Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/kLaLQZt8yvOOy0sw3R5Lpam6Was.roa
File: kLaLQZt8yvOOy0sw3R5Lpam6Was.roa (raw, json)
Hash identifier: uleHUfryN1gbGrVRMBeqHVBDvgwbhLkG+7UyLdxN5cQ=
Subject key identifier: 90:B6:8B:41:9B:7C:CA:F3:8E:CB:4B:30:DD:1E:4B:A5:A9:BA:59:AB
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 0CE650BA
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/kLaLQZt8yvOOy0sw3R5Lpam6Was.roa
Signing time: Sat 01 Jan 2022 04:57:45 +0000
ROA not before: Sat 01 Jan 2022 04:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12453
IP address blocks: 185.230.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216420538 (0xce650ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Jan 1 04:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90b68b419b7ccaf38ecb4b30dd1e4ba5a9ba59ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:c5:da:8d:bc:0d:a1:e2:ae:3a:ce:b5:8a:
68:bd:88:3e:51:be:85:ff:72:c2:d0:13:56:ad:ea:
6c:62:ab:5f:49:4e:fd:75:e4:a4:70:d8:ae:93:4a:
1a:61:bf:19:4c:07:3b:ae:94:b2:77:ab:4f:49:78:
30:dd:57:00:a9:47:eb:6f:cf:87:c3:68:77:f5:d3:
63:a8:4b:3e:9a:fa:95:c3:2a:eb:f4:0f:8a:71:9a:
6d:b4:5e:58:3e:ad:71:c1:4e:f0:c8:f9:7f:4d:41:
5a:d3:80:b6:6d:17:3a:e3:da:2e:54:a3:bb:09:57:
b6:7b:64:44:ce:02:e1:56:50:f9:ed:32:23:6e:46:
b2:a9:be:25:54:cf:09:40:fb:89:18:82:79:d9:a7:
8e:e2:44:eb:26:d1:de:e7:64:da:77:72:29:c1:93:
a3:36:cd:1a:7c:e4:cf:25:76:82:6b:34:f7:45:f7:
fe:81:dc:20:74:eb:7d:b6:39:01:1d:09:f7:66:63:
92:06:5d:76:c1:e7:8e:38:af:47:28:ec:70:8d:ac:
0e:ef:74:51:2b:93:77:02:fc:ef:ab:1b:88:1f:87:
5f:31:db:64:db:46:13:88:8c:27:7a:75:5b:e5:e4:
54:9d:ca:1b:11:ad:cd:ab:7c:38:47:c7:03:99:66:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B6:8B:41:9B:7C:CA:F3:8E:CB:4B:30:DD:1E:4B:A5:A9:BA:59:AB
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/kLaLQZt8yvOOy0sw3R5Lpam6Was.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:de:bc:29:42:83:d5:cc:da:e6:50:6f:c1:a5:d6:b3:a3:9e:
3f:cc:f8:74:16:0d:99:9a:c2:0a:d4:e8:94:06:5c:ee:e1:83:
1f:9f:3f:5d:1b:a7:ed:49:84:28:b1:d8:38:d6:ea:88:25:c1:
5f:da:3d:d2:b9:78:4b:5c:2b:f4:c7:e8:09:a4:ac:ae:d4:36:
e6:ee:db:80:78:30:af:39:e4:02:9c:47:5b:8e:a1:25:92:a6:
38:8c:f6:94:bb:a6:80:2d:1b:b4:4d:43:0e:60:bd:ed:04:b2:
9a:02:ae:9e:0a:31:bd:8f:d2:67:9f:1e:b9:b4:92:30:6a:9c:
ea:3c:88:8c:c1:23:95:c3:72:fa:de:ba:cb:c1:2d:11:de:ab:
28:ad:ab:41:e0:69:a4:ae:79:97:2b:b0:ca:39:50:54:39:75:
29:fc:e9:65:35:70:71:c4:ae:65:7e:60:c3:9e:97:69:52:2e:
93:47:26:79:ff:a2:8a:b8:b9:c5:a7:f8:a8:e3:81:e3:4f:eb:
90:7b:d7:75:ae:55:f2:cf:ad:c5:c1:72:58:d9:74:fe:79:ae:
9d:05:18:da:d3:41:f8:5c:4f:65:a4:31:f3:51:87:00:aa:eb:
6c:01:87:95:24:2a:db:70:16:c5:15:c5:50:94:0a:ff:61:39:
36:15:77:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:30 2024 by rpki-client on console-fra.rpki-client.org