Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/2WZFc09fXfqaivvRI40X4FQ-uxM.roa
File: 2WZFc09fXfqaivvRI40X4FQ-uxM.roa (raw, json)
Hash identifier: RO+vciruwkEmjqJqsrt/IvnC1toKqAS+HXJHo+sKlEA=
Subject key identifier: D9:66:45:73:4F:5F:5D:FA:9A:8A:FB:D1:23:8D:17:E0:54:3E:BB:13
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0183EA009AD90052D84A5FA868A81436886D
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/2WZFc09fXfqaivvRI40X4FQ-uxM.roa
Signing time: Tue 18 Oct 2022 07:30:51 +0000
ROA not before: Tue 18 Oct 2022 07:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210539
IP address blocks: 185.196.222.0/23 maxlen: 32
185.162.88.0/24 maxlen: 24
185.165.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:00:9a:d9:00:52:d8:4a:5f:a8:68:a8:14:36:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Oct 18 07:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d96645734f5f5dfa9a8afbd1238d17e0543ebb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:9c:13:ad:4f:b7:c8:93:e3:cc:c9:77:ce:
06:70:2b:20:33:e3:8b:35:82:2f:66:0d:2d:6f:b1:
18:51:f8:c1:58:ca:87:8e:20:17:fd:8c:5e:98:a4:
d0:6e:0f:a7:67:4a:62:a1:61:bb:90:f8:0b:f6:75:
a9:ee:9f:14:a3:b6:60:22:af:96:5c:22:02:70:94:
bf:8d:34:e8:a4:52:8e:1d:f0:8b:c0:d9:ba:9d:37:
69:35:2d:16:bc:76:59:40:f0:cc:ce:54:5a:1a:3f:
2f:df:02:3b:2d:5b:da:91:bf:7e:75:dd:73:79:fb:
cf:df:0d:a4:0d:8d:8b:27:2f:66:d5:32:7c:7d:f4:
96:52:94:49:0e:0c:9a:88:0e:58:41:27:1a:18:37:
c5:b6:54:0d:ae:15:4f:94:6d:ff:d6:af:60:28:44:
9e:57:09:ea:cf:4b:eb:2c:c0:5f:7b:67:db:b1:a1:
8d:9d:f5:1d:9b:56:33:8c:b0:61:14:64:80:68:fa:
37:07:5a:93:fc:43:64:c1:e3:1b:3c:aa:54:cd:bf:
32:f7:a5:a4:c5:bc:b9:6d:3d:f0:89:9d:36:83:e5:
36:df:cb:45:25:7b:e5:b0:34:f4:fd:88:b1:66:d2:
a1:09:1a:2a:e4:71:8b:fd:28:3d:a1:a7:19:35:e8:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:45:73:4F:5F:5D:FA:9A:8A:FB:D1:23:8D:17:E0:54:3E:BB:13
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/2WZFc09fXfqaivvRI40X4FQ-uxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.88.0/24
185.165.153.0/24
185.196.222.0/23
Signature Algorithm: sha256WithRSAEncryption
66:47:ab:d8:c5:4e:10:7c:e2:71:92:b8:96:dd:77:82:f4:4b:
3a:b8:e9:60:77:9e:af:bd:b2:85:84:4b:cd:c9:df:46:56:13:
d0:9c:c0:62:fb:0a:00:0c:7d:fd:ce:14:f3:84:21:54:03:75:
d8:9e:d9:88:5c:e7:05:d9:97:14:f3:48:e9:cb:6c:0e:30:d8:
ac:e8:33:fa:7d:0e:f5:aa:3a:2e:fd:a4:3d:26:ba:93:fb:ab:
98:f6:d0:0a:9b:d1:a3:19:60:2e:66:a0:d6:a1:32:85:c8:44:
3f:20:7e:e5:ba:24:92:65:d4:4a:36:8c:a2:09:1c:88:2b:45:
37:ee:5e:b0:15:87:75:26:b2:97:f0:00:e0:21:45:94:d2:1d:
19:24:ab:df:22:35:2a:3a:ae:74:3d:d3:a7:06:0e:02:03:af:
38:8b:c9:02:a5:54:e2:e9:f6:4f:9d:79:1d:7e:ea:3a:eb:f2:
c4:0a:01:95:88:c1:7d:85:2e:6e:51:92:91:47:f2:e5:4a:4e:
cc:77:54:ca:cd:fd:ff:19:50:35:da:86:cc:11:a4:34:8c:41:
50:b3:90:19:aa:c0:51:16:25:84:88:2a:23:69:ba:68:01:aa:
49:41:cf:35:8d:df:28:93:31:42:d9:cd:29:2f:9e:5b:6b:c0:
78:14:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:16 2023 by rpki-client on console-ams.rpki-client.org