Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/fwHwxDcs230KBOb94kp1qaAk7kE.roa
File: fwHwxDcs230KBOb94kp1qaAk7kE.roa (raw, json)
Hash identifier: YN4iUFauLVjGYCDviSr6d9g4J6ovurRKshiseJlAIZI=
Subject key identifier: 7F:01:F0:C4:37:2C:DB:7D:0A:04:E6:FD:E2:4A:75:A9:A0:24:EE:41
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 027DFD22
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/fwHwxDcs230KBOb94kp1qaAk7kE.roa
Signing time: Sat 01 Jan 2022 06:55:01 +0000
ROA not before: Sat 01 Jan 2022 06:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213338
IP address blocks: 185.167.183.0/24 maxlen: 24
2a0b:9c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41811234 (0x27dfd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Jan 1 06:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f01f0c4372cdb7d0a04e6fde24a75a9a024ee41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:32:e1:4b:b9:ab:01:cb:9c:53:ba:c9:1b:
d0:4e:e7:4d:65:5d:5e:ea:4b:55:14:ca:a5:65:6c:
65:c7:ba:c2:f4:97:12:ed:6a:d9:f8:c6:44:6f:ba:
62:a5:62:82:cf:b9:19:7b:89:48:9d:32:a0:5e:72:
9c:a8:53:84:8d:37:23:98:c0:0f:98:21:9a:2f:ea:
37:a6:fd:a1:c5:26:b4:cb:ac:be:9a:bb:4d:f2:07:
82:0c:2e:28:7a:b0:05:90:93:5b:14:65:9d:2e:88:
f0:0f:ae:37:95:d9:6d:da:e7:3c:96:e0:ed:9d:f1:
86:67:33:5b:57:75:18:cb:24:58:59:7b:af:4e:a8:
41:f2:fd:d7:27:e4:75:31:44:ac:bb:6b:58:e5:c9:
b3:27:16:8d:3e:83:c4:d7:77:36:26:db:30:af:60:
be:fd:be:2f:81:0c:d4:76:ae:af:1e:7a:95:6d:41:
ac:c6:72:9c:dc:1c:d6:cc:da:3a:c2:06:32:5c:77:
00:2f:73:4d:9c:f7:48:1a:c9:e4:ed:bf:f8:45:a9:
63:c5:ef:ed:50:3e:4d:64:d2:42:40:49:50:a1:52:
e5:49:b5:6e:7a:f6:66:3a:44:7d:d3:ad:df:61:10:
3f:aa:f3:da:91:94:c8:2e:a3:f7:d7:44:22:16:26:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:F0:C4:37:2C:DB:7D:0A:04:E6:FD:E2:4A:75:A9:A0:24:EE:41
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/fwHwxDcs230KBOb94kp1qaAk7kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.183.0/24
IPv6:
2a0b:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:1c:ce:3e:ef:c3:fd:cf:5b:27:e0:e9:63:0b:ac:20:50:40:
1e:8c:eb:fd:3f:d6:8d:5c:04:3d:f1:a4:8d:30:25:b5:97:22:
fe:09:94:a1:88:7f:50:92:e5:49:d2:f5:03:eb:4d:38:70:25:
e1:fc:f2:de:8b:c5:a3:a1:d0:15:2d:17:d0:c8:38:68:f3:8d:
e2:e6:cd:ad:3e:28:d3:08:f9:77:e8:ef:bf:a1:96:78:ba:41:
34:4b:cd:20:5f:cf:ec:87:72:c8:48:56:89:1f:a2:47:3c:be:
9d:11:b3:3e:f5:de:e3:7b:ad:59:16:c7:ff:ea:63:c8:0d:52:
fd:0d:61:15:61:1c:c6:44:24:fa:b2:7d:e7:52:d8:62:69:5c:
27:31:1f:b5:16:8f:1b:e7:33:e2:b0:94:12:66:cf:8b:6f:9f:
29:ce:7b:56:e2:4b:61:0b:e9:c4:d7:46:41:d4:7f:81:d9:98:
b9:f5:5b:31:8c:52:a0:91:3a:b8:be:d6:94:12:95:42:d9:7a:
4e:d3:c4:d7:ce:d8:2b:35:70:50:35:e2:88:5b:0e:c0:22:89:
3a:2f:57:f1:75:7d:9c:82:a1:ef:5d:7f:cd:54:92:f1:c1:36:
02:1f:6f:44:c6:05:b2:d0:b9:71:39:6e:50:2d:9e:bf:52:d6:
11:7f:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:13 2024 by rpki-client on console-fra.rpki-client.org