Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9PrMB_U22706C80cl2VjwZeheyw.roa
File: 9PrMB_U22706C80cl2VjwZeheyw.roa (raw, json)
Hash identifier: WxyvRa6yUO832Ka0/+4Ugby0MhiX3S4x5Ch065v9zE8=
Subject key identifier: F4:FA:CC:07:F5:36:DB:BD:3A:0B:CD:1C:97:65:63:C1:97:A1:7B:2C
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0A358B9D
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9PrMB_U22706C80cl2VjwZeheyw.roa
Signing time: Sat 01 Jan 2022 06:58:23 +0000
ROA not before: Sat 01 Jan 2022 06:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58331
IP address blocks: 185.141.104.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171281309 (0xa358b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 06:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4facc07f536dbbd3a0bcd1c976563c197a17b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:8b:74:cc:ed:8e:6a:31:23:f3:06:3c:62:
78:30:83:23:4e:15:17:3f:b9:d0:78:70:29:71:a6:
3e:f7:c4:a0:ac:c9:fc:f6:30:96:b8:9f:bd:b2:54:
58:46:d4:67:83:a0:6c:e9:9e:ae:7a:0a:69:fd:6f:
9a:11:91:dd:9b:d0:ac:dc:ef:cb:6f:1d:35:29:b5:
aa:a4:aa:aa:00:a2:e8:9e:de:18:17:58:5e:6a:b2:
22:ad:17:a9:fd:28:9a:22:09:b6:08:f0:3e:83:cf:
1a:12:6b:17:81:0a:4f:57:9c:07:55:8a:86:4e:56:
a8:5e:18:4c:30:83:15:42:43:f5:70:ca:8c:a9:5a:
ce:f1:3c:48:74:59:60:9f:70:f9:47:91:2e:5a:e3:
07:12:8b:3f:83:58:96:7c:b3:be:b5:f4:1d:7e:27:
c2:fd:25:5b:7a:f5:d4:47:10:9f:14:a1:71:46:30:
4a:f5:2b:20:04:9e:db:6d:02:0c:60:5b:9b:85:3b:
6b:a7:f6:62:6d:7b:ce:2b:bb:d3:81:87:7f:b6:4f:
f1:5b:76:29:cc:0e:17:8e:25:b0:58:39:7a:7c:04:
f8:5f:05:49:e6:e4:55:6e:8b:f6:d3:55:38:f2:0c:
19:77:89:6a:c3:22:27:94:70:d2:79:c7:63:53:97:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:CC:07:F5:36:DB:BD:3A:0B:CD:1C:97:65:63:C1:97:A1:7B:2C
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9PrMB_U22706C80cl2VjwZeheyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.104.0/24
185.141.106.0/23
Signature Algorithm: sha256WithRSAEncryption
32:d5:e9:67:62:81:36:2a:93:0a:53:df:d1:bf:db:92:f5:b4:
af:f6:f9:15:30:fa:b3:ae:63:b4:4e:37:57:85:8a:c9:29:a4:
5f:1f:96:f5:4d:da:e8:fd:cb:10:40:e1:29:dd:c6:22:bf:83:
f9:77:7b:dd:b1:2a:97:9f:9e:68:d0:bb:72:c1:6b:ec:47:46:
78:3f:ef:3e:6b:b2:e7:8b:99:5c:bc:bc:eb:1a:5f:5d:1a:e6:
a7:82:0e:ff:1f:74:74:fd:42:33:9f:e1:e9:93:6c:e1:c3:fb:
db:d3:b4:b2:cc:1e:96:e2:09:7b:e8:df:47:15:3c:12:78:bc:
19:03:0a:e8:dd:44:df:b9:55:71:26:bf:a5:bc:51:f6:c6:5e:
40:ef:99:b4:ff:e6:a4:fe:38:fb:ab:dc:f9:15:36:83:87:d2:
07:a9:25:d0:12:73:66:a1:e8:df:a0:62:f1:8e:98:b2:9d:65:
1f:8b:82:0a:e2:89:a9:9f:02:50:7d:da:f9:26:86:0a:8b:d8:
7d:3c:5c:df:6b:66:70:c7:53:1d:0f:5d:e0:78:d0:bb:ae:8a:
aa:cd:94:1d:91:20:1a:77:d6:8f:3a:1e:32:78:9f:b7:5f:d1:
c6:20:d0:ed:02:97:e7:19:f1:9b:d7:86:50:65:66:16:05:58:
72:3d:69:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-ams.rpki-client.org