Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/5wGV6v3rZibS3uo37kOJ_RmbN9A.roa
File: 5wGV6v3rZibS3uo37kOJ_RmbN9A.roa (raw, json)
Hash identifier: Vqz0/8SXDiRU7nqfOaH3KJoHizgclyLWbDepTodsFKo=
Subject key identifier: E7:01:95:EA:FD:EB:66:26:D2:DE:EA:37:EE:43:89:FD:19:9B:37:D0
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 0183CCAA4CE17186981D5A04913BF5276183
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/5wGV6v3rZibS3uo37kOJ_RmbN9A.roa
Signing time: Wed 12 Oct 2022 14:47:36 +0000
ROA not before: Wed 12 Oct 2022 14:47:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202196
IP address blocks: 185.150.60.0/24 maxlen: 24
185.150.61.0/24 maxlen: 24
185.150.62.0/24 maxlen: 24
185.150.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:aa:4c:e1:71:86:98:1d:5a:04:91:3b:f5:27:61:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Oct 12 14:47:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e70195eafdeb6626d2deea37ee4389fd199b37d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:a2:a1:ac:18:7e:16:e7:29:c1:43:75:a4:
a8:84:eb:d1:b0:63:89:f7:43:a4:cb:e4:71:3c:7c:
a9:67:9f:a3:ec:54:c1:9a:32:13:6c:b3:d2:cc:15:
fb:07:fc:22:db:a9:fa:a1:7b:59:74:4e:e3:33:f6:
8d:1c:e8:3d:cd:fa:6f:25:4d:10:36:fc:44:07:e7:
c3:ca:25:2b:e7:74:dc:0f:fd:96:95:b3:84:9b:b3:
05:01:dd:a1:0a:10:37:ce:e8:10:87:a7:e7:2a:7b:
60:ab:80:4a:27:af:f5:0a:46:0d:3e:da:99:29:b4:
c2:1a:ec:75:fb:fa:b2:46:1f:c6:3a:59:de:fa:6a:
63:6e:50:53:f2:a6:2e:a4:29:c5:92:cd:f1:2b:84:
59:a8:ce:ba:fc:50:19:59:eb:5f:06:e5:09:0b:61:
92:61:5b:bc:70:f5:47:56:b1:d7:ac:9c:02:4f:a0:
35:be:14:ef:69:d0:e6:8f:51:a9:60:10:7f:cf:df:
c5:0b:c9:b9:54:0d:93:81:be:a2:b5:bd:fd:17:c1:
7b:52:e8:41:c1:0f:d0:7e:66:a5:9e:70:98:fb:37:
89:9e:ff:bc:a8:6f:13:8d:58:b2:79:f0:28:c6:b5:
2e:e7:6a:9c:2c:a5:e7:ca:0a:a2:80:87:c0:fa:70:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:95:EA:FD:EB:66:26:D2:DE:EA:37:EE:43:89:FD:19:9B:37:D0
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/5wGV6v3rZibS3uo37kOJ_RmbN9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:a4:58:90:d3:57:33:31:74:14:47:10:26:fe:55:53:96:b7:
17:5e:25:81:ab:eb:fd:a1:d0:64:3f:4d:e9:e5:01:65:49:78:
17:e5:4f:dc:d4:23:d4:f5:86:27:ba:1d:38:25:76:d9:29:61:
1e:d1:72:85:bd:82:b2:be:30:7e:22:e9:9c:58:6d:f6:05:e8:
28:50:09:ab:62:c0:94:0d:b2:22:cf:44:87:1b:ca:ba:3a:e7:
c0:f6:78:b5:cd:22:cc:a5:c3:f2:6a:58:29:2c:81:9a:00:0d:
09:68:c3:9b:c7:a7:f1:40:2d:25:5a:b7:2a:1d:4b:60:54:c5:
7b:ec:0b:a7:cf:6f:67:fa:b2:a1:77:c6:b8:17:7b:c1:23:31:
71:13:1d:f2:71:18:dc:e4:00:f2:5d:4f:6b:93:8d:0c:36:09:
e0:ff:06:b0:22:56:7f:6e:bf:46:60:0f:11:f9:bf:a2:7c:51:
aa:be:b9:0f:be:a3:e7:3c:12:c6:d8:20:b6:91:dd:f3:b2:14:
1c:f8:65:3f:c8:cc:04:c4:72:94:bf:04:5b:e5:de:c2:26:78:
cd:5a:c9:b2:13:2d:cc:3e:dd:71:95:0d:d7:2c:32:71:b0:97:
73:d0:e4:46:36:ed:29:b4:39:ae:18:fd:5f:74:fb:3c:eb:e0:
c2:01:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org