Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/lUWfB9sCWs0UZTsbEFAySZ4P12w.roa
File: lUWfB9sCWs0UZTsbEFAySZ4P12w.roa (raw, json)
Hash identifier: CdKYsb5K85N6trdes4L495kwd9Vgp2tiWj66+Wr+j2U=
Subject key identifier: 95:45:9F:07:DB:02:5A:CD:14:65:3B:1B:10:50:32:49:9E:0F:D7:6C
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 1206077A
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/lUWfB9sCWs0UZTsbEFAySZ4P12w.roa
Signing time: Sat 01 Jan 2022 04:04:26 +0000
ROA not before: Sat 01 Jan 2022 04:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43754
IP address blocks: 185.128.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302385018 (0x1206077a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Jan 1 04:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95459f07db025acd14653b1b105032499e0fd76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:5a:70:1d:7f:f7:13:d5:69:1b:85:6d:c6:
bf:08:a8:fc:c6:e0:48:a5:22:e8:09:ae:c8:9d:ce:
d6:ba:22:8e:9c:b7:72:17:9f:7a:f8:24:d6:6c:45:
6e:4a:b5:1f:c4:c0:d5:84:92:f2:54:42:34:e6:26:
10:e6:8c:ae:ce:e5:2a:b3:fd:2d:21:7b:1f:07:cc:
5d:50:0d:69:e2:cb:53:9d:18:8c:d1:e3:eb:29:6c:
61:65:41:c5:6f:d0:fd:f3:54:92:59:1f:c6:a8:b4:
4c:9c:f1:2e:a6:82:03:8b:3a:bc:fb:19:e5:86:1c:
71:02:9d:38:b6:3c:4e:a7:6b:aa:83:59:d7:73:34:
e7:9b:f6:c7:d1:3d:c1:f4:81:44:ce:3e:bc:f6:ce:
7b:5b:f4:d6:73:d7:17:96:e7:a7:e4:5f:5e:09:91:
d3:a9:0d:df:e3:c2:d3:73:63:31:70:9c:7a:dd:1e:
be:c6:c1:2d:01:02:51:43:7a:3e:37:20:53:60:ff:
f3:d6:2c:19:8b:c2:c9:db:d7:b7:ee:73:3b:b1:4f:
b0:a2:3d:93:e7:05:c0:d4:3d:6c:c7:c9:8f:55:28:
ed:80:84:52:9e:55:d1:b4:91:ef:16:5b:89:85:07:
ba:27:cd:07:bb:37:84:e4:dd:6e:93:a5:7d:d8:58:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:45:9F:07:DB:02:5A:CD:14:65:3B:1B:10:50:32:49:9E:0F:D7:6C
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/lUWfB9sCWs0UZTsbEFAySZ4P12w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.167.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6d:50:1e:77:65:38:ec:24:f2:15:40:f4:d2:7d:7f:47:ef:
a2:6f:a8:4d:1a:a3:07:7a:a8:08:c4:2c:a6:61:1c:1c:2e:98:
00:29:95:e0:75:0c:c2:8f:48:30:92:20:7f:06:94:f4:b9:c8:
7b:02:a5:8f:51:14:b8:d0:10:fd:42:68:04:47:c3:cb:f5:1f:
69:20:55:e2:9f:80:ba:91:32:0b:3e:8a:1a:23:35:5b:87:27:
57:f2:e7:3b:d2:62:d3:1a:10:7b:64:e0:2b:ba:c9:a0:9f:19:
22:94:eb:55:a0:40:77:39:e0:6b:1d:90:f5:1d:a9:ca:92:f4:
7c:e9:1e:43:5a:e7:8e:f1:68:3b:55:59:18:13:a0:8c:4c:95:
ef:69:c9:e7:23:4b:6b:91:cc:05:41:e1:a7:fd:d3:35:50:44:
39:4c:cf:21:6f:a2:2c:80:76:25:6c:0b:10:ab:60:d2:4a:cf:
7f:d5:9c:a6:f7:75:d3:a5:d0:dc:da:18:99:0e:91:84:d2:44:
56:7c:bb:46:b2:91:0b:dd:86:78:97:5d:48:16:08:21:74:fb:
04:2f:8e:76:26:18:4b:1f:6c:1a:64:49:86:98:85:13:b7:c1:
18:7d:3d:e4:48:e0:83:9b:4c:8d:67:2c:40:60:f7:af:cb:c8:
d3:01:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:28 2024 by rpki-client on console-ams.rpki-client.org