Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/t4N7M-8HtLknfDSvSFmy8tjumzA.roa
File: t4N7M-8HtLknfDSvSFmy8tjumzA.roa (raw, json)
Hash identifier: 4Gh7EwHe5/eUyR+vwnBf8isUOOXIDG6D9cfPyYRvpH4=
Subject key identifier: B7:83:7B:33:EF:07:B4:B9:27:7C:34:AF:48:59:B2:F2:D8:EE:9B:30
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 146B0A31
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/t4N7M-8HtLknfDSvSFmy8tjumzA.roa
Signing time: Thu 21 Apr 2022 06:49:40 +0000
ROA not before: Thu 21 Apr 2022 06:49:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41858
IP address blocks: 185.21.92.0/22 maxlen: 22
89.40.148.0/22 maxlen: 22
193.34.182.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342559281 (0x146b0a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Apr 21 06:49:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7837b33ef07b4b9277c34af4859b2f2d8ee9b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:8a:cf:b2:5c:74:c0:3e:33:a5:74:1b:78:
32:28:b0:46:1c:cc:d1:15:83:50:35:91:9b:26:ac:
68:ee:0d:de:c0:0f:41:a7:1e:e8:a0:29:3d:26:86:
d1:92:49:33:b9:8b:2e:b4:2f:fa:9b:de:c0:3d:b5:
45:98:3e:50:df:df:ff:5f:44:a1:63:f4:37:1d:0e:
2d:84:d2:4d:71:a3:1b:c2:1c:08:b1:aa:0a:ec:a2:
1f:28:b6:3e:74:9a:d0:b9:7f:ce:a6:e9:7b:18:a3:
41:4c:03:59:49:ee:5b:96:38:23:b3:ca:d3:2a:82:
f2:91:d5:8b:d9:de:19:65:07:83:ca:f0:eb:78:1d:
61:cc:69:61:55:a6:31:b2:34:76:3d:28:50:e2:b8:
af:83:99:61:5e:cb:b2:b1:0b:00:64:c8:4e:3c:b3:
1e:47:95:b6:d5:65:f5:eb:a0:aa:5a:f3:4a:6d:41:
d2:82:07:b2:6a:4a:fa:55:ca:2f:d9:e9:93:bf:16:
e4:d0:d6:6f:64:09:c2:53:1b:76:7b:42:e6:53:9e:
06:de:99:23:d1:87:57:12:72:62:a6:a6:8d:e2:bf:
d4:fa:6a:f7:c6:ba:67:98:8e:64:ad:d7:59:12:74:
51:1e:a0:42:14:23:d9:c3:e0:0e:06:32:2d:9b:49:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:83:7B:33:EF:07:B4:B9:27:7C:34:AF:48:59:B2:F2:D8:EE:9B:30
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/t4N7M-8HtLknfDSvSFmy8tjumzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.148.0/22
185.21.92.0/22
193.34.182.0/23
Signature Algorithm: sha256WithRSAEncryption
62:e7:5f:ca:47:70:35:09:74:b4:2c:f0:37:42:3b:f0:f5:76:
78:33:85:70:46:f5:e3:32:6e:25:79:28:db:25:b1:77:3b:92:
76:13:a6:75:78:0c:1d:a9:02:df:35:d3:dd:30:87:7c:f5:38:
60:54:de:7f:d9:a9:49:53:8a:96:83:bd:85:b2:5f:dc:bd:50:
51:29:21:ee:84:f9:15:22:ab:76:f3:0e:8c:83:4b:56:17:ea:
21:84:d3:8a:f5:83:d0:ce:fb:6a:c9:9b:e1:ef:9c:a5:db:22:
d8:af:5c:a0:e8:5a:fb:e2:01:08:33:3c:01:fd:0c:9c:2a:df:
ef:39:a5:5f:43:e7:48:4b:7c:e1:12:25:53:f5:b8:e1:46:7e:
80:5f:8f:0b:98:d0:ec:ff:d3:3e:de:5d:b4:72:41:3b:2e:42:
9b:a2:4a:21:83:95:14:1f:38:e5:6a:e5:ee:6e:7e:ae:4a:c6:
81:ea:d9:b3:f4:c4:10:b6:7c:a3:eb:24:1c:50:5b:51:90:5c:
69:10:fd:39:43:07:55:9e:a7:ca:44:2d:c5:f0:3f:7f:ca:3b:
3f:7b:a5:24:74:d7:3d:d7:33:fc:5b:5d:95:97:77:db:e8:e6:
1c:37:67:13:60:49:05:6d:6d:84:77:f0:ea:01:0b:ae:48:74:
db:27:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:36 2023 by rpki-client on console-ams.rpki-client.org