Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/vhJc2GLu5GLNaogtIHKSHbj452g.roa
File: vhJc2GLu5GLNaogtIHKSHbj452g.roa (raw, json)
Hash identifier: gpzJGdzTNXdnnSeYoDIv3raTVhgTd+UyDSJxWnL+noo=
Subject key identifier: BE:12:5C:D8:62:EE:E4:62:CD:6A:88:2D:20:72:92:1D:B8:F8:E7:68
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 12817FDB
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/vhJc2GLu5GLNaogtIHKSHbj452g.roa
Signing time: Tue 29 Mar 2022 18:34:06 +0000
ROA not before: Tue 29 Mar 2022 18:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.156.168.0/23 maxlen: 24
185.156.170.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310476763 (0x12817fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Mar 29 18:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be125cd862eee462cd6a882d2072921db8f8e768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:73:30:01:3c:48:62:24:56:cb:7b:5d:60:c9:
c4:69:83:f6:ff:ed:ed:23:1f:de:c0:f1:3e:28:42:
21:c2:9e:74:09:b3:90:7d:58:8c:1e:40:e8:8a:39:
56:19:cd:0b:fa:7a:58:f6:03:81:2c:ae:1a:25:85:
3d:c3:ec:7c:62:a0:9c:b4:b8:99:dd:6c:a8:fe:cd:
45:8b:56:7b:49:74:54:a0:b9:df:37:53:31:dd:41:
8a:cb:bc:60:74:cb:78:9a:7d:51:40:07:4d:d5:6a:
e3:a0:26:c5:97:ca:33:fb:25:86:d0:7f:41:3a:89:
ed:84:6c:ca:da:f9:e0:48:c9:36:e8:aa:61:d6:a9:
e5:59:09:d9:b4:af:63:71:24:9c:2f:3d:bb:41:81:
7f:3d:5c:fe:27:e6:94:a7:65:4f:3c:1b:0b:fb:df:
20:0a:6e:33:9c:67:58:59:c0:d7:45:9e:78:83:b9:
6a:bc:e7:52:9e:41:99:16:c2:94:6b:56:1e:f5:de:
f9:1c:d6:ad:ce:6f:0d:08:4c:c2:a6:d9:a7:eb:2b:
ec:0a:a4:86:89:8a:aa:c1:a6:d1:5f:04:4e:22:9b:
8c:f7:62:41:15:18:4d:a4:7e:4e:a9:bc:27:d4:f8:
13:03:4e:49:05:e8:f4:93:34:70:eb:57:48:2d:2c:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:5C:D8:62:EE:E4:62:CD:6A:88:2D:20:72:92:1D:B8:F8:E7:68
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/vhJc2GLu5GLNaogtIHKSHbj452g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.168.0/22
Signature Algorithm: sha256WithRSAEncryption
19:cb:8b:23:ac:ba:15:40:98:14:bf:96:57:07:fb:12:02:0c:
d1:e3:9e:47:e8:3d:d5:6e:ac:97:d2:41:48:95:87:70:22:9f:
04:20:63:41:0f:19:a9:52:c5:0d:fc:39:98:81:f0:d7:aa:c8:
0f:3e:7a:a4:37:9e:ed:71:ab:62:6d:00:36:b1:b0:ff:93:39:
a5:9b:29:37:71:9b:7c:58:b1:47:ad:6a:b7:18:8a:89:7b:d9:
07:e4:a4:ae:4c:81:9c:04:96:44:41:80:3f:1a:1a:2b:ba:fb:
1d:e1:9b:d5:e0:ee:54:93:21:97:47:f8:03:8f:fe:c4:94:d8:
20:42:82:65:f6:f4:98:0b:4e:83:85:6a:f8:e1:d0:82:f3:80:
ba:dc:cc:f2:29:e9:44:68:02:fa:2e:3b:a4:79:ca:8f:1d:6f:
83:2c:d0:46:36:39:2a:31:ba:93:f2:66:c2:63:f8:6b:ac:c6:
1c:77:40:82:5e:ce:91:f3:ab:43:5b:72:08:c9:3a:72:9e:e4:
33:02:63:a5:86:37:d3:26:d7:44:0c:37:44:7d:f4:22:23:af:
63:cc:d1:fd:8a:30:c9:46:ba:4f:5e:06:5c:a1:68:99:9c:fd:
3d:ce:c4:e3:fb:36:a6:0e:04:ae:4b:bf:1a:41:a9:8b:e2:94:
df:83:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:55 2024 by rpki-client on console-fra.rpki-client.org