Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EsWj4140z9HZ4-X5rJzRiqzHo3o.roa
File: EsWj4140z9HZ4-X5rJzRiqzHo3o.roa (raw, json)
Hash identifier: SmlKttM8P35UzaRL2+mCITJeDeNm1kVu+lhaA/NAeFo=
Subject key identifier: 12:C5:A3:E3:5E:34:CF:D1:D9:E3:E5:F9:AC:9C:D1:8A:AC:C7:A3:7A
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0349A6E2
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EsWj4140z9HZ4-X5rJzRiqzHo3o.roa
Signing time: Wed 23 Feb 2022 10:06:32 +0000
ROA not before: Wed 23 Feb 2022 10:06:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.255.4.0/22 maxlen: 24
195.34.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55158498 (0x349a6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Feb 23 10:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12c5a3e35e34cfd1d9e3e5f9ac9cd18aacc7a37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:09:75:61:18:ce:82:9c:85:00:4e:79:6b:
5c:25:07:93:2e:81:4c:04:ad:e0:fb:e9:d4:b4:32:
21:01:14:be:14:ef:6c:e7:79:9b:88:18:c2:6b:ee:
32:58:35:8f:02:40:e0:c7:77:79:55:ab:78:5f:48:
68:ca:9f:84:70:95:39:f8:bb:f4:ce:5a:1f:57:74:
f5:1f:1c:fd:7d:83:07:80:41:15:5d:a0:7f:c6:c1:
7a:eb:8e:29:29:c7:73:70:39:08:7f:3f:8d:75:96:
27:48:4e:a9:e9:54:da:ee:ad:1e:d8:1c:c2:c1:75:
a8:3f:7c:64:b9:f8:03:b2:fe:bf:0a:fa:62:10:41:
24:69:57:54:84:8a:33:a1:f1:85:00:ae:6e:90:19:
42:37:71:2c:c0:a3:9b:de:29:f2:2a:86:c2:1d:7c:
ac:d9:c2:0a:3e:b6:ae:2b:15:83:ff:67:c2:50:b2:
e2:e1:32:da:9b:5a:28:0a:69:81:e5:de:b5:cf:76:
e9:05:97:d5:61:26:95:8b:24:e2:4c:e6:14:b8:f1:
d9:70:92:f6:92:64:86:8a:3b:00:d5:57:01:69:48:
01:c1:88:5e:07:00:59:f0:e3:c5:ee:a9:e8:bc:50:
4b:63:9b:74:b2:d3:10:cb:5c:14:02:26:45:a8:7d:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:A3:E3:5E:34:CF:D1:D9:E3:E5:F9:AC:9C:D1:8A:AC:C7:A3:7A
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EsWj4140z9HZ4-X5rJzRiqzHo3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/22
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d0:86:8e:a3:50:84:a9:58:42:b8:ec:c5:c7:ed:73:34:0c:
a8:88:e5:40:42:b7:79:bd:e0:ed:b1:d6:7b:78:72:f8:b7:7f:
cf:cc:c8:1a:65:7f:75:5f:89:88:3f:e0:10:02:4d:e3:40:2a:
cb:c9:89:47:fe:e8:a9:74:c3:93:19:f2:50:5d:2c:6a:30:4b:
84:3f:1d:00:c8:2b:ca:c6:fb:bc:a1:5e:1e:a6:76:ba:68:6d:
5f:55:d0:21:57:7a:a9:e5:02:01:98:3c:d3:a7:28:29:1e:71:
ee:54:3b:3c:20:0a:70:4e:3f:e8:2c:e7:df:93:41:72:37:13:
95:9d:cb:82:ed:5e:fe:f5:32:1b:c5:d2:72:53:32:42:0d:12:
fb:fa:73:e5:2b:8d:18:a7:19:c4:70:d8:10:5a:bd:e1:7c:08:
b7:eb:13:a7:f0:b7:1c:81:b5:d5:87:49:eb:c7:5c:cc:a4:32:
bd:7a:ed:bf:7f:71:65:03:ab:2d:ab:bb:9e:7b:73:cc:16:9e:
4b:af:28:1e:b8:4b:28:92:92:b2:9f:65:42:19:7e:48:b4:94:
ce:f9:7e:cf:44:28:68:51:03:2f:ba:88:35:d4:b4:ae:ea:e3:
48:a7:ae:d5:fc:b3:c0:e5:ae:8f:b7:f3:67:0f:81:cb:75:32:
10:f2:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org