Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/dWjsNYTsVPFxnVlE_Tq6Q5JdlzE.roa
File: dWjsNYTsVPFxnVlE_Tq6Q5JdlzE.roa (raw, json)
Hash identifier: smdM5X3UywJmRoxc99YlGu/wdMlQu55gw7f7iSb6EOc=
Subject key identifier: 75:68:EC:35:84:EC:54:F1:71:9D:59:44:FD:3A:BA:43:92:5D:97:31
Certificate issuer: /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial: 0EAC9D4D
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/dWjsNYTsVPFxnVlE_Tq6Q5JdlzE.roa
Signing time: Tue 26 Apr 2022 06:25:49 +0000
ROA not before: Tue 26 Apr 2022 06:25:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39934
IP address blocks: 185.224.4.0/24 maxlen: 24
185.224.5.0/24 maxlen: 24
185.224.7.0/24 maxlen: 24
185.224.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246193485 (0xeac9d4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Validity
Not Before: Apr 26 06:25:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7568ec3584ec54f1719d5944fd3aba43925d9731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:73:ed:03:0a:25:dc:60:b2:99:ca:e9:0e:
24:7a:56:a8:c7:7b:0e:1c:7a:31:6f:22:d4:58:c2:
e5:f8:5d:76:ae:a5:11:cf:41:3a:1b:7f:25:e9:31:
6f:74:09:dd:9f:f9:38:13:a8:34:e9:dd:b0:74:64:
dc:43:ed:9b:20:60:d1:2b:5c:43:d2:fb:75:22:c1:
6d:99:0c:dc:20:3e:56:42:3b:bf:fb:a1:41:37:33:
4a:d8:bd:20:2f:15:6b:91:a2:20:88:99:87:ac:15:
b7:ac:c0:3a:1f:a8:19:a5:77:c2:0d:1f:27:5c:5e:
42:85:8f:e4:aa:c9:e8:96:7d:1e:08:bc:23:f5:48:
81:11:71:54:4d:cb:a2:cf:32:58:e9:d7:60:6a:ca:
ee:90:86:42:f4:60:5f:e2:69:0d:32:1a:ca:a7:8f:
1f:70:bb:a0:c0:cd:52:b6:d9:d6:33:d0:96:f8:f6:
3f:f1:34:61:66:ab:47:81:57:8a:d9:15:b4:9f:cd:
97:0f:53:ba:7d:ae:4d:8c:5b:fa:3b:24:66:25:0d:
58:f8:e9:01:07:72:88:1b:8f:e6:15:7c:3d:89:9d:
c1:07:02:70:ea:91:8d:9e:af:34:a0:ba:5e:21:31:
3d:b2:5f:f6:f1:75:b2:ec:35:68:85:56:f9:4b:5b:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:68:EC:35:84:EC:54:F1:71:9D:59:44:FD:3A:BA:43:92:5D:97:31
X509v3 Authority Key Identifier:
keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/dWjsNYTsVPFxnVlE_Tq6Q5JdlzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:a4:a6:56:f2:9b:5b:fd:32:fb:72:a7:67:3b:2b:bd:7f:48:
16:ed:10:ed:0d:05:c8:67:30:86:b9:53:cf:18:83:8b:28:62:
b0:aa:ce:50:98:26:12:1a:81:0b:cc:18:0e:da:0d:53:3a:23:
70:56:96:02:6a:56:db:d9:ad:38:97:20:72:b4:f2:9f:ca:0a:
44:2c:c9:1a:cb:de:b9:c2:d4:a7:16:94:06:ee:92:19:fe:29:
b6:0b:9c:98:55:5f:52:1a:6d:f6:5a:68:97:58:c5:4a:70:bb:
1b:ac:1a:48:51:a1:ba:35:c7:c1:98:57:e5:0d:00:8d:77:d8:
4d:b9:c6:72:bb:de:25:57:c2:38:e7:aa:64:24:28:e9:e5:49:
1e:04:cf:d6:37:80:24:b8:02:c0:00:6b:dd:c2:2b:ec:ed:9a:
9f:38:0a:15:0c:2e:39:87:82:95:92:68:f9:2e:3b:f1:15:e6:
a2:7d:21:81:e9:aa:98:fd:8f:9a:5e:0a:24:66:35:42:81:7b:
92:f8:35:67:0b:48:b1:9b:4d:9f:27:84:dd:07:33:f8:7b:e5:
9b:45:14:72:ab:93:6a:ad:86:d5:be:59:3b:0c:37:3e:72:bc:
0d:86:d7:6b:c0:f9:62:e7:cb:e5:0b:5e:07:cf:04:ed:1c:d1:
de:bd:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net