Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0-_uXPN8vsjbuFE_HK4ssIxtR-A.roa
File: 0-_uXPN8vsjbuFE_HK4ssIxtR-A.roa (raw, json)
Hash identifier: wy2molCvTXSxTqZeQX5Akh1lRErgf79Lx2LNXAmG2rk=
Subject key identifier: D3:EF:EE:5C:F3:7C:BE:C8:DB:B8:51:3F:1C:AE:2C:B0:8C:6D:47:E0
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 08C05600
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0-_uXPN8vsjbuFE_HK4ssIxtR-A.roa
Signing time: Sat 01 Jan 2022 07:04:29 +0000
ROA not before: Sat 01 Jan 2022 07:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30475
IP address blocks: 185.255.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146822656 (0x8c05600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 07:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3efee5cf37cbec8dbb8513f1cae2cb08c6d47e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:3f:1a:57:9d:e7:86:34:44:4d:6c:a0:66:
c3:ef:ad:41:34:07:45:28:e8:1f:85:69:01:f2:ed:
4b:c1:d3:9f:e8:db:ca:32:be:a8:e8:4e:fb:41:43:
09:8b:28:bb:88:be:f0:e6:6b:01:cf:b9:55:12:7d:
c1:d9:d3:51:04:c5:8a:ac:cd:de:4b:7a:59:a9:0e:
dc:49:c4:43:54:9d:f5:0f:b3:9b:23:80:cf:c9:1a:
02:12:f6:26:ba:82:b3:99:89:b3:a9:82:48:e0:ca:
21:6b:88:22:a1:b2:c4:8a:6b:0b:b5:22:3f:ea:81:
06:0c:d2:e1:04:9f:7e:ef:0b:25:9b:0d:dc:79:95:
16:99:30:56:19:08:33:76:2d:4d:3d:6b:f8:bb:31:
85:af:73:df:b6:68:93:de:fa:17:20:8e:4a:2c:8c:
f2:e0:2d:c4:58:51:9f:35:63:0b:7f:ed:1d:e8:82:
df:65:c5:9d:f0:4e:e0:4d:07:34:a9:ae:02:41:d2:
0a:b9:60:2a:8b:10:b5:9d:20:1c:71:c0:c4:32:f7:
e4:82:b0:a5:c1:da:10:6e:ed:ca:4d:33:83:b5:23:
43:2d:ff:06:64:77:e9:36:78:87:e2:5b:e4:6c:02:
f4:6e:5b:59:a2:fb:eb:c5:96:37:51:8e:5e:0d:8d:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EF:EE:5C:F3:7C:BE:C8:DB:B8:51:3F:1C:AE:2C:B0:8C:6D:47:E0
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0-_uXPN8vsjbuFE_HK4ssIxtR-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8a:c8:89:76:36:e7:2e:67:f7:80:cd:20:ca:a7:9b:4e:f0:
a6:e6:4f:45:4e:93:6e:07:63:c4:c4:9b:7d:04:a6:0b:d5:39:
66:0c:23:4b:33:3a:4e:d6:d3:88:9e:a4:d2:8c:11:f7:4e:e3:
c9:30:27:39:98:88:4e:9a:6b:2e:17:fb:a7:74:54:33:86:97:
24:94:7f:2c:fa:ef:4a:17:5b:13:e0:d3:32:37:05:84:39:41:
93:09:a9:61:2c:f7:04:7b:61:c3:01:f6:4e:08:a7:f0:21:78:
33:ee:c5:7a:06:3c:79:09:c1:56:80:ae:1d:8e:6b:ef:99:dd:
17:24:01:f8:d9:05:86:92:97:0b:5e:b9:1e:8a:5a:9d:1d:1c:
52:27:f0:10:ca:56:cd:37:f4:59:a8:ce:6d:b1:4e:0b:e1:b5:
0e:a4:54:ed:5d:5d:f9:40:8d:79:67:77:53:b1:d2:45:f5:68:
c5:d3:49:7b:35:ab:cd:96:d4:e4:fe:4d:df:a9:5f:44:ce:1a:
14:91:8f:1f:0f:d4:13:dc:b7:d8:91:8b:a8:67:b1:50:01:7a:
d1:a4:63:2b:e8:eb:e1:4a:2d:c8:ea:0b:8d:b3:05:85:d9:81:
f6:0a:76:3a:7e:bb:21:af:5f:7f:ef:16:c5:1e:37:36:2c:73:
95:47:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-fra.rpki-client.org