Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/1x0a8WzosDZ52GnaZbHC5Vw0U14.roa
File: 1x0a8WzosDZ52GnaZbHC5Vw0U14.roa (raw, json)
Hash identifier: oPolsLBjGsszuEqXtlT+LP1Ft8BFIz5x2JAJzIRfAzs=
Subject key identifier: D7:1D:1A:F1:6C:E8:B0:36:79:D8:69:DA:65:B1:C2:E5:5C:34:53:5E
Certificate issuer: /CN=229a038176c796ea4f2769f6be3cace1a3597634
Certificate serial: 07B9A8AC
Authority key identifier: 22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/1x0a8WzosDZ52GnaZbHC5Vw0U14.roa
Signing time: Sat 01 Jan 2022 16:06:19 +0000
ROA not before: Sat 01 Jan 2022 16:06:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34722
IP address blocks: 185.160.16.0/24 maxlen: 24
185.160.17.0/24 maxlen: 24
185.160.16.0/22 maxlen: 22
185.160.19.0/24 maxlen: 24
185.160.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129607852 (0x7b9a8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229a038176c796ea4f2769f6be3cace1a3597634
Validity
Not Before: Jan 1 16:06:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d71d1af16ce8b03679d869da65b1c2e55c34535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:67:ef:a5:6c:9f:1d:4b:2f:08:8f:41:72:8e:
c6:4f:51:ea:fc:83:3d:5b:3b:bd:79:22:ad:29:ba:
c7:e3:37:10:96:5c:a4:37:c8:5d:68:c5:1c:01:ee:
00:a9:ba:4b:28:e7:23:73:2c:70:10:3c:eb:10:17:
aa:ed:67:09:d7:02:7f:55:d3:84:b8:4b:82:94:66:
a0:cf:b6:bd:bb:22:26:11:26:00:df:c7:b2:97:18:
ef:1c:05:2b:a0:53:e6:e2:99:6d:81:b1:bd:3a:07:
53:bc:29:b8:d0:70:4e:6d:a8:99:4a:e0:b9:bc:49:
8c:69:a8:6b:4a:85:d4:c3:9f:7d:7b:ab:93:0f:fd:
8b:fb:6f:5e:11:04:c0:03:1f:68:fd:99:86:95:f2:
64:00:62:eb:82:14:40:6c:3e:1b:8b:e5:24:55:0a:
71:d2:c7:29:f5:b3:33:8f:3d:38:54:6d:a9:a0:50:
20:ee:f4:e1:3c:af:db:9b:ed:ce:43:96:ce:a3:8e:
81:5f:9c:1c:39:98:7c:e6:f3:ed:71:02:0f:3d:58:
2c:e6:41:67:8f:a4:56:4f:ee:0b:f2:28:eb:99:3a:
49:1d:52:9c:d8:4d:04:8f:11:ab:8e:44:cb:f3:3f:
c2:a4:88:e1:72:9b:51:63:77:ec:48:b2:83:bb:69:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1D:1A:F1:6C:E8:B0:36:79:D8:69:DA:65:B1:C2:E5:5C:34:53:5E
X509v3 Authority Key Identifier:
keyid:22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/1x0a8WzosDZ52GnaZbHC5Vw0U14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.16.0/22
Signature Algorithm: sha256WithRSAEncryption
25:66:c1:3f:03:87:36:8d:c1:85:7f:0e:d9:0a:a9:5d:bf:a6:
f4:9f:64:ab:df:cd:54:6a:1b:32:1f:b2:af:2e:6a:e6:ed:b1:
d3:3c:f1:bc:40:e9:25:f3:22:bf:3a:f6:f9:37:6c:cb:5e:22:
f7:ea:97:c1:7c:e5:4e:e9:45:aa:7f:a7:ee:78:fe:1c:56:92:
2b:f2:01:6c:3d:7f:fd:12:7f:e7:cd:90:44:4f:e5:b3:04:48:
4f:a8:d6:1e:b8:7e:92:19:16:81:20:46:0c:0b:49:75:9d:b3:
88:e2:b4:26:da:3f:3a:60:e8:3a:14:ca:b2:78:fa:34:72:19:
2d:23:52:f0:29:4b:b4:bc:ca:95:2a:64:a4:0f:4b:05:68:c5:
31:55:81:cf:81:e7:29:4c:72:f4:3e:7b:3e:07:8b:c4:be:e3:
17:a3:8d:81:65:7e:08:56:ea:4b:d9:c4:66:43:d9:45:05:26:
a4:16:20:b7:0c:9e:f6:6b:0c:85:cc:3e:8b:7b:ab:bb:a1:73:
d0:a8:40:75:a2:b9:5e:a7:88:d7:73:03:d8:ac:8c:2c:ee:2b:
17:4b:c8:b4:47:39:1f:b2:df:db:04:e4:d9:10:dd:75:0d:3f:
4a:a2:88:f3:d9:c3:17:ba:4e:c2:3e:fc:28:92:0d:41:2c:2c:
c8:3b:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-ams.rpki-client.org