Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/lnDYsZRYgfNvpkN5_bk7sJg4Jh0.roa
File: lnDYsZRYgfNvpkN5_bk7sJg4Jh0.roa (raw, json)
Hash identifier: EbN7/I0zvls+2TYZfG5BjEC+bojQP4jHTRnlEFInU1Y=
Subject key identifier: 96:70:D8:B1:94:58:81:F3:6F:A6:43:79:FD:B9:3B:B0:98:38:26:1D
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 3290CC98
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/lnDYsZRYgfNvpkN5_bk7sJg4Jh0.roa
Signing time: Sat 01 Jan 2022 06:56:07 +0000
ROA not before: Sat 01 Jan 2022 06:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59715
IP address blocks: 185.5.200.0/22 maxlen: 24
2a02:cdc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848350360 (0x3290cc98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Jan 1 06:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9670d8b1945881f36fa64379fdb93bb09838261d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0b:05:e7:80:3c:e0:00:3d:00:3b:2e:77:79:
db:6d:e1:42:3a:07:e2:c6:d3:d9:d9:44:db:96:00:
fb:de:13:c7:ae:ea:a4:0c:d2:23:de:7b:fc:e5:e4:
36:55:2e:c3:48:fc:dd:67:18:f4:b0:3f:b7:06:e5:
4e:7c:9c:58:fd:84:4e:2b:31:21:4f:b0:19:97:10:
3c:8c:09:dc:68:68:b9:40:24:c2:bd:dc:2a:61:97:
e4:b8:8a:a4:91:6b:c7:0b:b8:0a:92:0a:38:2b:69:
65:80:85:70:57:b7:03:af:e5:87:93:f0:be:73:e7:
8a:e4:ba:a1:5c:61:63:16:04:88:78:2a:89:7b:d5:
a9:4a:9f:b7:a5:18:71:9f:e2:b2:5e:5f:d4:ee:48:
0f:27:34:00:eb:8d:54:4a:df:3e:78:24:f6:3a:98:
46:d8:be:bf:6d:19:89:d5:a8:93:6b:62:0e:05:fb:
bb:03:f6:99:2c:bd:25:43:d5:f1:62:1f:99:3e:b8:
67:3a:1e:4a:96:30:13:18:3e:56:8f:4f:80:83:79:
af:34:19:c5:e2:a3:fc:ce:2d:d3:d7:99:f4:c9:1e:
0d:29:09:51:23:49:bb:4f:14:a9:c1:99:70:1f:2a:
5d:cb:5d:3f:a9:a0:59:19:6a:8a:d7:17:e1:a3:50:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:70:D8:B1:94:58:81:F3:6F:A6:43:79:FD:B9:3B:B0:98:38:26:1D
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/lnDYsZRYgfNvpkN5_bk7sJg4Jh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.200.0/22
IPv6:
2a02:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
42:6c:dd:70:51:4a:5c:aa:b8:02:7f:52:25:ff:1c:bf:d4:8e:
97:ad:9a:e7:5e:92:98:f8:9b:da:c8:de:6e:42:56:f9:cc:05:
d5:46:8e:6c:96:a3:dd:be:20:0f:16:e1:8a:a1:f1:29:4a:ca:
71:32:51:75:e8:49:9f:1b:f9:a7:ce:83:e3:e7:36:30:8b:35:
d2:cd:05:f0:0e:eb:59:60:7c:1d:62:a2:d2:32:fd:f7:99:36:
cd:eb:83:c7:c1:b9:39:b5:9e:6b:61:e6:2f:06:61:79:6e:cf:
ee:e5:ca:85:0e:e9:88:23:ea:50:ab:24:d8:cc:73:de:53:77:
5c:53:16:1b:66:3d:d8:9b:51:d9:f5:80:fd:bd:e5:79:2a:79:
ba:44:df:01:58:58:cc:c5:2c:7d:cf:50:3b:5d:89:af:6a:ba:
b6:2d:80:11:ae:a8:f5:f4:0c:27:0d:17:91:2c:75:5d:8c:a5:
6e:0e:aa:2f:07:49:1c:77:38:62:78:fe:ac:64:02:3a:78:4a:
f7:7e:22:66:63:22:61:a3:4f:bc:6f:0c:49:7e:df:c8:c5:f4:
00:e0:bc:d7:7c:b1:9f:dd:27:b8:d9:e1:17:03:ba:c0:7e:cf:
d5:47:b3:12:29:3e:47:dc:0b:5c:70:84:44:cf:7e:ba:a3:2d:
53:97:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org