Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/b5AhcaTHpTix2bGwJBLaajnVrzc.roa
File: b5AhcaTHpTix2bGwJBLaajnVrzc.roa (raw, json)
Hash identifier: 7XmgPQJltIS3Bilp5fEyeht+hO/+jA7eBHJpzxDqUJQ=
Subject key identifier: 6F:90:21:71:A4:C7:A5:38:B1:D9:B1:B0:24:12:DA:6A:39:D5:AF:37
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 34258C1B
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/b5AhcaTHpTix2bGwJBLaajnVrzc.roa
Signing time: Sat 01 Jan 2022 09:02:51 +0000
ROA not before: Sat 01 Jan 2022 09:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.84.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874875931 (0x34258c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 09:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f902171a4c7a538b1d9b1b02412da6a39d5af37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:f9:f8:a9:a6:d9:92:15:c4:26:00:9a:0c:
0f:43:c3:5f:96:06:3b:6f:70:ec:2d:58:cf:9b:a9:
be:03:ee:4e:1e:81:ca:31:16:5b:7c:73:ef:4d:d3:
a9:08:f1:35:b6:96:34:bc:46:ca:a8:01:c2:46:eb:
a7:2c:f5:52:bd:5f:1f:93:f2:67:8f:f2:d6:6f:f4:
65:3e:6e:45:d6:d4:da:65:7a:c2:8d:9a:e7:0a:7d:
1e:f6:1e:55:4a:dd:ff:4f:01:e4:6b:b4:6e:ce:d7:
56:4f:f0:65:0a:0e:b1:9f:01:53:44:59:06:19:c9:
d5:b0:9b:ea:a9:65:8b:01:2d:0a:69:66:ff:4f:b5:
64:62:3a:99:da:53:59:55:91:5d:6b:e2:54:8a:c4:
b9:2b:22:f2:5e:56:31:7a:16:95:b5:7e:a5:03:3c:
4b:db:45:c3:7b:42:30:b2:04:81:ad:e9:55:fc:84:
0a:44:bf:09:60:23:8c:91:c1:e6:a9:e7:4e:48:5d:
eb:be:11:1b:0d:11:11:23:e6:06:f0:28:43:aa:23:
37:10:a3:34:45:86:30:d6:21:3d:37:17:05:d2:f4:
3a:28:aa:06:4a:5f:10:db:78:56:08:62:99:8d:dc:
b3:c2:a9:6e:a8:f4:a4:cf:4d:19:6d:2d:48:2c:be:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:21:71:A4:C7:A5:38:B1:D9:B1:B0:24:12:DA:6A:39:D5:AF:37
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/b5AhcaTHpTix2bGwJBLaajnVrzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d1:f1:7f:e4:a5:ef:99:46:35:d2:42:91:f1:9b:83:86:05:
f2:6a:40:80:09:dd:c2:02:ce:cd:7d:c3:4c:ed:21:2f:b7:13:
82:d3:22:b9:be:cb:06:b4:21:fb:51:03:0d:ed:e4:a0:5d:63:
70:22:ae:0c:b8:db:1f:c5:5b:38:bb:b8:4d:d5:fa:a1:c9:b1:
f9:74:c1:73:9d:9c:aa:87:77:33:5a:6d:ba:75:aa:66:0c:d5:
39:d0:c9:a7:34:e7:8f:08:0a:be:6a:d5:d5:97:60:0a:9e:7d:
c9:43:2f:26:89:a6:f2:d9:b1:33:0d:b1:a8:7f:3b:8a:fb:99:
de:4a:99:61:91:d2:52:87:4c:0f:16:26:db:a4:7d:bb:04:88:
fe:cc:2b:2f:33:13:b4:07:f5:d5:aa:25:96:a7:58:9c:f8:d3:
e8:f6:da:38:ca:c5:ca:d9:c6:ff:10:c7:cc:ff:af:71:97:ef:
98:31:52:af:24:ba:21:af:e3:18:15:d5:12:70:d3:d2:b7:14:
72:df:66:a5:e2:a8:a3:43:c2:24:9a:3c:b5:06:dd:db:57:d9:
94:a1:65:0e:e6:72:bc:be:43:ee:ed:a9:1a:b5:0b:76:91:d7:
78:27:48:e0:23:bb:93:00:59:6a:64:c3:93:f4:e9:bc:68:ab:
2b:bb:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-ams.rpki-client.org