Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/_p_S3AL5u1TgSx6unjYRpSG6Ur0.roa
File: _p_S3AL5u1TgSx6unjYRpSG6Ur0.roa (raw, json)
Hash identifier: X/ILXjTDxBjWKdBygpyPpe94uK5wSFZMWEjH/Er81/Y=
Subject key identifier: FE:9F:D2:DC:02:F9:BB:54:E0:4B:1E:AE:9E:36:11:A5:21:BA:52:BD
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 38FA6D43
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/_p_S3AL5u1TgSx6unjYRpSG6Ur0.roa
Signing time: Mon 11 Apr 2022 08:04:19 +0000
ROA not before: Mon 11 Apr 2022 08:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15755
IP address blocks: 185.96.171.0/24 maxlen: 24
185.35.21.0/24 maxlen: 24
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955936067 (0x38fa6d43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Apr 11 08:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe9fd2dc02f9bb54e04b1eae9e3611a521ba52bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:96:58:92:f5:b2:08:62:34:73:7f:8a:d4:
e2:98:98:61:75:70:8b:83:68:ee:4a:9c:1b:ab:a4:
8b:5f:53:ab:a8:d1:16:24:c8:f4:60:79:b4:46:84:
e2:25:69:87:79:51:e9:a3:98:68:67:6c:be:e4:c6:
a9:19:26:db:cd:55:e3:d0:d3:db:88:04:dd:d9:89:
a5:7c:91:66:e6:6d:eb:c5:25:c5:e5:90:d1:56:2a:
12:7a:7f:66:92:ad:3a:62:37:05:9f:b6:0f:ef:00:
8e:5f:e4:0f:4f:84:e1:d8:a6:3f:3a:bb:e7:0a:86:
b7:84:76:a2:70:60:87:1c:c4:a8:a7:e3:f3:df:87:
44:08:83:ab:a2:c2:eb:89:de:ae:0f:32:15:48:38:
ed:19:c8:20:54:17:cf:e9:96:45:6d:23:2d:ef:86:
cc:b6:d8:ea:a7:65:b4:1a:6b:24:70:72:08:4a:e5:
35:bc:30:d1:e1:55:96:96:8e:8e:26:d1:fc:6c:af:
32:d6:a2:01:11:73:ed:96:d2:40:6b:95:6d:ce:e2:
f7:8a:0f:fa:f9:3d:90:20:c3:61:1b:15:4e:e8:73:
07:21:5f:4f:d2:59:a3:da:b7:0d:96:c9:14:26:23:
08:5c:1b:db:10:46:06:3d:f7:2a:af:d2:b8:66:2e:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:D2:DC:02:F9:BB:54:E0:4B:1E:AE:9E:36:11:A5:21:BA:52:BD
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/_p_S3AL5u1TgSx6unjYRpSG6Ur0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.21.0/24
185.96.171.0/24
IPv6:
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:6d:89:5f:c8:0f:d6:84:37:79:14:f6:4f:ec:1e:a8:55:16:
7f:5f:ed:de:0f:c8:f4:16:b7:a6:05:b3:dc:df:bc:17:48:53:
43:b6:8e:56:1f:51:eb:30:82:3f:f7:4f:90:0d:8f:89:d0:07:
b0:ce:73:ce:7a:78:53:0c:44:71:91:08:91:bf:57:02:31:7d:
7d:d4:93:6a:08:48:07:aa:3b:f9:c7:35:cf:c5:ad:55:e3:2d:
03:39:ee:a5:2a:de:42:e6:18:64:6c:de:f4:6c:33:1b:f6:da:
5b:8c:94:0e:a2:34:fa:a2:16:87:b8:07:17:5f:13:8a:2c:ac:
c5:1c:1d:da:ea:26:b6:f1:4f:e1:ff:29:0e:02:42:a4:f6:42:
88:22:34:fb:29:68:d0:c9:52:a5:1e:18:31:f9:5e:fb:62:42:
f8:07:05:12:d9:c4:6a:27:3e:4f:88:ac:07:6a:bb:e9:ac:53:
fd:e0:08:2f:3c:fa:36:50:4c:bd:6a:12:54:cf:6f:8f:bb:9d:
21:47:61:ad:09:1a:ab:66:83:0d:9a:10:d8:df:a5:46:32:a8:
0c:ff:81:dc:0c:06:ea:51:37:4f:cc:a9:0d:9e:5f:68:57:b3:
fd:12:2b:e2:9a:36:dd:4f:52:58:d8:06:bb:1c:7f:2c:d3:0c:
c8:89:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:57 2023 by rpki-client on console-fra.rpki-client.org