Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/h4ZNC-aJDrXq7yP45wneaJNGQ9A.roa
File: h4ZNC-aJDrXq7yP45wneaJNGQ9A.roa (raw, json)
Hash identifier: nsu34t6XHsI8s+pHf+SAwt5OKCJkaN/Wb9OVuiMBblw=
Subject key identifier: 87:86:4D:0B:E6:89:0E:B5:EA:EF:23:F8:E7:09:DE:68:93:46:43:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 101B1E96
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/h4ZNC-aJDrXq7yP45wneaJNGQ9A.roa
Signing time: Sat 01 Jan 2022 14:58:57 +0000
ROA not before: Sat 01 Jan 2022 14:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43853
IP address blocks: 185.183.56.0/22 maxlen: 22
2a0b:680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270212758 (0x101b1e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jan 1 14:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87864d0be6890eb5eaef23f8e709de68934643d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b1:97:3d:58:8c:e4:c8:46:f4:b1:8e:24:69:
2d:64:ef:71:fb:cc:1c:61:eb:8d:e1:85:a4:e8:52:
df:ed:16:24:a4:5c:4b:e9:c7:27:b6:1f:30:ba:91:
23:24:82:4b:0c:c2:a2:70:f7:86:ae:19:4a:ac:da:
63:65:10:98:69:9d:a1:f5:0c:9c:ce:96:13:7f:67:
eb:da:1f:91:f0:9b:6f:7b:c5:1d:bc:60:54:39:c8:
b8:c3:8e:13:7a:85:d6:5e:e0:b8:f0:32:95:b5:ac:
a1:6a:77:f4:8f:51:45:76:3b:51:40:99:10:2d:5b:
9e:c4:14:07:d7:b2:b8:a6:c5:ba:bc:5b:e7:93:eb:
02:d5:ec:81:e8:c7:21:74:47:7d:81:d5:75:77:bd:
53:95:b2:fa:8c:2e:2a:e0:da:d3:41:e3:9a:a1:e3:
57:c4:cd:4d:69:61:1d:6c:b2:f0:4f:8c:bf:62:c1:
d3:d4:e5:08:7c:a9:d7:98:ae:cb:a2:25:dc:26:82:
b6:8d:31:3f:26:99:61:58:a6:bf:36:fd:1e:17:3b:
8b:78:50:b7:f6:ae:c9:a6:f2:90:a8:43:a7:90:5a:
bc:06:5d:7c:e5:60:a8:2e:3f:58:fd:6e:93:f7:27:
fa:41:0c:05:54:6a:84:8b:0a:cb:ea:1f:e6:a1:b6:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:86:4D:0B:E6:89:0E:B5:EA:EF:23:F8:E7:09:DE:68:93:46:43:D0
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/h4ZNC-aJDrXq7yP45wneaJNGQ9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.56.0/22
IPv6:
2a0b:680::/29
Signature Algorithm: sha256WithRSAEncryption
8b:a6:83:4d:06:0f:04:24:88:1a:be:70:4e:4d:98:78:84:dc:
61:77:22:87:21:fe:6e:25:5f:46:4d:8d:45:14:44:ac:84:2e:
4d:db:50:5e:fc:f3:cf:f8:f9:bd:65:34:f8:7f:2a:c3:2e:94:
9f:c2:00:dc:99:df:8f:07:e9:16:35:4e:03:ba:cb:1a:4e:0d:
e7:5e:8c:e6:fa:2f:ea:f5:ad:f6:c3:4e:71:df:45:84:3b:d7:
a6:0c:bc:5f:eb:cd:73:18:50:b2:7a:db:f8:e0:e3:74:24:66:
80:0b:85:9d:b0:6a:85:54:f1:93:93:68:5b:9b:0d:5d:9e:bd:
a4:57:e8:b6:6b:b4:e2:85:b2:22:a8:1a:9d:fb:d8:d1:dc:7b:
f9:35:0e:89:40:d2:bf:e4:bc:bb:0d:ec:ea:9b:e5:d8:04:64:
f3:61:c1:d2:c9:47:ab:81:68:dd:77:39:bc:03:fe:f8:b1:96:
d8:bf:83:9c:1e:43:fe:b5:c2:e9:2d:66:cc:9f:a1:11:0e:de:
64:27:c1:50:a3:56:0a:75:0b:16:5b:ea:12:66:3d:5c:05:bd:
f5:58:b2:e1:9f:5d:c6:9f:f3:ef:88:05:d6:a9:24:77:11:32:
54:33:1f:e2:51:ec:62:a0:37:58:0e:5f:55:1e:39:db:83:48:
7f:79:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:38 2024 by rpki-client on console-ams.rpki-client.org