Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/XAd5fjAqzWBEowpLUF8u-mDHRes.roa
File: XAd5fjAqzWBEowpLUF8u-mDHRes.roa (raw, json)
Hash identifier: 9MxfDcFG+ifebbTm0BkYUr1wuSj5zRY9hx5XjQAWYP8=
Subject key identifier: 5C:07:79:7E:30:2A:CD:60:44:A3:0A:4B:50:5F:2E:FA:60:C7:45:EB
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 01832269CFC71923FE00B9372D83E6F8DA46
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/XAd5fjAqzWBEowpLUF8u-mDHRes.roa
Signing time: Fri 09 Sep 2022 13:21:43 +0000
ROA not before: Fri 09 Sep 2022 13:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30900
IP address blocks: 185.108.128.0/22 maxlen: 22
2a01:6280::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:69:cf:c7:19:23:fe:00:b9:37:2d:83:e6:f8:da:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Sep 9 13:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c07797e302acd6044a30a4b505f2efa60c745eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:a6:97:ba:0b:f1:36:fa:07:01:b1:9b:bf:
ce:dd:46:aa:70:63:9d:6c:11:8f:e7:35:af:8e:9e:
c1:6d:8f:49:e8:b6:03:f9:55:67:98:27:b3:27:ae:
0e:3f:27:28:46:76:08:bb:96:1f:f6:67:d5:b6:15:
f0:0f:82:e2:26:29:50:ce:79:13:10:45:f3:d9:71:
5f:83:a3:2e:33:6d:d6:b4:9f:42:33:71:01:8a:90:
1e:44:f4:3c:72:7e:a5:75:7d:f1:45:51:a8:61:73:
a7:6e:d1:09:b5:f7:1f:18:bd:3c:29:40:94:fd:9c:
05:83:3d:b7:cb:54:22:4c:ea:3e:37:05:0b:e7:a6:
5d:f9:7e:fc:ad:79:4a:b2:46:1f:cd:7e:e8:5d:46:
1c:05:ee:7c:0d:56:4e:cc:7d:14:fc:dd:25:23:87:
49:d1:5c:27:97:57:fe:d1:83:6b:04:c1:9a:34:43:
dc:3f:35:a7:9b:67:0e:11:a3:a4:51:48:ae:00:a0:
85:a9:1b:c2:97:3c:bc:58:c4:1a:78:c5:03:5b:69:
cc:c4:f6:66:e6:b3:f0:63:9a:a6:d5:d1:ff:e1:a7:
77:21:6a:c4:f2:92:85:c3:2e:4e:22:65:22:19:27:
9e:4a:3b:bb:59:66:57:75:cf:83:d0:c1:a2:97:a5:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:79:7E:30:2A:CD:60:44:A3:0A:4B:50:5F:2E:FA:60:C7:45:EB
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/XAd5fjAqzWBEowpLUF8u-mDHRes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.128.0/22
IPv6:
2a01:6280::/32
Signature Algorithm: sha256WithRSAEncryption
96:b1:2e:6a:4d:e3:ac:aa:47:30:12:bb:3e:3f:3b:45:3b:97:
61:54:6e:d5:e2:8f:34:16:97:58:77:c2:56:1c:99:cd:88:8a:
4a:35:ed:67:5a:e4:f3:45:5f:00:15:e2:b7:93:99:ff:6f:2a:
08:77:87:d1:c8:14:21:e6:46:f5:b7:4a:76:d1:09:b3:86:56:
b9:6c:14:e3:d8:c3:c5:81:ac:21:13:a7:0f:b0:d1:a9:ea:a9:
4d:a6:44:cc:7e:e5:19:81:72:6a:9a:0f:8d:0b:02:3b:75:9d:
f2:60:d0:f0:f9:07:0f:02:b8:3c:23:61:a2:8d:77:d1:bb:35:
7e:d6:6d:09:de:02:06:30:21:9f:b8:42:31:6a:91:10:35:e4:
c5:dc:29:a6:f4:59:c3:b6:de:7b:c0:4b:b9:a4:1f:15:fc:46:
1a:14:88:74:ce:85:bd:c0:fd:d9:da:89:43:d8:27:b8:1a:1a:
84:93:c4:0f:55:53:33:d6:58:8f:0b:4e:e6:96:f0:a5:51:7c:
a0:33:5b:e3:a3:5d:5d:3e:5c:d9:c9:75:e3:bf:68:2c:5b:57:
d6:15:22:cf:50:33:0f:64:4f:74:78:6c:d1:e1:dd:6e:7c:c0:
02:e7:45:49:2d:3f:19:84:df:65:b5:44:94:1c:09:8e:96:b3:
88:b8:de:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:00 2024 by rpki-client on console-fra.rpki-client.org