Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/36Qqye76s6JujQXVYdS1U037Hpo.roa
File: 36Qqye76s6JujQXVYdS1U037Hpo.roa (raw, json)
Hash identifier: bQ5JkpPNSmdsY1qg3ASud5Sz6sJXrsWx0fAiuXwSZOA=
Subject key identifier: DF:A4:2A:C9:EE:FA:B3:A2:6E:8D:05:D5:61:D4:B5:53:4D:FB:1E:9A
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 12ADA084
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/36Qqye76s6JujQXVYdS1U037Hpo.roa
Signing time: Sat 01 Jan 2022 14:06:23 +0000
ROA not before: Sat 01 Jan 2022 14:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42337
IP address blocks: 185.110.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313368708 (0x12ada084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jan 1 14:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfa42ac9eefab3a26e8d05d561d4b5534dfb1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:dc:e6:40:82:29:aa:a7:fc:db:c0:49:97:
93:ac:28:09:9f:de:ec:d2:49:21:3b:d5:9d:62:78:
93:05:7b:48:e3:17:14:12:b4:7a:fc:5e:be:1b:bb:
02:3c:4c:e4:45:73:39:c7:52:12:48:98:ea:16:74:
03:4f:77:e9:2c:5a:d5:ca:53:55:a7:a0:a3:97:fa:
01:ac:bb:0b:9b:9b:fd:0a:65:66:73:81:93:a2:a5:
26:ad:86:2f:7b:59:53:7a:3b:c5:e5:76:a6:85:23:
47:37:5f:b3:b8:27:31:ee:fb:16:8a:e1:3a:0f:b0:
c7:04:53:d4:03:f4:2f:b2:f5:8c:15:48:01:63:71:
1b:50:d5:29:b4:9b:2d:30:58:4b:32:30:d8:af:4e:
b6:3a:6b:50:46:b4:7f:02:c7:8a:7b:ec:41:6c:7c:
86:ee:b5:56:c0:50:7a:aa:9d:a9:5e:5f:06:e9:13:
7d:40:96:2d:ae:88:85:2e:1a:98:42:68:e2:87:79:
17:88:c3:28:34:e3:31:ba:49:a7:97:b6:e9:e6:5e:
2c:78:1a:48:95:b5:3e:5f:2f:2a:57:e8:dc:f9:c0:
d2:0d:e2:17:24:4d:ee:f1:7c:27:5c:d8:91:56:7b:
22:7a:32:12:e6:4c:28:a3:72:00:42:01:c3:32:e4:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:2A:C9:EE:FA:B3:A2:6E:8D:05:D5:61:D4:B5:53:4D:FB:1E:9A
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/36Qqye76s6JujQXVYdS1U037Hpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:7d:6c:70:6d:5a:9a:dd:11:47:1c:ca:f0:7a:ae:20:a6:96:
77:9c:fe:0a:8c:a6:72:08:c9:35:9f:9e:c4:48:39:88:4c:a3:
9e:0b:bd:79:f7:ef:1e:7e:9c:73:17:43:f2:ee:36:4a:8d:31:
b4:87:cc:67:b4:46:b1:7b:5e:f4:60:d1:a4:35:cc:69:d0:d7:
20:21:2b:79:0d:6c:8c:72:38:37:26:ac:03:dc:d5:c3:4d:9e:
4e:72:b0:65:c0:78:14:e4:f5:f7:06:99:fa:b4:d5:72:18:99:
63:c4:1c:34:e3:93:70:0c:a9:91:6c:10:2b:1b:23:71:a2:4b:
e7:e5:87:ee:05:3f:32:87:7f:dd:b1:3a:2b:1a:48:58:1b:69:
e3:18:f1:c9:a0:a5:f2:ea:c7:51:db:87:6c:7e:42:4f:be:87:
5b:30:f3:c4:23:86:09:63:23:7d:8a:be:9d:d2:1c:57:ba:a2:
60:1a:89:ac:03:14:0c:0a:03:4e:4b:20:88:c3:7b:c5:80:f2:
e2:22:21:4f:f9:76:6e:21:9d:ab:ef:be:45:f8:87:03:a2:bc:
24:af:73:28:a4:23:f8:0c:5d:dc:72:6c:34:53:5d:9b:e7:98:
f6:8c:1d:d7:4c:7d:70:de:ad:73:b0:b7:7d:55:51:2f:ac:7a:
e9:27:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:39 2024 by rpki-client on console-ams.rpki-client.org