Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/AAjyQMy6nZ-ywddnVjuppYCDzRE.roa
File: AAjyQMy6nZ-ywddnVjuppYCDzRE.roa (raw, json)
Hash identifier: 2XwMYkH7icwr/8FyV/yAho30jkfUcyb4y4GPB5vmPB4=
Subject key identifier: 00:08:F2:40:CC:BA:9D:9F:B2:C1:D7:67:56:3B:A9:A5:80:83:CD:11
Certificate issuer: /CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Certificate serial: 093E35A1
Authority key identifier: D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/AAjyQMy6nZ-ywddnVjuppYCDzRE.roa
Signing time: Sat 01 Jan 2022 02:55:08 +0000
ROA not before: Sat 01 Jan 2022 02:55:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44821
IP address blocks: 185.23.138.0/23 maxlen: 23
5.253.132.0/23 maxlen: 23
5.253.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155071905 (0x93e35a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Validity
Not Before: Jan 1 02:55:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0008f240ccba9d9fb2c1d767563ba9a58083cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:b3:f7:00:f5:37:8e:9c:b9:5e:e2:6f:94:
61:92:85:b2:68:e1:c7:98:04:7a:8b:94:33:df:80:
42:5d:40:e8:3a:bc:4e:ae:59:b3:b0:0d:28:cd:51:
69:6a:c9:bf:f1:ed:a5:15:ff:62:3d:2f:51:ba:35:
2c:f0:39:1c:1a:09:9f:b0:6f:1d:2b:7d:57:e2:d7:
60:06:84:f3:6c:07:16:a6:23:32:bc:b3:56:48:0e:
63:4d:71:66:e2:4a:bd:15:4e:31:ab:60:bb:77:13:
e9:c1:d6:24:c2:4e:68:d5:fd:29:3a:f7:a5:d0:14:
f2:3f:91:cb:b8:df:33:8a:27:43:f0:ec:6e:dd:42:
e3:e6:1c:76:83:25:c9:32:c8:78:9b:eb:3c:45:80:
dd:69:ab:ec:32:1d:b2:ff:56:7c:e0:c5:ba:9f:09:
a3:4e:9f:c2:81:83:51:6b:76:39:ac:65:ec:e4:5d:
a5:0a:8e:a0:ee:f3:e4:04:8a:40:08:38:7d:68:e1:
d0:0d:35:24:2c:bc:29:59:61:a2:84:88:b0:00:df:
06:e1:bb:13:1f:bd:38:f0:e6:69:c5:2a:bb:77:19:
8e:20:01:a6:b8:0e:03:39:20:80:f6:a2:58:0c:bc:
16:31:65:c7:ae:90:6a:b3:24:e4:c5:05:4e:1e:2c:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:08:F2:40:CC:BA:9D:9F:B2:C1:D7:67:56:3B:A9:A5:80:83:CD:11
X509v3 Authority Key Identifier:
keyid:D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/AAjyQMy6nZ-ywddnVjuppYCDzRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.132.0-5.253.134.255
185.23.138.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:dd:fa:83:57:8a:99:bd:77:a2:6a:2e:58:56:23:a9:45:a7:
0d:69:e2:97:0c:4c:b1:12:dc:93:80:b0:c6:25:35:25:1c:ee:
fc:48:d8:3c:bd:75:ba:75:3a:2a:af:32:a5:c4:6f:29:3a:35:
39:cc:20:fc:3f:d7:cd:8b:fb:bc:f8:75:4a:e8:41:62:84:ed:
74:cf:7a:75:72:3b:10:46:c4:84:34:a3:95:60:38:c0:1d:6e:
52:a5:20:d8:d6:31:e8:ed:c7:40:d5:8a:50:d3:20:5b:a2:89:
d8:6e:23:a5:1e:b5:2c:d7:64:38:7c:96:d8:53:59:f4:22:27:
0b:7b:eb:6a:0e:21:09:8b:cb:88:71:74:65:37:9e:e4:8a:e3:
e4:b6:35:12:8e:a1:f4:1a:25:12:be:d3:67:0e:f7:43:6d:12:
30:5f:32:74:09:aa:0b:dc:13:58:40:78:9e:c7:c3:e0:8d:6d:
e6:6a:3f:b2:f1:84:45:df:cc:5d:d1:47:9f:8d:cb:d8:bb:b2:
67:ea:40:15:4a:b6:ae:6f:3e:61:6b:13:c9:14:b7:c6:c1:93:
65:f9:cc:36:db:b6:3a:49:2c:0e:fd:21:4e:d9:d1:d5:32:51:
32:ba:50:09:b5:8d:9d:dd:a8:be:8a:97:87:8b:71:b4:55:0e:
d8:9c:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:22 2024 by rpki-client on console-ams.rpki-client.org