Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/SA6lEqpGneHwdyXPbjl6yImwIHg.roa
File: SA6lEqpGneHwdyXPbjl6yImwIHg.roa (raw, json)
Hash identifier: K4RndmgEv/u0PUVEMtGtrExwJX/i9KqkKS4I8lA2DN0=
Subject key identifier: 48:0E:A5:12:AA:46:9D:E1:F0:77:25:CF:6E:39:7A:C8:89:B0:20:78
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 1668EDAB
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/SA6lEqpGneHwdyXPbjl6yImwIHg.roa
Signing time: Sat 01 Jan 2022 13:00:02 +0000
ROA not before: Sat 01 Jan 2022 13:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199941
IP address blocks: 185.41.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375975339 (0x1668edab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jan 1 13:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=480ea512aa469de1f07725cf6e397ac889b02078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:7a:73:22:e9:a4:98:5a:de:70:54:d9:3e:
24:20:35:ec:82:ee:bd:83:2d:40:85:f7:19:32:a7:
46:5f:9a:80:06:b4:b9:fe:c4:f4:57:0d:5f:7c:6b:
af:e3:4a:db:41:ea:98:26:04:38:c7:bf:67:b8:32:
07:c5:19:f3:e6:de:2b:e2:a4:bd:23:3f:2b:04:65:
a9:ff:5d:7b:5c:6b:29:be:08:eb:bb:18:39:8c:0f:
01:dc:47:0d:90:2e:dc:db:cb:a5:ee:84:b7:9a:8a:
86:51:f4:25:59:2a:62:ce:3e:5a:d5:d8:f4:bf:21:
37:e5:0e:22:e0:91:8f:fe:8d:f2:4c:d1:ae:40:b6:
ba:87:b9:0f:f6:22:3c:a4:36:77:bc:1b:1a:53:c0:
d5:b8:63:1a:4d:99:88:e2:0a:7e:15:ad:82:53:0d:
ce:81:cf:e2:a1:67:2d:24:62:74:3a:dc:57:11:5c:
66:17:3f:8b:ca:e5:46:d8:42:50:3a:80:68:8e:6f:
93:4b:81:5b:57:29:0a:4c:71:72:65:30:43:38:60:
c0:bb:ca:7a:78:0d:ba:74:4d:6c:af:37:bc:95:a6:
19:c1:01:e2:89:aa:58:cc:e7:dd:46:4d:1a:6b:a5:
fa:d7:b6:8c:b8:ee:54:7e:46:1e:5c:5e:60:d7:49:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0E:A5:12:AA:46:9D:E1:F0:77:25:CF:6E:39:7A:C8:89:B0:20:78
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/SA6lEqpGneHwdyXPbjl6yImwIHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.212.0/22
Signature Algorithm: sha256WithRSAEncryption
21:6a:c1:de:2e:a5:71:35:4f:2f:d1:62:06:2a:9a:28:6b:0f:
ff:c8:ac:60:d7:f0:0b:c8:e1:5b:5a:c0:7e:51:b2:77:41:ee:
3e:51:23:ba:d2:bb:13:31:21:4b:05:82:5d:bc:30:23:85:3d:
1c:64:57:4b:6c:bc:d5:4b:6b:f9:8a:a7:5f:ec:3e:e8:63:ee:
5a:92:b8:08:59:ef:73:b5:10:e9:56:a6:e3:ca:f4:1a:76:e5:
5a:a3:da:dd:d7:b1:5f:16:22:b0:a8:b8:c9:da:14:17:6d:b1:
bc:b2:73:37:cb:d8:70:d6:1a:cb:88:2d:bf:6f:d5:ad:9c:34:
9a:5f:8d:8b:29:d6:3a:b6:34:62:59:59:99:7a:4b:7c:e1:09:
d4:b6:9e:0f:99:bd:b8:61:01:25:73:ef:b0:1e:38:67:f2:72:
1d:48:25:65:09:2d:22:8e:e3:54:f9:d4:ed:2d:b3:96:26:78:
3c:e5:e5:08:7d:d9:80:c7:9d:ee:1c:f5:44:07:ca:60:20:40:
e8:2b:07:1e:6e:cc:3f:18:4b:6b:4d:c0:9c:9e:11:db:67:e8:
bd:f3:61:76:09:4e:10:57:a0:f3:56:6e:2c:3d:fd:ec:7c:bd:
ff:86:13:ab:80:62:56:67:3f:9f:92:8c:c0:6c:40:51:1c:a4:
8d:32:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:14 2024 by rpki-client on console-fra.rpki-client.org