Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/iZHeXfjmHI0rUZk1kYuIWwMYP_4.roa
File: iZHeXfjmHI0rUZk1kYuIWwMYP_4.roa (raw, json)
Hash identifier: jWoDInqRsJCKB7OB3kkE20kD6y0Hv7twL00Aa6UySiE=
Subject key identifier: 89:91:DE:5D:F8:E6:1C:8D:2B:51:99:35:91:8B:88:5B:03:18:3F:FE
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 05DBEBCD
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/iZHeXfjmHI0rUZk1kYuIWwMYP_4.roa
Signing time: Thu 12 May 2022 13:54:02 +0000
ROA not before: Thu 12 May 2022 13:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25441
IP address blocks: 185.247.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98298829 (0x5dbebcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: May 12 13:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8991de5df8e61c8d2b519935918b885b03183ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:88:8c:70:35:38:b9:7a:33:ce:7d:8a:fc:
e1:a9:b4:5a:05:20:78:76:c1:03:c0:90:5e:52:4a:
a5:a7:2f:7b:2a:99:e0:b2:0a:a7:15:ea:f1:15:32:
43:b8:fd:1b:4c:ff:4a:1c:6a:a1:c5:5c:61:10:fe:
c1:68:50:95:c4:70:78:7a:18:e9:6b:a8:44:f8:1e:
a6:55:f0:77:28:4c:6a:d1:e2:7f:00:10:94:63:6e:
4e:1e:55:cc:41:ee:63:cf:07:2c:ce:3f:1b:09:18:
ff:4d:aa:02:41:b4:7f:59:50:e2:f0:0d:10:7e:4f:
23:09:57:a0:63:fe:40:9b:77:37:d5:6d:f7:5f:0b:
49:81:1c:e9:8f:a2:81:a5:8f:eb:4e:48:f9:48:8f:
87:f1:1a:5b:75:51:16:c3:e2:d4:1a:0b:0d:22:18:
91:5b:70:ea:ae:57:49:24:56:87:bb:b2:d8:f8:be:
ff:81:78:b4:fe:b6:f1:08:e8:04:68:0c:ed:15:50:
ab:b8:26:4a:6a:44:90:a2:49:4c:28:d0:c4:38:8f:
35:42:b8:7d:04:72:7b:16:65:c6:5f:b0:cb:c2:93:
3d:3d:6d:75:53:95:cb:7b:7f:df:33:04:2e:7a:50:
0c:1e:4a:5a:f2:70:b7:72:7c:d2:4f:cd:6d:6f:a2:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:DE:5D:F8:E6:1C:8D:2B:51:99:35:91:8B:88:5B:03:18:3F:FE
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/iZHeXfjmHI0rUZk1kYuIWwMYP_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.52.0/22
Signature Algorithm: sha256WithRSAEncryption
84:5a:cd:37:9f:7b:64:e5:fa:9c:13:a6:1a:d1:eb:82:37:d7:
42:bf:5b:be:2a:56:74:69:43:bd:5b:9c:22:a7:e3:f3:8d:b7:
9e:97:2a:5e:2f:7a:57:ce:47:a9:59:c4:5b:e5:fc:3e:3b:7d:
98:e9:e3:6f:1b:f5:22:2c:44:54:31:4c:30:ef:70:6f:16:8a:
af:72:15:f6:98:50:66:67:3e:fc:b9:c4:67:00:0d:f5:10:d3:
18:ff:3e:78:3c:a7:6d:52:d2:23:bf:41:dd:e7:90:39:de:ae:
6f:b6:17:94:fe:c6:43:3b:f7:d5:2c:a5:90:55:9b:fd:07:3e:
a6:f3:a5:28:7d:e6:5b:8c:39:2d:e3:fa:69:66:28:f6:3c:b4:
8c:42:78:b7:3b:fe:4c:97:06:33:94:9d:59:59:60:de:9e:07:
ab:b0:c1:9b:e4:bc:77:48:b2:a4:ab:91:c6:61:08:13:c2:0e:
8c:99:e5:7e:81:2f:1b:11:d0:c2:f1:ad:72:5b:e2:9b:84:cd:
08:38:45:10:07:43:69:82:19:24:7a:9f:b1:25:d7:bd:32:c2:
54:ec:2a:4a:2e:2e:4f:62:1e:5d:ca:c1:c9:02:9f:e7:cd:06:
c9:d0:de:cd:13:74:f3:72:a7:88:20:6e:6a:6a:b2:ee:cc:ba:
17:84:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org