Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/l6b5Y0BcwQAZ4Nlg65cve_xsb1g.roa
File: l6b5Y0BcwQAZ4Nlg65cve_xsb1g.roa (raw, json)
Hash identifier: 7V1TxCa1D34+eEcnzvXmU6GcLLZl9y89aCCWBdq6/WQ=
Subject key identifier: 97:A6:F9:63:40:5C:C1:00:19:E0:D9:60:EB:97:2F:7B:FC:6C:6F:58
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 0847469C
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/l6b5Y0BcwQAZ4Nlg65cve_xsb1g.roa
Signing time: Thu 05 May 2022 18:59:59 +0000
ROA not before: Thu 05 May 2022 18:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205495
IP address blocks: 185.136.184.0/22 maxlen: 24
45.153.44.0/22 maxlen: 24
185.216.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138888860 (0x847469c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: May 5 18:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97a6f963405cc10019e0d960eb972f7bfc6c6f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:56:b1:30:80:de:d6:36:00:cf:58:5c:d6:
d4:8c:23:0c:5b:b6:80:cb:2a:ba:29:a3:4e:60:22:
21:c5:f5:19:3b:dc:4c:1e:ba:c9:50:90:c0:08:a1:
1b:2d:45:58:f4:95:31:19:fe:b7:b4:14:bf:57:2e:
c5:5d:ca:8f:96:f4:ab:17:11:9b:14:12:f9:35:14:
a7:d5:7d:60:96:9f:c3:dc:f6:65:21:ac:d0:ae:e7:
cb:fb:26:64:19:c6:11:2c:a2:3f:dc:96:ab:5a:be:
a1:a2:90:02:12:53:ef:c2:53:71:7e:48:5c:32:15:
36:19:be:75:64:70:59:ba:d8:5b:c5:8c:d0:72:1b:
5a:2c:c4:c0:61:ee:04:93:f4:41:01:ce:bd:15:37:
f6:ac:f4:aa:c4:3b:9b:84:72:8f:5b:69:64:14:db:
4a:bb:ee:b6:38:eb:3f:24:e9:83:99:fa:b2:75:db:
48:11:9e:5f:16:f4:1a:e2:07:d7:3e:14:d5:0f:08:
0c:e1:65:de:e8:aa:c6:81:b7:4f:d9:d9:cf:01:fc:
f7:80:0f:90:9f:56:03:9f:40:5e:81:4f:c7:41:f5:
af:9b:61:27:df:64:59:3c:93:8f:e6:d6:4e:28:f2:
f6:63:ac:fb:b1:2b:24:cf:1b:d7:10:a3:45:c6:2a:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:F9:63:40:5C:C1:00:19:E0:D9:60:EB:97:2F:7B:FC:6C:6F:58
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/l6b5Y0BcwQAZ4Nlg65cve_xsb1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.44.0/22
185.136.184.0/22
185.216.80.0/23
Signature Algorithm: sha256WithRSAEncryption
86:06:3f:22:10:ea:8d:b0:1b:cf:e1:24:54:00:5e:2a:1b:8c:
d5:89:76:5e:19:91:c8:cc:8d:ee:1b:d7:5a:ec:11:9c:ac:69:
6b:eb:59:4d:98:fa:22:56:30:83:db:4c:4a:2f:0f:5f:df:b4:
85:8d:03:f4:ae:e2:30:51:f5:bc:92:fd:5e:46:14:67:56:d1:
4f:a5:ce:4f:13:96:08:a2:c3:5b:a3:7f:f6:42:42:43:81:29:
ee:4f:6a:08:31:b5:51:65:21:61:b2:b7:ed:63:75:42:11:e6:
2c:22:a7:10:f1:0a:76:5f:91:b1:44:c1:35:cb:36:c3:01:00:
22:c6:d1:6b:07:10:35:30:e4:9b:c0:10:c3:46:71:d9:65:0c:
6c:a5:8e:9b:75:69:61:4d:96:c1:43:21:42:6d:c8:85:45:95:
15:35:d9:f1:ce:5d:3e:8d:17:4b:b3:9d:dc:46:2f:39:a8:6a:
94:4b:40:3a:6c:6c:a3:01:b8:d1:db:7a:85:7f:e0:61:a1:30:
0f:10:12:d0:47:6d:40:b5:32:5f:ec:e5:01:d8:f6:f9:17:9a:
4e:b8:bd:1b:60:8c:e5:f2:38:95:aa:e2:8e:48:d5:bb:a3:31:
6b:11:45:1c:4b:70:90:7f:33:9f:da:54:fb:cf:55:91:93:e7:
1c:5a:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:21 2024 by rpki-client on console-fra.rpki-client.org