Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/wk30DhUbWi7HQpGfpfwl_rBa648.roa
File: wk30DhUbWi7HQpGfpfwl_rBa648.roa (raw, json)
Hash identifier: d3WyuQigWjAj5DvRzolT0uBPenXbObcvxAu5YaZiKDQ=
Subject key identifier: C2:4D:F4:0E:15:1B:5A:2E:C7:42:91:9F:A5:FC:25:FE:B0:5A:EB:8F
Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial: 7635
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/wk30DhUbWi7HQpGfpfwl_rBa648.roa
Signing time: Mon 23 May 2022 12:26:53 +0000
ROA not before: Mon 23 May 2022 12:26:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205842
IP address blocks: 185.239.190.0/23 maxlen: 23
185.239.188.0/23 maxlen: 23
185.202.72.0/23 maxlen: 23
185.202.74.0/23 maxlen: 23
2a0a:d2c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30261 (0x7635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Validity
Not Before: May 23 12:26:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c24df40e151b5a2ec742919fa5fc25feb05aeb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:46:d0:36:99:9a:20:77:1d:a8:79:32:ba:
b4:d9:77:f4:9e:21:5d:11:8c:71:f6:e4:7d:e4:d3:
1b:d7:31:47:6b:0d:ee:18:4e:07:68:bc:2c:e3:78:
39:64:a6:fa:8b:b2:29:1c:9e:a8:44:6d:94:0f:be:
2a:21:c1:86:d7:d3:94:71:58:21:08:15:2a:7b:09:
f8:6f:04:f9:54:2f:75:0f:b5:2b:66:d6:c0:00:2c:
11:91:fe:e1:96:7c:51:b3:4e:5e:95:f0:29:9b:da:
fe:4d:76:2c:fe:98:9e:a4:79:90:31:7f:14:ba:11:
17:ce:f4:b8:cd:15:3e:c6:ed:30:0f:33:f4:0e:49:
c0:e2:52:52:1d:5e:8d:5a:11:62:be:86:21:73:61:
0f:20:4c:3e:fe:44:90:0d:63:4e:7c:93:00:93:1b:
f4:5a:11:a3:6b:4b:bc:f8:e2:33:cd:77:c9:d2:55:
c9:8f:31:a1:f0:bb:15:49:d5:41:87:6b:6f:d3:15:
3b:c7:24:cf:4e:99:46:74:4b:09:b0:63:80:aa:96:
58:56:93:5e:39:02:ab:13:72:52:42:90:6f:96:af:
cd:6c:e5:d8:e5:8f:2d:e1:d8:51:9d:0d:e7:41:a5:
b9:28:8e:60:26:cd:d8:3c:7e:ee:dc:6b:2d:ff:1f:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:F4:0E:15:1B:5A:2E:C7:42:91:9F:A5:FC:25:FE:B0:5A:EB:8F
X509v3 Authority Key Identifier:
keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/wk30DhUbWi7HQpGfpfwl_rBa648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.72.0/22
185.239.188.0/22
IPv6:
2a0a:d2c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:10:e1:c5:a6:97:ca:22:12:56:00:dc:6c:13:13:96:45:71:
a5:e0:2a:ed:91:ff:17:ff:65:df:63:4a:de:56:a9:7e:5e:35:
f4:58:ef:57:29:68:1f:c1:cd:65:68:f5:d2:3c:d8:e2:de:e3:
d7:62:38:25:31:24:65:ae:d1:cf:07:fc:71:de:12:b1:b3:07:
72:1c:08:00:5f:c9:fa:17:8f:48:ee:dd:7f:74:bd:9b:50:99:
b7:7c:b7:b1:c7:fc:60:99:a5:a8:93:78:d7:e4:a5:08:0b:9b:
02:a0:72:f5:ae:d3:2c:d8:ef:c8:0d:4a:de:aa:79:4e:9d:a0:
bf:26:7a:39:b5:69:79:de:4f:87:d0:4b:d8:ee:4b:ea:e7:e2:
c7:f0:41:89:b6:62:bc:f3:cc:3e:d3:08:83:ff:bf:17:33:97:
99:cb:27:31:cc:de:67:b8:2e:6b:a1:0b:82:f1:b4:e8:6a:37:
72:b9:cb:8d:6f:72:73:d1:fe:81:fe:b7:38:92:99:b3:d2:b3:
c3:89:b9:8a:b7:cf:8e:f3:93:39:8f:a6:9b:a9:4d:31:11:3e:
c3:ce:5a:7b:d7:91:dc:d1:a1:54:24:59:d9:35:6e:d4:0f:46:
e7:07:ed:b1:4b:8a:e0:ab:4f:41:61:1e:93:ac:15:6d:93:70:
9e:bf:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:17 2024 by rpki-client on console-ams.rpki-client.org