB:B8:30:DF:52
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 0185582A8DF2CB5B7A21BFCBEFCC97465A7B
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/e1PzcksTDLHF9N-Cbsq367gw31I.roa
Signing time: Wed 28 Dec 2022 09:57:41 +0000
ROA not before: Wed 28 Dec 2022 09:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44108
IP address blocks: 185.179.148.0/24 maxlen: 24
185.179.149.0/24 maxlen: 24
185.231.164.0/24 maxlen: 24
185.231.164.0/23 maxlen: 23
185.231.164.0/22 maxlen: 22
185.231.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:2a:8d:f2:cb:5b:7a:21:bf:cb:ef:cc:97:46:5a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Dec 28 09:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b53f3724b130cb1c5f4df826ecab7ebb830df52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:d1:63:64:bf:c9:f3:fb:69:a1:db:b0:ee:
10:4d:d5:c9:21:14:01:d9:a1:2b:94:f2:85:7a:c3:
86:bc:18:20:06:67:d1:da:52:a2:a7:78:1f:f2:3d:
6f:20:b8:aa:af:27:60:51:b3:0f:6d:63:3d:69:cb:
14:67:60:bc:93:ec:84:e1:94:68:87:6a:b5:7b:b4:
80:47:4c:49:55:a8:24:67:2f:98:d5:2f:f5:08:33:
79:68:b4:27:12:32:6f:bf:62:56:9b:4d:37:8a:9d:
84:1b:c1:40:ba:3e:b6:df:74:f1:11:5c:f6:de:49:
75:65:42:0f:8c:be:ca:08:79:ff:5f:f9:90:35:a6:
cf:bf:fd:dd:79:95:30:8b:fc:04:96:b3:79:ef:02:
86:af:a7:7b:20:85:49:9d:57:6e:ad:2f:9d:84:7f:
c8:e3:5c:69:bd:96:81:bb:7a:0c:61:bc:c3:a4:b5:
80:fa:6c:41:08:e1:ea:18:29:6c:d1:ce:11:41:c4:
1a:46:07:31:4a:b5:04:ad:6d:b3:94:03:32:45:62:
98:68:60:5e:57:75:13:9e:cd:3c:b8:8b:58:c2:de:
b1:32:b1:f9:bc:3d:0b:4f:35:1b:4f:8c:ca:80:34:
34:c3:7c:29:fa:a5:57:14:62:ab:6d:bd:08:79:31:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:F3:72:4B:13:0C:B1:C5:F4:DF:82:6E:CA:B7:EB:B8:30:DF:52
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/e1PzcksTDLHF9N-Cbsq367gw31I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.148.0/23
185.231.164.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:b5:1f:ad:8d:87:2b:e4:ea:3b:82:7c:5e:36:9b:fc:42:31:
55:c1:d0:e5:c5:23:00:45:3d:32:b6:82:be:92:d9:f5:ee:c7:
de:e4:9d:98:60:be:6d:62:ff:d1:f6:ae:00:25:97:7d:3e:0d:
7c:16:1d:fa:10:da:65:ff:da:14:d5:0d:f5:7e:f4:0b:c2:69:
11:e6:54:ad:55:b9:fb:26:af:c2:41:3a:6d:f2:e5:44:2d:32:
a6:c5:c1:72:ad:42:93:46:37:93:c3:ab:c3:7e:44:d1:2e:8d:
ce:5f:5f:1b:06:db:b3:c1:31:5f:23:a2:dc:69:03:56:7d:34:
9e:b2:13:c0:1d:20:f5:9b:77:a3:37:7d:6b:3e:1b:0e:23:64:
83:5b:6d:34:29:a9:4d:83:74:d6:1c:8d:41:eb:36:dd:ff:f1:
12:2b:24:52:ca:3c:b9:2d:b6:c2:ca:c1:17:98:be:a1:2c:57:
55:67:81:5a:23:1d:1f:d5:c1:16:76:25:39:22:e8:14:5f:8c:
84:7a:bf:e0:ff:ec:6b:7c:3b:54:db:c9:01:d2:cb:fc:b0:e3:
e3:05:6e:7a:89:59:43:6d:bf:7d:2e:de:43:83:8c:05:e4:57:
85:c2:d2:2e:c5:0e:23:44:72:c9:c8:58:b4:33:f3:d5:b3:ca:
fc:42:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org