Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/W_Eg0Ym7Nm9jT55bn-JoYkAeodA.roa
File: W_Eg0Ym7Nm9jT55bn-JoYkAeodA.roa (raw, json)
Hash identifier: 55dcBpsUYrBYZgt+AmmQwxyi+LuARG6K6JNOVSv5dwY=
Subject key identifier: 5B:F1:20:D1:89:BB:36:6F:63:4F:9E:5B:9F:E2:68:62:40:1E:A1:D0
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 080148DE
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/W_Eg0Ym7Nm9jT55bn-JoYkAeodA.roa
Signing time: Thu 12 May 2022 12:33:02 +0000
ROA not before: Thu 12 May 2022 12:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 185.194.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134301918 (0x80148de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: May 12 12:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bf120d189bb366f634f9e5b9fe26862401ea1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:f3:d1:a6:18:7b:bc:89:65:97:b6:72:80:
ce:16:68:b8:9f:4e:56:00:8f:59:b9:4a:52:5c:3d:
e8:4e:43:f1:e8:bf:53:10:d9:ca:21:f2:7b:27:f0:
2d:74:34:40:77:80:f5:58:50:6a:e7:38:1b:10:88:
0f:f3:3e:57:17:62:e8:9f:7a:79:0c:ad:b9:c8:a1:
2f:8f:90:72:06:14:ae:d0:04:5b:91:c9:04:35:58:
fc:55:36:37:a4:b6:35:a5:bb:bf:38:30:b5:3d:78:
05:0c:93:4d:09:1e:b1:f3:83:04:c7:aa:3f:39:70:
49:03:27:68:fd:b2:ac:a3:66:e4:b7:bc:b0:5d:a4:
68:27:34:27:65:d6:c0:fc:e5:18:7c:94:41:23:79:
c8:9a:dd:bf:1e:4b:5f:71:58:d3:66:ca:62:88:9e:
b7:23:4a:53:d7:f3:11:1a:63:9a:43:44:96:44:5f:
dd:b0:c5:43:a8:e8:f7:c2:9b:43:c4:87:bc:03:aa:
34:28:d9:67:af:34:91:85:d5:0c:26:15:a1:49:de:
b3:bd:c9:6b:95:f4:f3:b1:2d:d1:d7:14:54:e0:66:
c7:e6:94:ce:36:d3:01:62:f5:de:c5:a8:d6:2a:b2:
c7:c9:b9:53:67:12:ec:18:9d:a4:e0:92:8c:6a:23:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:20:D1:89:BB:36:6F:63:4F:9E:5B:9F:E2:68:62:40:1E:A1:D0
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/W_Eg0Ym7Nm9jT55bn-JoYkAeodA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.232.0/23
Signature Algorithm: sha256WithRSAEncryption
56:6a:db:34:a9:34:fe:18:8e:4e:08:84:31:23:6e:d5:8f:0f:
1c:2e:5e:c1:80:81:32:c2:fd:35:42:91:34:ae:3e:52:74:61:
32:f4:d5:63:be:35:f4:3f:99:11:34:a7:c5:7e:78:c1:a8:ca:
c0:71:ad:7a:cf:7e:67:20:5c:c4:a7:6d:6f:33:99:6f:75:5b:
54:55:a4:0d:49:d5:95:14:85:9d:4a:e4:ff:c7:ff:30:46:20:
1f:98:2e:38:7a:5e:35:3a:90:83:11:a0:81:e0:8d:fa:45:c7:
5b:c5:07:a7:6b:cd:95:5f:ec:77:a5:c0:c5:79:10:86:2e:f8:
ba:4f:db:02:4b:de:59:2a:b7:32:b7:86:80:34:c7:8f:21:a7:
3d:a1:9b:27:e7:ae:23:40:00:ac:2d:ba:16:25:9c:ba:6b:a5:
a1:b5:84:7c:07:1a:a4:55:b3:1e:e2:d0:05:84:a7:44:97:41:
5d:e3:af:fd:50:41:7e:21:a2:98:5a:03:24:59:b6:b6:67:7e:
54:5d:5e:39:b1:9f:df:08:3a:11:b1:cc:79:2f:ad:c8:6f:34:
cd:47:15:1a:49:d2:b4:a1:9d:ee:1f:1a:02:7c:8b:28:6c:5e:
e5:07:65:2d:f1:dc:77:1c:11:fd:bb:2f:44:59:db:ac:2b:57:
6b:67:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:25 2024 by rpki-client on console-ams.rpki-client.org