Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/cWSCQK71rmvRLjNPkYU6ttj_-4s.roa
File: cWSCQK71rmvRLjNPkYU6ttj_-4s.roa (raw, json)
Hash identifier: Ra0I5jj7wSe+7xFION/oBqel5tDdl2s6P4ZVAA+NLys=
Subject key identifier: 71:64:82:40:AE:F5:AE:6B:D1:2E:33:4F:91:85:3A:B6:D8:FF:FB:8B
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: BC888C
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/cWSCQK71rmvRLjNPkYU6ttj_-4s.roa
Signing time: Sat 01 Jan 2022 10:02:51 +0000
ROA not before: Sat 01 Jan 2022 10:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 185.150.177.0/24 maxlen: 24
185.150.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12355724 (0xbc888c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jan 1 10:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71648240aef5ae6bd12e334f91853ab6d8fffb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:cf:79:a2:7d:7d:3c:ad:75:ec:73:b8:c2:
3c:3d:b7:fe:62:1c:89:f2:be:89:66:2b:e5:e2:d4:
50:40:1e:f0:af:b9:9b:c6:ec:8c:c9:28:f2:bc:20:
f9:ec:33:08:ad:65:82:10:c7:4a:98:86:74:ff:c6:
1a:a4:2b:0b:b9:37:05:b4:a7:24:3a:8c:83:92:2f:
40:f8:3f:4f:10:54:7e:a1:f9:7b:6f:67:70:fb:43:
82:ff:32:5f:c3:2d:f9:ab:01:42:6c:58:c8:3a:a9:
0b:59:bc:ca:ab:e8:9d:da:13:66:b6:ed:9a:9e:0e:
61:12:b1:8e:09:b8:3b:7c:53:b0:98:25:c3:d6:64:
1b:46:19:a5:c8:65:73:a2:89:dd:98:d6:bd:dd:d6:
b5:36:b1:9d:4f:0c:98:2e:70:85:57:4c:fa:2c:e8:
13:0f:34:e9:b2:13:bb:6f:b0:da:10:85:e0:52:3e:
50:3f:27:a9:00:f4:64:bc:e3:65:84:4f:97:8d:bb:
72:58:6d:b8:4a:65:05:87:3b:5f:62:eb:51:a8:53:
3c:4c:fd:b8:5e:13:66:ca:85:bd:58:6a:a6:67:df:
a7:22:ed:d1:2e:fe:39:1c:db:b3:bc:69:fa:6c:ba:
d6:0e:2f:71:70:01:29:15:5c:be:45:9d:04:c7:2e:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:82:40:AE:F5:AE:6B:D1:2E:33:4F:91:85:3A:B6:D8:FF:FB:8B
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/cWSCQK71rmvRLjNPkYU6ttj_-4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.176.0/23
Signature Algorithm: sha256WithRSAEncryption
77:cb:a7:64:05:b1:a0:9e:b1:69:ac:05:96:35:46:3e:81:40:
e7:0c:1f:79:0b:5d:a9:bf:74:c6:f7:f4:0c:04:2a:df:0e:2a:
d0:cb:7f:aa:1e:21:39:53:ca:dd:4c:d2:b5:f1:b8:df:47:77:
2a:30:af:dd:52:e5:2a:ca:e7:af:73:bf:04:2d:6d:04:18:5c:
f9:a7:b6:7c:91:a2:50:31:a8:c4:ea:bd:f5:76:1f:bc:68:33:
70:aa:ec:df:55:99:90:fe:0f:09:16:03:34:5b:71:93:7e:7e:
03:32:a5:eb:a9:64:7e:78:aa:dc:0a:ea:6b:ac:45:c0:d4:0d:
6d:c0:2a:d1:89:a0:54:cf:fb:1f:9c:c3:11:2c:7e:90:ad:22:
b4:6c:94:68:2d:77:a7:5d:20:51:40:85:67:e1:82:7a:8a:85:
73:9f:3e:e7:bb:f0:63:72:a5:89:a1:55:06:fd:96:da:88:1d:
5b:9f:f7:67:6e:ca:f4:e8:1d:a0:c7:7d:34:7e:f6:c3:8d:b6:
8f:38:09:7a:0f:df:26:ec:78:e8:3f:1c:e4:aa:64:9e:1c:62:
e6:3e:2a:65:a9:2e:f9:46:78:ad:12:69:cb:35:02:d1:63:72:
ff:a4:77:c4:23:1c:d8:5a:33:38:a7:73:85:7c:69:1e:03:63:
0a:08:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-ams.rpki-client.org