Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/3DnPY7H24g6K1aI-6QrBWEppmao.roa
File: 3DnPY7H24g6K1aI-6QrBWEppmao.roa (raw, json)
Hash identifier: vA4TL1vKdKP8+IOPBpXiH7Ecr5pRzGBFZGTXO+Lwm78=
Subject key identifier: DC:39:CF:63:B1:F6:E2:0E:8A:D5:A2:3E:E9:0A:C1:58:4A:69:99:AA
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 1B66425A
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/3DnPY7H24g6K1aI-6QrBWEppmao.roa
Signing time: Sat 01 Jan 2022 13:56:38 +0000
ROA not before: Sat 01 Jan 2022 13:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201160
IP address blocks: 185.29.192.0/24 maxlen: 24
185.29.195.0/24 maxlen: 24
185.29.194.0/24 maxlen: 24
185.29.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459686490 (0x1b66425a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jan 1 13:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc39cf63b1f6e20e8ad5a23ee90ac1584a6999aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:f8:48:21:08:69:59:7d:c1:1a:41:77:84:
68:37:70:43:d8:8a:7f:02:c9:b8:74:3a:72:83:d0:
30:06:3d:04:21:a4:dd:e1:0e:5b:ba:6f:8d:ff:9d:
e1:c3:a6:87:29:f1:49:be:31:01:bb:b4:ac:ed:db:
7c:7d:0b:6f:a1:87:f9:98:2e:d9:a2:c4:8b:5b:63:
c7:2c:67:e2:a1:d3:3d:33:12:0f:08:d0:61:64:87:
f7:1d:48:03:29:04:a4:b5:9d:62:f3:fd:92:e5:92:
ff:e2:18:0b:06:ea:38:2a:1e:bd:fb:a6:f4:d1:a0:
dc:3d:39:fe:b0:3d:4c:85:76:d4:c7:0f:27:62:91:
f9:11:53:8d:87:e3:71:94:65:e3:84:e4:ab:ef:85:
13:bd:fb:ff:bd:ab:b2:05:2d:f0:a3:8e:08:6f:19:
7b:68:16:f8:11:b8:4c:f4:63:88:20:ff:ed:87:d5:
b4:25:70:eb:9a:6c:47:5f:dd:19:90:b5:03:df:d2:
18:7a:8b:ce:c8:a5:c2:30:42:44:a2:a5:03:da:85:
48:5e:11:30:db:be:2e:6a:4c:f4:ff:68:78:fe:4c:
3c:0e:a4:ed:23:48:d9:91:41:81:36:0f:2e:75:a3:
96:2c:0c:a7:9d:d6:91:95:08:57:7d:a8:e0:d0:6c:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:CF:63:B1:F6:E2:0E:8A:D5:A2:3E:E9:0A:C1:58:4A:69:99:AA
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/3DnPY7H24g6K1aI-6QrBWEppmao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
Signature Algorithm: sha256WithRSAEncryption
68:5d:5b:28:9b:a7:e0:5e:3a:58:d3:9c:9e:2e:54:7f:9c:71:
62:8f:6f:44:8d:78:07:8b:5b:c5:44:f2:af:aa:c6:80:c9:f3:
62:7e:d8:b5:54:b9:b4:e9:3e:22:92:31:8b:d7:bb:c9:13:e7:
36:9a:f4:f5:89:e7:be:26:37:c0:c8:2a:d1:f2:ca:2a:3f:87:
4a:43:56:89:e9:38:f8:5f:1c:c8:3c:ce:89:00:46:20:c5:81:
d2:e8:45:ea:5e:5a:65:50:de:47:6f:df:7d:4a:30:66:9b:ff:
44:8b:cd:09:30:86:22:6f:75:a5:66:0c:47:f3:30:3f:ff:ac:
25:1b:d7:09:c7:57:cc:1c:c0:18:23:5b:b2:2f:82:a0:5c:20:
ce:a1:f2:9b:02:08:43:38:34:c9:b7:68:18:ec:0d:aa:fe:fc:
58:6c:cf:62:46:d7:5c:5b:21:44:a5:b9:17:dd:90:0a:dd:a2:
dc:11:f3:d1:c8:e5:08:d4:ac:2d:4c:6f:85:26:c8:f7:f1:be:
37:4e:72:81:a4:15:ce:02:6f:bf:96:3d:2d:34:0f:5f:f3:46:
86:da:c9:42:d9:cf:70:11:00:3f:ae:3d:59:e6:c5:aa:e5:dc:
b5:8b:79:39:d7:e7:be:a1:b8:74:24:96:a3:06:d9:12:5e:71:
0d:dc:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:28 2024 by rpki-client on console-ams.rpki-client.org