Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/5uEHTOnEx55FEdJYENNrNY4oEns.roa
File: 5uEHTOnEx55FEdJYENNrNY4oEns.roa (raw, json)
Hash identifier: TSC6msATtf9QbIWWUKD6CSCNFFmGi3VgDdZRdRnHhE4=
Subject key identifier: E6:E1:07:4C:E9:C4:C7:9E:45:11:D2:58:10:D3:6B:35:8E:28:12:7B
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 164E30D9
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/5uEHTOnEx55FEdJYENNrNY4oEns.roa
Signing time: Sat 01 Jan 2022 16:06:34 +0000
ROA not before: Sat 01 Jan 2022 16:06:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 185.16.85.0/24 maxlen: 24
185.16.86.0/24 maxlen: 24
2a03:b000:a00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374223065 (0x164e30d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jan 1 16:06:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6e1074ce9c4c79e4511d25810d36b358e28127b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:7b:10:63:8b:61:fe:8f:1a:9b:76:69:72:
22:89:72:64:5c:e8:e3:02:3d:88:6a:a1:b6:fe:a6:
05:71:76:6b:92:0d:9d:cd:be:78:0f:c2:93:42:35:
d0:24:15:4b:bd:05:2a:e0:9b:4d:fd:33:b4:40:ea:
6e:fc:0d:37:61:f9:7b:dd:49:2e:a6:ad:68:0b:7c:
ab:7a:ef:d2:ed:3b:8f:60:97:e9:3d:9e:05:bd:0c:
0e:f1:55:57:45:6e:01:13:db:a5:f0:29:38:58:a1:
86:53:f0:b9:3c:0f:fb:44:57:1b:e8:d8:d7:62:1f:
a6:b3:32:43:7d:77:0e:6f:c3:41:77:88:78:4c:d7:
35:c4:20:20:8f:f3:71:98:6b:7f:d8:51:7d:37:0e:
08:a7:c4:3f:1e:17:bf:00:36:f4:80:c3:1e:3e:36:
1a:b5:3d:2c:2a:ac:3c:45:84:16:da:74:db:4f:d5:
5e:b2:88:f3:e5:31:33:ec:d8:56:a4:81:68:ec:ec:
f6:24:00:f7:af:46:f0:f5:23:ac:63:fc:4d:d0:ca:
ef:00:04:e3:8e:98:a4:51:dd:76:35:1e:55:08:c8:
4c:50:0a:ce:65:44:e0:07:d6:ff:e7:32:34:47:00:
7b:0b:3d:d2:e2:80:9d:6c:61:f1:ea:c5:1e:5e:be:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:07:4C:E9:C4:C7:9E:45:11:D2:58:10:D3:6B:35:8E:28:12:7B
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/5uEHTOnEx55FEdJYENNrNY4oEns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.85.0-185.16.86.255
IPv6:
2a03:b000:a00::/40
Signature Algorithm: sha256WithRSAEncryption
10:a9:84:13:2f:28:5d:3f:08:29:a5:dc:c9:6c:a5:bc:bf:94:
63:97:13:19:fa:c2:6f:84:f9:f0:8f:ba:d8:ec:58:24:27:fe:
4d:43:45:d5:39:52:53:54:e3:6a:0f:3d:37:79:4f:61:0f:c7:
4c:b2:2a:63:f5:94:27:b8:24:69:12:d5:df:6a:e6:b9:60:4a:
2e:42:21:26:6a:eb:04:96:61:b4:3e:53:8c:da:28:fb:e6:3a:
57:42:c6:ef:49:8a:42:cc:85:0d:95:66:55:2e:2f:87:ef:05:
cd:3b:92:c2:ea:f9:59:e9:0f:5a:d7:51:4d:49:58:8b:e9:90:
ad:98:0c:79:af:7f:82:c7:61:9a:e8:2e:e6:53:69:03:22:32:
fe:82:02:c4:cd:0d:83:8b:e1:cc:6a:7f:e0:69:93:ef:3b:9a:
25:6f:5e:ee:c8:3b:c7:54:6f:70:a8:24:9c:83:bb:f2:c6:ad:
f5:d2:32:37:d1:64:f0:27:6a:a0:97:0a:7e:54:6e:77:96:56:
43:3e:b7:79:15:35:47:73:78:01:36:f1:ab:22:5d:b3:4b:ee:
ff:e0:55:05:9d:36:05:e1:76:72:c7:a5:9f:f5:30:b4:be:52:
2f:a5:5a:34:49:6d:7c:02:ac:95:90:b1:59:3f:40:de:22:fe:
19:7c:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-fra.rpki-client.org