Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/5b3hCmnztGQ_eme6MTPa8dV0zcY.roa
File: 5b3hCmnztGQ_eme6MTPa8dV0zcY.roa (raw, json)
Hash identifier: 9UAP/AWFHC/1i5Nv4RJXsm4PU5XbwPdcvwzy6VXSzgo=
Subject key identifier: E5:BD:E1:0A:69:F3:B4:64:3F:7A:67:BA:31:33:DA:F1:D5:74:CD:C6
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 38869107
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/5b3hCmnztGQ_eme6MTPa8dV0zcY.roa
Signing time: Sat 01 Jan 2022 12:00:53 +0000
ROA not before: Sat 01 Jan 2022 12:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25506
IP address blocks: 185.183.236.0/24 maxlen: 24
185.183.237.0/24 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948343047 (0x38869107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 1 12:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5bde10a69f3b4643f7a67ba3133daf1d574cdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:9a:64:7f:f8:5d:95:75:e6:ac:68:b0:7e:
d6:3f:3f:9b:77:0e:9e:a5:65:96:66:48:4b:7a:ff:
41:bc:ab:be:e1:19:31:c7:b8:51:6a:9d:14:2a:29:
66:8c:9a:d0:58:38:b2:6b:91:a7:22:8f:56:54:0e:
2b:dc:27:4c:80:76:39:0f:a8:22:3a:20:89:89:71:
51:ba:ca:ae:f1:36:13:ba:29:ad:f8:2a:aa:da:31:
af:a8:6b:ec:11:e5:79:f2:67:35:60:00:02:9c:48:
18:91:7a:ba:71:c7:8e:a1:c7:85:9e:35:94:42:11:
49:55:9f:5e:18:35:87:02:4f:f9:b0:78:01:bb:ff:
24:81:2c:7b:1a:ef:66:c6:18:9d:6c:aa:c0:5c:a2:
30:9f:8c:a3:65:39:b2:df:e7:71:23:01:b3:da:89:
c5:26:8b:23:7e:d3:fe:ff:5f:f0:0b:b5:de:9c:5d:
3c:37:38:e9:94:03:a6:c0:e5:d0:bf:4f:65:15:32:
ba:d8:3f:3a:d6:8c:cf:04:17:7b:9e:ac:d1:20:60:
60:c6:80:7b:c5:34:dd:c2:77:57:54:31:6b:54:d5:
9f:8d:6a:91:f5:69:60:97:53:30:c4:0f:33:ae:4f:
20:ad:ee:3a:6a:b2:6b:70:e8:0a:14:24:86:39:95:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:E1:0A:69:F3:B4:64:3F:7A:67:BA:31:33:DA:F1:D5:74:CD:C6
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/5b3hCmnztGQ_eme6MTPa8dV0zcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.236.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:30:94:af:6e:3d:e0:04:09:4a:14:cb:74:f5:4d:83:1e:d3:
e9:0e:e3:32:18:fe:66:f8:5e:74:1a:f0:8a:2b:a2:69:e5:b4:
b7:bb:39:da:5a:97:a5:55:b7:39:27:ba:71:84:c9:fa:20:a5:
12:ee:9e:03:55:3d:91:d0:0b:94:6e:9f:d4:ae:84:22:e9:f1:
ee:37:8a:91:bb:e0:2c:8d:3a:5d:67:31:ec:c0:93:a5:ca:31:
0c:d7:1f:0a:56:27:7e:5f:9a:fa:b8:05:83:9b:56:97:e2:09:
30:b4:3d:dc:5e:dc:60:a6:8d:b8:34:dd:7c:4f:e2:f8:3d:43:
1e:01:30:2f:c5:3f:ce:99:c0:69:66:0b:75:ff:b6:e6:b0:ac:
56:f0:da:4c:5d:b1:70:98:10:2b:34:09:2a:6d:b1:ba:f5:bf:
10:32:8c:ae:06:e7:e4:f7:1d:5c:c6:c2:94:72:e8:0c:c4:84:
2d:47:fb:1d:85:a6:45:3a:35:61:70:00:b6:60:60:6b:30:10:
54:8b:c8:5b:6b:e1:59:e4:e9:16:37:c3:89:f1:3c:0b:05:50:
44:f5:3a:71:09:61:f3:85:43:01:58:b5:36:46:dc:30:96:b6:
09:94:72:6c:4f:9a:0e:d8:c0:a4:16:7f:61:4d:31:fb:39:d5:
cd:df:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:11 2024 by rpki-client on console-fra.rpki-client.org