Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/l5QMqMltR1_iAFRrp_H7jBL39p4.roa
File: l5QMqMltR1_iAFRrp_H7jBL39p4.roa (raw, json)
Hash identifier: 9YJIq9OSkZOanrFO/PcZyuKaBhQaJvDDOtdbsN9Nono=
Subject key identifier: 97:94:0C:A8:C9:6D:47:5F:E2:00:54:6B:A7:F1:FB:8C:12:F7:F6:9E
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0CF385E5
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/l5QMqMltR1_iAFRrp_H7jBL39p4.roa
Signing time: Sat 01 Jan 2022 12:57:59 +0000
ROA not before: Sat 01 Jan 2022 12:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64425
IP address blocks: 185.244.39.0/24 maxlen: 24
5.182.210.0/23 maxlen: 24
2a0d:2406:200::/39 maxlen: 39
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217286117 (0xcf385e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 12:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97940ca8c96d475fe200546ba7f1fb8c12f7f69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:ee:3d:7a:c6:8b:3e:dd:bc:a4:3c:be:2c:
6f:a0:62:9e:55:5d:7c:bf:b8:fc:33:ab:7b:af:dc:
ae:93:f5:93:de:df:4d:a6:c4:d9:9f:7a:20:82:04:
37:3c:b8:21:67:77:dc:2f:ac:6e:1d:3c:f3:41:c3:
bd:75:d6:e7:3d:c7:df:0d:9b:75:08:be:52:52:74:
bc:94:39:07:2a:88:ae:a5:90:c6:2e:e7:99:c2:71:
e3:84:47:33:a0:40:31:71:b7:3b:4a:a4:e5:46:fc:
37:79:37:14:88:33:fb:02:1d:e4:ab:c5:ff:c0:e4:
39:05:38:e5:6c:70:27:ed:c3:95:95:3c:c4:94:65:
85:ab:ec:61:93:b2:5c:89:ac:7c:06:e9:d5:88:14:
83:4e:1c:53:2d:16:5b:5a:02:a1:2e:1c:b5:30:fb:
34:6b:0b:a4:d3:36:6e:af:2f:a3:a4:ee:ef:a9:64:
75:39:f9:84:f9:e4:0d:1e:b0:81:5a:55:78:6c:7c:
67:f7:a5:d7:d0:de:c7:24:a0:40:f2:96:52:32:73:
db:ff:1a:bd:31:c3:cf:5a:a0:ba:8d:3e:72:86:38:
9d:69:91:e4:48:d7:21:52:07:84:9c:12:27:69:e5:
43:87:a7:f1:ba:39:36:fe:43:eb:90:79:55:a2:a1:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:94:0C:A8:C9:6D:47:5F:E2:00:54:6B:A7:F1:FB:8C:12:F7:F6:9E
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/l5QMqMltR1_iAFRrp_H7jBL39p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.210.0/23
185.244.39.0/24
IPv6:
2a0d:2406:200::/39
Signature Algorithm: sha256WithRSAEncryption
89:da:89:1e:01:08:ef:65:da:4c:8f:e9:c6:4c:19:f6:d7:09:
f0:9e:74:b6:35:f3:c9:84:22:ec:f9:87:70:84:33:b6:45:40:
bf:f1:5c:ea:ef:9f:f7:55:61:5b:f9:40:7d:ed:57:a6:fe:1e:
8a:92:9f:28:48:97:23:84:b8:6d:27:e5:c7:7e:1c:65:08:83:
c6:2c:04:77:92:fe:2e:ae:88:cf:7f:65:9d:eb:72:58:cd:28:
76:c9:c6:a3:b4:95:29:d4:61:fc:fd:29:a9:33:3a:93:20:f7:
3b:7b:1c:75:bd:13:12:21:1a:bf:73:27:c9:59:5d:2b:d1:c4:
e0:e0:7b:a7:a0:b5:58:f1:26:d5:30:4d:9b:a0:83:25:fb:91:
5c:f0:af:00:34:0c:65:fe:5e:e4:53:5b:42:b1:b9:69:02:d5:
52:09:e2:be:4d:d0:59:b9:25:af:1b:2e:12:82:66:f7:f2:ae:
7d:f5:95:b5:4f:0e:1b:b9:96:82:ac:e8:99:a3:45:21:28:8a:
d3:f3:b2:d1:03:4e:f4:bc:3c:44:e4:ab:04:52:a9:81:b2:ca:
1d:4c:f3:34:d2:34:b7:1b:c6:ab:4e:60:0e:5e:c2:64:bc:56:
a4:94:1c:7d:07:40:9a:bd:91:19:53:67:a2:f8:6c:1b:da:26:
33:82:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org