Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/X2wkWoTbgAKjkKcAX1fMNj0sM9A.roa
File: X2wkWoTbgAKjkKcAX1fMNj0sM9A.roa (raw, json)
Hash identifier: Cr0tw1PRkFPRkekADaZ/inaYaHL6oi8NPMTg1jELCvE=
Subject key identifier: 5F:6C:24:5A:84:DB:80:02:A3:90:A7:00:5F:57:CC:36:3D:2C:33:D0
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 061E6D3D
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/X2wkWoTbgAKjkKcAX1fMNj0sM9A.roa
Signing time: Wed 13 Apr 2022 13:58:20 +0000
ROA not before: Wed 13 Apr 2022 13:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204176
IP address blocks: 185.112.63.0/24 maxlen: 24
185.112.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102657341 (0x61e6d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Apr 13 13:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f6c245a84db8002a390a7005f57cc363d2c33d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:49:83:39:05:48:d1:04:5b:c6:55:56:a2:
2a:c7:39:ae:c2:40:5e:dd:2f:1c:9c:3e:0f:60:a6:
3a:d9:d9:8f:e1:95:30:31:c5:51:a7:a9:8f:e3:68:
79:1c:e8:8e:c6:27:0a:4c:48:3a:85:bc:ca:de:2d:
05:9d:ae:2e:18:65:08:51:89:b4:1b:76:3e:9d:65:
77:0a:02:b2:ed:f5:9c:2d:4f:21:96:8c:31:85:85:
c9:e5:b3:ef:03:0d:00:b5:66:fb:19:80:b1:28:ed:
a5:ae:24:8c:f6:7d:df:ad:67:fd:df:48:77:e4:8f:
03:41:c1:d3:76:85:a9:6b:f6:a1:0f:7d:90:cb:b4:
f7:93:0b:1b:f8:09:a4:4e:4e:80:22:95:cf:4f:07:
61:84:da:34:02:fe:35:c5:d5:67:0e:1e:fc:00:e5:
5e:e8:85:6d:e4:df:92:2d:e1:c4:0d:77:50:6b:2e:
fd:c9:9b:59:ba:c4:37:b5:dd:a9:db:e0:51:7d:90:
19:1c:81:3f:9a:4a:7a:f4:70:e5:5f:d7:67:ba:2a:
a0:8c:e7:48:89:04:3b:2a:c8:1f:e0:26:1a:e0:3f:
f9:7e:94:19:13:c8:e0:ed:6e:55:52:9e:f2:ae:3a:
c8:00:0c:c7:f7:45:ed:a2:f3:2e:6e:85:63:35:36:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:24:5A:84:DB:80:02:A3:90:A7:00:5F:57:CC:36:3D:2C:33:D0
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/X2wkWoTbgAKjkKcAX1fMNj0sM9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.62.0/23
Signature Algorithm: sha256WithRSAEncryption
94:d2:21:96:a7:0f:4a:dd:b0:40:23:b9:a1:64:d8:da:4b:d5:
24:44:33:6e:12:37:78:0a:8f:86:ac:1a:04:68:ea:da:cf:e0:
9e:2f:de:25:85:44:87:75:95:b3:b7:0c:8f:2b:23:42:a2:e4:
30:4c:20:2f:5f:bc:5d:c7:02:f0:10:a9:84:56:b2:9e:00:85:
27:c4:b4:25:b8:a3:0e:e9:5b:b5:3d:c1:8d:4d:a5:31:c4:81:
0a:79:07:04:0b:82:12:07:b2:ef:fe:5e:9d:25:b6:8c:69:29:
96:5a:bd:7c:61:00:e7:ee:cc:5a:63:2a:fc:97:9e:b3:b0:32:
35:36:40:c1:2f:45:de:4e:e2:27:f0:9a:26:0b:53:95:75:25:
fe:22:34:66:61:f9:42:98:3a:d5:c5:ff:b1:5d:fa:3c:c4:8f:
f3:73:bd:74:0e:21:40:e4:ae:47:40:6b:ac:9e:4f:5b:13:6a:
b5:cb:08:5c:25:74:57:ac:33:c0:b9:51:a5:e1:80:f0:17:73:
b0:de:02:78:fa:5a:73:c2:d3:c5:79:fa:ce:d9:98:0a:66:fc:
c4:99:ec:c2:41:14:04:7f:9f:fe:b0:d5:d5:b9:70:3a:b5:8d:
35:85:de:86:5b:8e:5d:68:a3:61:7e:76:04:e1:17:5e:4d:d5:
14:64:96:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:01 2023 by rpki-client on console-fra.rpki-client.org