Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/jOixtpZ6qT0GZBVaBfzrpwXI9UU.roa
File: jOixtpZ6qT0GZBVaBfzrpwXI9UU.roa (raw, json)
Hash identifier: h9PoYlAYyBU0UzPp7dQx67oSQ4R3FmMKviuDUxufEhg=
Subject key identifier: 8C:E8:B1:B6:96:7A:A9:3D:06:64:15:5A:05:FC:EB:A7:05:C8:F5:45
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 0183184DA113D46E0306ACBD9879A1C658BB
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/jOixtpZ6qT0GZBVaBfzrpwXI9UU.roa
Signing time: Wed 07 Sep 2022 14:14:44 +0000
ROA not before: Wed 07 Sep 2022 14:14:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206366
IP address blocks: 185.188.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:4d:a1:13:d4:6e:03:06:ac:bd:98:79:a1:c6:58:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Sep 7 14:14:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ce8b1b6967aa93d0664155a05fceba705c8f545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:ba:94:b9:c8:cf:8f:03:37:27:98:32:12:
34:f8:f7:84:b6:96:40:d5:f1:95:ea:f5:7a:b2:25:
c0:a6:1c:2d:44:80:c3:1b:22:fe:27:46:8b:b7:27:
bd:d6:60:44:d5:74:93:c4:a8:03:55:60:6f:18:96:
6a:4e:d8:69:d6:1d:c3:59:01:7e:9e:f3:0f:db:de:
91:6f:52:c4:9b:ee:40:e7:09:d3:22:71:d1:1c:63:
1e:78:a3:1b:68:01:50:6c:c7:1c:a7:b9:09:e1:17:
c3:42:d9:bc:48:a8:bc:b6:f6:91:24:0b:0f:84:c0:
90:10:88:0c:91:c2:a1:3d:48:c3:ff:99:34:de:9e:
4f:77:6c:81:8e:41:40:7b:9c:c8:74:fb:35:83:f5:
3f:a1:f2:60:0c:02:47:ca:db:22:2b:5a:86:48:e4:
c7:0b:b5:3c:fd:2e:ff:95:24:b3:9c:16:32:33:70:
8a:39:d9:6d:18:50:a7:a4:46:c9:96:c6:7e:85:13:
f7:3a:7f:c7:e3:c5:0f:65:3c:49:05:ba:65:83:7b:
75:78:b3:6d:61:bd:70:11:3d:fb:5a:eb:24:d8:27:
19:9a:3c:0e:2f:c4:db:1a:29:4b:63:09:5d:c7:0b:
33:ce:9c:83:d5:b9:72:4a:26:23:06:08:0f:96:f6:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:B1:B6:96:7A:A9:3D:06:64:15:5A:05:FC:EB:A7:05:C8:F5:45
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/jOixtpZ6qT0GZBVaBfzrpwXI9UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.148.0/22
Signature Algorithm: sha256WithRSAEncryption
11:d1:e3:1c:a1:1f:89:24:a3:36:fd:49:dd:8d:73:92:9d:4f:
bc:bc:ff:48:d7:bb:b5:b5:d3:e7:cc:a0:b8:1c:b6:d9:4a:a8:
e4:90:c4:18:08:dd:fd:c2:8d:4d:07:64:55:34:b1:fa:77:45:
74:6b:28:fa:7c:78:b9:60:82:8d:a1:db:e9:5b:75:be:3f:95:
b6:ca:3f:45:ff:90:91:b7:17:34:ce:c7:cf:14:00:91:37:55:
8b:a2:f7:02:e6:cd:79:5a:4a:70:3d:99:6a:4d:67:08:de:c5:
60:19:e6:20:74:14:4b:0f:47:b7:0f:5a:10:16:af:0e:b6:44:
6d:dd:fe:3b:d0:cc:67:30:98:cc:69:20:e8:36:ff:20:c3:7a:
2b:8a:65:62:89:2d:6b:3d:00:6e:ae:d8:10:d3:2a:ae:13:dc:
3c:a0:f4:a8:bd:18:1b:02:17:02:c5:13:33:08:c7:75:72:38:
25:e8:6c:5b:6e:8d:d6:1d:37:39:16:e8:cd:e6:55:cd:08:5a:
12:4e:b4:9b:4f:4e:55:59:cd:c3:8d:d4:06:4a:ef:31:4d:8f:
af:ca:cb:48:7d:c7:fd:a5:5f:68:bf:ae:e4:9a:de:7e:3f:59:
82:b9:6f:f3:5c:e4:6d:37:f7:f5:33:2d:6f:7e:3c:e6:63:ff:
62:a0:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:35 2023 by rpki-client on console-ams.rpki-client.org