Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/cjEotWIHsT_YP-5Jl_pruUZQY4E.roa
File: cjEotWIHsT_YP-5Jl_pruUZQY4E.roa (raw, json)
Hash identifier: KNEwz451MC4Lon3sCbKqh/bKzXtsU4CUFC/RzJkjLWA=
Subject key identifier: 72:31:28:B5:62:07:B1:3F:D8:3F:EE:49:97:FA:6B:B9:46:50:63:81
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 05D6A297
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/cjEotWIHsT_YP-5Jl_pruUZQY4E.roa
Signing time: Sat 01 Jan 2022 09:56:24 +0000
ROA not before: Sat 01 Jan 2022 09:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20771
IP address blocks: 185.163.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97952407 (0x5d6a297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jan 1 09:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=723128b56207b13fd83fee4997fa6bb946506381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:c7:43:e1:da:62:f1:59:c9:f0:22:83:80:
a5:60:db:a1:71:08:43:77:de:b1:1b:de:d6:e8:97:
7d:22:69:9c:77:4f:7e:7a:a3:50:5a:70:ec:39:a9:
74:a4:00:1a:a6:2d:58:98:eb:bb:9d:82:d7:e4:e6:
76:1c:cf:f9:6b:19:58:9c:7c:78:63:42:75:ce:f0:
92:62:6b:45:61:a6:05:a7:62:31:8d:d6:15:f7:9a:
ef:d5:bd:fc:2d:65:d0:9f:1d:5c:be:27:9c:65:09:
f6:33:c4:a8:39:31:77:09:5d:a0:52:c8:44:18:b6:
af:b7:9c:e4:bb:54:8e:44:d0:ed:87:e4:a1:bc:66:
ce:88:59:2c:0f:e3:1a:33:24:8a:ea:fa:97:3c:8d:
0c:9e:f0:f7:ef:0e:e6:d6:d0:3f:d8:bd:38:13:b5:
cc:e3:d5:9d:4c:c5:18:a0:a2:cb:1c:3e:9e:9c:fe:
d5:71:f0:f1:c6:3d:d4:bd:85:90:bd:47:7c:7f:d6:
e0:63:88:10:7d:4c:d7:c9:65:fc:ac:31:d0:05:e0:
53:3f:4b:76:ad:af:c4:97:de:6f:d4:ff:35:86:11:
b3:55:ff:c1:8e:cb:19:d6:d4:1c:15:89:de:d6:20:
eb:e3:54:8e:9f:c0:d7:8f:8c:56:0d:be:3b:e4:a0:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:31:28:B5:62:07:B1:3F:D8:3F:EE:49:97:FA:6B:B9:46:50:63:81
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/cjEotWIHsT_YP-5Jl_pruUZQY4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:1a:69:05:d2:0c:27:3b:ad:15:2b:fb:38:e3:28:da:9c:0b:
35:d5:ec:4b:d0:95:7a:ec:ec:9b:37:46:b8:f9:83:23:ce:5c:
70:fb:62:d6:9e:fc:4c:2c:2e:c3:86:35:94:90:25:6f:b5:31:
c6:00:d0:15:7a:88:8b:f1:1e:23:30:c3:b9:86:65:0b:45:a9:
3d:4d:2b:87:67:a2:53:83:77:e2:e3:67:eb:03:50:9d:5b:5a:
2f:4a:73:22:2b:9a:f0:ad:a2:87:c6:d7:6b:ba:92:fb:75:cb:
5e:e2:ad:6a:9e:13:e6:53:49:32:73:f2:38:75:53:9f:0c:1c:
1d:72:d5:45:27:42:2d:f1:ea:9f:5d:75:e0:54:3b:e0:51:ad:
9d:a3:f0:59:24:2f:36:de:0b:5d:72:09:90:8b:7e:9a:6d:08:
86:bb:e0:38:2f:3b:2d:8a:53:e9:18:84:93:97:7e:19:1b:0b:
d0:4a:5a:df:bd:cf:b8:9f:cb:7e:79:00:60:27:9f:e0:5f:d1:
0a:93:52:40:c6:82:86:93:d0:19:d4:f2:95:91:ed:ed:ac:bb:
52:32:7d:ea:4d:0b:ff:ee:b1:53:a5:a7:76:81:96:ec:68:32:
e0:97:ae:ac:f6:a0:33:5a:4c:f6:db:0b:f6:b8:91:57:08:1c:
1b:3b:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:41 2024 by rpki-client on console-ams.rpki-client.org