Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/giZcZXRkkLc0JM-KIxkktxdvhOM.roa
File: giZcZXRkkLc0JM-KIxkktxdvhOM.roa (raw, json)
Hash identifier: jGH0b4z1SVMiw2NOQZXiFx09KUYudTjE4plSRwAdgd4=
Subject key identifier: 82:26:5C:65:74:64:90:B7:34:24:CF:8A:23:19:24:B7:17:6F:84:E3
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 04E3B7EB
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/giZcZXRkkLc0JM-KIxkktxdvhOM.roa
Signing time: Sat 01 Jan 2022 15:04:23 +0000
ROA not before: Sat 01 Jan 2022 15:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43160
IP address blocks: 185.232.172.0/22 maxlen: 22
185.143.0.0/22 maxlen: 22
185.174.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82032619 (0x4e3b7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 1 15:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82265c65746490b73424cf8a231924b7176f84e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:40:d6:e7:71:ba:f5:43:5a:62:4f:87:39:
04:6e:17:e9:92:9e:89:1b:c8:58:82:db:fc:09:61:
fe:ac:11:57:96:ff:b5:94:32:83:4a:88:8f:d1:3f:
c1:6d:84:71:c9:67:e1:71:ab:77:d6:0e:48:12:1d:
e6:5d:1c:a6:5d:e1:36:70:a0:89:79:14:7e:00:bb:
b2:1e:10:bf:a4:6a:53:c7:15:fb:e3:40:8c:9b:95:
01:e0:d6:0c:df:93:f5:e5:2d:31:77:a5:13:10:ad:
29:66:10:f7:57:ad:e4:60:ec:86:0b:e9:22:ce:e6:
72:7a:b9:1f:fd:cb:28:43:96:2c:f0:a2:ea:39:ea:
7d:ed:2c:27:c1:2b:92:2a:df:54:d9:eb:3c:5d:4c:
cd:08:56:5f:12:ca:bc:ef:87:5d:2e:e9:77:18:76:
31:b4:62:71:59:0e:1c:f0:da:ae:62:d9:31:0c:a6:
8d:2b:8b:6e:b3:5e:1b:ca:0b:b7:28:33:5f:ed:2a:
4d:fb:2d:42:fa:38:53:d1:23:5f:40:51:9f:44:b7:
27:e8:f3:c9:08:e5:0b:38:af:dd:d8:04:67:c9:66:
54:e0:e9:3e:c7:5d:56:f5:f1:0d:2a:6f:d3:af:0e:
40:f7:d8:00:50:45:36:6a:ed:24:5e:49:33:cb:d4:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:26:5C:65:74:64:90:B7:34:24:CF:8A:23:19:24:B7:17:6F:84:E3
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/giZcZXRkkLc0JM-KIxkktxdvhOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.0.0/22
185.174.212.0/24
185.232.172.0/22
Signature Algorithm: sha256WithRSAEncryption
72:86:f6:0b:7d:ac:ce:f6:da:57:46:17:52:af:fb:e5:4f:3d:
06:24:dc:89:8e:65:9d:52:94:84:10:69:86:5f:c6:20:2b:55:
fa:d1:66:87:d6:3a:eb:40:fb:15:05:a7:c9:26:f2:e3:02:7c:
43:6c:4b:4f:da:38:5a:fd:72:f5:e7:c9:51:61:0d:8f:c5:16:
e8:42:62:c2:be:76:df:08:40:6d:c3:4d:70:32:f3:17:2c:5d:
a2:95:be:58:f4:b1:c9:70:bf:81:9c:15:48:89:fa:bc:04:f9:
67:71:0f:49:c8:1e:47:35:e5:fa:4c:ee:d6:13:71:cb:a7:30:
71:e0:62:8a:ef:8e:e8:03:bd:8b:0a:13:96:c8:46:26:b0:2d:
8c:1d:df:59:9e:cf:a4:ef:52:15:93:ff:8f:95:d0:c6:c4:e3:
fe:ba:85:89:b2:69:c0:13:3c:e3:4d:5d:cd:1e:1f:25:4d:bb:
c5:31:05:b8:b3:7a:5e:7c:93:18:47:9b:d2:3c:85:25:55:7f:
81:a8:15:b5:9b:71:88:32:a3:05:7f:08:43:9f:d8:36:02:68:
34:c5:9d:78:fe:a9:fe:6f:e5:f1:03:85:95:b3:38:3f:f9:3b:
df:d0:36:0c:9e:44:f8:a0:0e:45:83:e8:27:20:d8:7f:e7:8e:
4c:c6:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:27 2024 by rpki-client on console-fra.rpki-client.org