Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5Si-NpiNGlntTLU5NUyqvBE38Mg.roa
File: 5Si-NpiNGlntTLU5NUyqvBE38Mg.roa (raw, json)
Hash identifier: GQs+1I8UGLyLxaDwqA7G+q+UXkKDTMwSgJaPRe7vJ4A=
Subject key identifier: E5:28:BE:36:98:8D:1A:59:ED:4C:B5:39:35:4C:AA:BC:11:37:F0:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182DE55AA29155FDA5940A5A964A03EE5BF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5Si-NpiNGlntTLU5NUyqvBE38Mg.roa
Signing time: Sat 27 Aug 2022 08:05:32 +0000
ROA not before: Sat 27 Aug 2022 08:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.207.12.0/24 maxlen: 24
185.147.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:55:aa:29:15:5f:da:59:40:a5:a9:64:a0:3e:e5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 27 08:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e528be36988d1a59ed4cb539354caabc1137f0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:5e:b5:f0:f4:54:4f:0c:2f:7a:fe:da:90:
46:92:24:9b:28:9d:c8:97:42:9a:4c:73:30:bd:df:
f5:9e:59:28:ee:2e:1b:6b:dd:1d:21:85:cd:d0:1a:
b4:2a:c8:91:43:b6:d1:ce:9c:f3:83:e6:fa:3c:3c:
c6:61:40:78:eb:63:9f:f6:13:6f:1b:6d:04:7d:7e:
9c:27:3b:a8:29:54:79:ab:38:f9:44:5d:76:10:ab:
b1:c8:74:67:ac:72:60:1c:53:1a:c5:f3:8e:98:6d:
af:22:46:36:26:cf:66:fd:5f:a7:e6:1c:dd:2b:47:
f6:2a:cf:1f:10:46:b2:0b:dd:9f:5b:95:04:9e:d8:
e8:7d:e6:1d:05:f1:b6:25:28:b7:bb:d7:05:47:bc:
b5:a4:22:5d:5d:7e:9d:f3:a3:f3:aa:ed:50:89:f4:
af:1d:18:76:9a:6c:a8:08:a9:a5:39:d7:07:e8:cd:
b1:0f:93:13:93:60:3a:16:64:fa:6d:3d:18:9f:80:
fb:09:02:fb:22:63:37:7e:cd:69:db:92:ef:75:45:
02:2a:20:4a:aa:b4:b2:a7:6a:4f:5d:16:88:ee:be:
1e:52:d6:8a:b2:ca:89:3b:75:f9:80:83:15:bd:cf:
bc:a4:45:3b:8a:02:a6:0f:47:2c:53:75:1e:5a:c5:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:BE:36:98:8D:1A:59:ED:4C:B5:39:35:4C:AA:BC:11:37:F0:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5Si-NpiNGlntTLU5NUyqvBE38Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.100.0/22
185.207.12.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e2:b4:38:e0:3a:ce:34:50:43:bb:1d:72:84:37:59:0b:94:
02:29:0e:bc:6c:54:e1:68:99:13:80:9d:49:4a:b7:75:0b:6b:
db:77:b0:16:3f:d8:cb:c2:6a:69:ae:08:ad:80:1f:58:1d:6c:
84:c6:23:83:25:e7:66:46:e7:be:4a:84:00:e8:ed:81:3b:02:
c7:64:a6:26:3f:df:1a:6a:a9:b4:25:e7:76:f1:1c:e8:ce:85:
c3:ca:40:f7:0a:08:8c:48:42:28:12:1f:b2:aa:c5:fa:24:39:
9e:fe:d0:d3:d7:0b:9d:3e:80:17:0a:29:7d:73:02:3b:94:b1:
e9:01:89:db:7e:3f:85:11:0e:d9:34:b4:65:56:83:02:30:81:
be:b4:44:1f:69:68:26:7b:26:03:80:ab:2b:83:e8:9a:fd:e3:
d6:01:4b:8a:29:2b:c8:c0:65:d8:92:05:89:71:9a:0f:f9:4a:
9f:62:04:74:cc:49:e8:2a:91:b3:33:f9:63:22:db:ec:59:94:
39:13:cb:06:a9:37:41:32:e6:0c:7b:62:36:93:d3:99:3a:1f:
9e:a5:20:06:9b:5c:f0:e7:a5:46:48:98:26:08:02:ad:8f:67:
51:46:b3:2e:6f:1f:03:da:e4:71:92:b1:bc:4a:20:fc:70:a4:
a4:10:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org