Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/j18wOqv6Zv0OaboqBdV8WDBygWM.roa
File: j18wOqv6Zv0OaboqBdV8WDBygWM.roa (raw, json)
Hash identifier: pHqU569+d7fZs0APNI3ukZe4ng95pZHSjZjXihobqTQ=
Subject key identifier: 8F:5F:30:3A:AB:FA:66:FD:0E:69:BA:2A:05:D5:7C:58:30:72:81:63
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 1283CA24
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/j18wOqv6Zv0OaboqBdV8WDBygWM.roa
Signing time: Wed 30 Mar 2022 06:07:50 +0000
ROA not before: Wed 30 Mar 2022 06:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.156.170.0/23 maxlen: 24
185.156.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310626852 (0x1283ca24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Mar 30 06:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f5f303aabfa66fd0e69ba2a05d57c5830728163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:b0:be:9e:6e:3a:ab:29:57:30:07:41:78:
e5:ca:c2:6b:b6:c8:04:55:dd:93:45:57:09:c0:bd:
35:1d:9e:a9:96:4c:fa:14:d3:9d:5e:2b:b7:0b:64:
55:3d:11:76:39:6e:64:db:26:d4:70:86:cd:b0:89:
55:b2:a2:43:6a:ce:8f:44:93:77:62:b2:72:e8:41:
6e:94:f1:f7:03:68:e4:f0:0d:d2:17:d6:1b:11:58:
73:ae:ec:70:02:9a:d1:e3:61:af:08:51:cc:c1:55:
3d:37:a9:06:24:a0:ff:13:28:0a:50:82:38:db:b3:
84:d2:74:2b:f2:2e:f3:86:1c:39:a4:45:fa:7c:eb:
a7:ce:6d:a4:33:d3:84:e6:e1:eb:1f:ff:11:35:82:
17:6e:ca:ea:5f:32:35:b5:25:4c:0d:cb:c6:d8:85:
4e:5b:c7:8d:71:e3:dc:4a:0e:a4:ee:ae:10:4b:ed:
f1:70:7b:e2:3f:35:20:a1:fe:37:5c:46:b0:0e:91:
ee:9a:4d:21:d0:b8:fa:22:4c:d1:a2:65:c1:9c:63:
3f:b8:cc:f3:7a:22:5b:be:b7:59:e8:49:81:ff:9b:
3f:90:1d:b6:20:85:c5:cd:7a:e2:f1:68:7d:27:90:
ae:94:2f:47:af:a4:23:ae:4d:74:a6:95:96:46:b4:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5F:30:3A:AB:FA:66:FD:0E:69:BA:2A:05:D5:7C:58:30:72:81:63
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/j18wOqv6Zv0OaboqBdV8WDBygWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.168.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:c0:79:33:fe:f4:e9:bb:9f:02:ff:71:23:cd:3d:be:e4:49:
02:a2:38:d9:77:c1:ad:de:ff:cb:a5:ab:2f:88:42:76:e0:6f:
87:59:2a:4c:75:e8:9e:45:d4:35:09:cb:01:fc:ab:19:aa:c9:
a1:f1:6e:9b:71:5b:3a:0b:92:ce:aa:d6:7e:d0:32:a7:18:44:
22:9a:9e:10:c6:c2:1e:f1:22:c9:b7:c2:de:8d:8a:aa:de:9d:
8e:b2:fd:c0:7d:9b:eb:53:84:2d:b5:ce:c6:2d:0a:eb:60:a0:
63:4a:ea:01:64:39:a1:aa:12:da:1a:9f:83:bd:93:ca:33:5a:
b5:5c:37:78:3f:45:9e:0b:3e:01:53:2b:62:8e:8a:ef:59:f9:
a6:eb:a4:e7:40:40:d5:c8:52:11:41:6b:f6:17:09:bb:45:88:
61:15:8f:bb:27:52:79:eb:46:87:5b:49:ee:fc:2b:8b:ef:5c:
f8:71:1c:6a:48:75:eb:38:ed:4e:85:19:d1:de:21:32:2c:11:
9f:fa:6f:ed:18:a2:b9:77:74:1f:83:aa:26:22:ae:09:80:53:
32:52:05:00:1a:f3:90:b4:11:5e:4e:06:08:1a:a4:b9:ad:de:
18:66:e8:3d:3b:ef:32:a0:11:b6:16:11:10:ac:6d:2d:a8:46:
02:54:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:55 2024 by rpki-client on console-fra.rpki-client.org