Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/3bLUUPih0sSnXDA4FclLojff8Wo.roa
File: 3bLUUPih0sSnXDA4FclLojff8Wo.roa (raw, json)
Hash identifier: 2rQt9G+9LDQYY12FF0Xsodpzzg+gemFzyGDp/W4/+1Y=
Subject key identifier: DD:B2:D4:50:F8:A1:D2:C4:A7:5C:30:38:15:C9:4B:A2:37:DF:F1:6A
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 336266C1
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/3bLUUPih0sSnXDA4FclLojff8Wo.roa
Signing time: Sat 01 Jan 2022 06:57:48 +0000
ROA not before: Sat 01 Jan 2022 06:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58185
IP address blocks: 185.102.144.0/22 maxlen: 22
5.44.128.0/21 maxlen: 21
5.44.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862086849 (0x336266c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Jan 1 06:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddb2d450f8a1d2c4a75c303815c94ba237dff16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:80:84:ba:f2:bd:31:ab:a0:4e:f0:a4:bc:
32:8a:bd:da:0a:b2:10:72:73:d1:fc:df:ed:4d:47:
22:50:79:d7:22:3a:f9:4b:3a:fb:1c:40:6a:14:58:
98:9d:33:17:70:c1:14:e5:6a:83:7d:c7:03:91:81:
b2:9b:79:37:81:0a:0f:d9:34:9b:56:6e:ae:6e:6b:
18:58:18:a5:d6:38:ef:9b:97:8c:f9:bf:3a:4a:33:
20:a6:39:93:02:4d:63:52:84:90:5b:8a:44:de:06:
b5:76:eb:5f:6c:6d:bb:da:d0:0b:44:ea:23:2b:c9:
0c:61:a8:98:41:46:ce:f3:c5:4e:a6:58:f4:19:37:
f2:33:69:66:9f:fa:04:83:e1:c6:6f:14:72:0e:d3:
96:14:bb:04:bf:fe:f3:3b:dd:ed:03:58:d1:83:a9:
e9:e8:49:da:f7:ca:a0:cd:7c:aa:0b:2a:62:2f:88:
e3:00:54:04:21:97:3b:c7:12:ca:0d:c7:eb:dc:a0:
11:21:7a:3a:af:bb:0c:5f:b6:38:33:2e:2b:d6:56:
d7:96:89:68:e7:c7:0f:99:b5:1c:ca:c7:1c:71:cb:
6e:28:68:e2:ad:f2:30:4a:57:7f:df:f0:9b:93:3c:
4c:e8:4f:07:b2:8f:be:05:30:a2:f6:bb:9d:2f:58:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B2:D4:50:F8:A1:D2:C4:A7:5C:30:38:15:C9:4B:A2:37:DF:F1:6A
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/3bLUUPih0sSnXDA4FclLojff8Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.128.0/21
185.102.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:76:3b:0b:0a:0d:76:c9:4a:ef:06:48:03:13:62:cd:19:57:
bf:ae:82:bc:cb:c5:a6:f2:ae:de:7c:3a:32:5e:8d:d3:03:80:
91:0e:ce:28:5b:bd:01:e9:83:39:38:3b:40:8d:98:05:14:f0:
42:07:b8:05:9b:6d:c5:b9:72:fe:f0:b6:28:81:07:21:4b:97:
49:4c:c7:f0:1b:c0:01:df:5e:32:ca:fb:f7:24:6f:01:01:58:
da:2c:86:3d:91:63:1e:4f:0f:2b:eb:af:58:05:ab:d0:2a:b6:
3f:57:5b:a5:a7:dd:ce:ec:51:ff:73:f4:56:66:8d:7e:1b:e2:
21:b4:93:a2:2d:ad:ce:75:f9:bb:63:9c:04:bb:59:c5:d3:3f:
46:e5:21:71:8b:d5:e6:65:a6:db:c8:1d:03:a1:90:88:6b:a6:
04:64:0c:72:15:17:36:a4:c8:ed:e8:fd:f2:9c:c5:b1:2d:63:
6a:eb:d8:3a:f1:3d:51:a5:45:06:af:2e:28:7b:e7:0d:06:f0:
21:49:19:b1:48:0c:06:21:d6:90:fa:8b:6a:81:9d:7e:38:f8:
a5:aa:10:db:fd:b2:aa:5f:a7:1d:6a:c2:a4:cf:0f:57:ea:6b:
30:c5:7e:4e:2d:07:69:22:11:6d:c9:c9:fb:69:cd:48:a0:63:
4d:c9:e0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:22 2023 by rpki-client on console-ams.rpki-client.org