Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/5dw2KeYTUzh39exWYulHgQaowMY.roa
File: 5dw2KeYTUzh39exWYulHgQaowMY.roa (raw, json)
Hash identifier: TtA1cIXzWKi8Y2YbIxXmS7WnLMC8ohgv8VtaESiP0aE=
Subject key identifier: E5:DC:36:29:E6:13:53:38:77:F5:EC:56:62:E9:47:81:06:A8:C0:C6
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 0266FC08
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/5dw2KeYTUzh39exWYulHgQaowMY.roa
Signing time: Sat 01 Jan 2022 07:01:16 +0000
ROA not before: Sat 01 Jan 2022 07:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211855
IP address blocks: 185.105.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40303624 (0x266fc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jan 1 07:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5dc3629e613533877f5ec5662e9478106a8c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:e7:9c:90:0b:37:10:ce:9d:77:77:c9:ee:
43:06:03:bf:ff:85:d5:36:1c:e1:05:8e:75:26:41:
ba:6b:33:66:75:30:a7:ff:df:99:ba:ab:18:b4:70:
8a:90:1b:5c:df:12:81:cb:dd:3d:78:a1:af:f7:91:
62:6f:2f:8c:1c:4a:5a:ff:94:8a:88:ad:50:8b:86:
76:42:df:13:5e:58:7b:e0:c8:fc:fc:17:bc:a5:02:
a3:58:fa:1f:ac:bc:7b:10:76:fb:81:92:a8:6c:fc:
10:9a:e1:83:47:3f:22:d7:12:33:dc:d3:d1:7b:29:
b9:53:e2:10:2a:0d:47:e5:eb:12:8f:65:f9:5a:7b:
e3:96:b2:97:d6:8f:50:4d:0d:5d:0c:b4:74:9a:23:
bd:a1:bd:a1:6c:27:3a:0d:59:f7:11:df:2b:2b:e9:
86:a1:39:c3:55:99:ca:e1:77:5b:a1:cc:36:23:43:
b7:ba:4f:12:1c:16:76:f1:f1:76:22:09:56:e2:c5:
a1:90:5a:d6:b2:bf:a1:ee:69:f1:39:2f:50:77:a4:
e6:f4:19:84:9d:b1:5f:8d:e2:82:5b:72:1f:38:6b:
01:c8:8d:34:4a:54:43:53:9f:ab:6e:b3:75:2c:9a:
8f:3b:1e:74:e5:e9:eb:af:3f:be:c8:13:96:ff:65:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DC:36:29:E6:13:53:38:77:F5:EC:56:62:E9:47:81:06:A8:C0:C6
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/5dw2KeYTUzh39exWYulHgQaowMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bb:20:6c:09:4b:54:18:b9:4d:3c:ec:f7:d5:27:a6:8e:66:
7d:d6:2c:02:16:65:08:7a:f8:73:98:38:5f:34:38:c4:f0:5d:
f8:22:a3:7e:3a:53:af:77:5d:45:ee:04:14:8d:bb:31:66:9c:
bc:89:af:e8:3c:0b:6e:a4:33:31:a8:17:53:2d:c9:18:5e:b0:
ce:17:ef:4c:1f:b3:98:95:d1:e5:2b:19:49:42:57:8b:54:20:
69:06:1f:9c:13:a2:48:6c:8a:a5:d3:9c:9c:28:55:98:ac:2c:
3e:c6:d9:5b:a4:1e:9d:a5:5e:b9:fb:00:c9:47:74:b3:b0:28:
6a:13:c8:54:d2:c9:49:58:ae:1d:6e:f0:7b:77:24:cb:27:11:
8d:9d:9b:c6:e7:ce:c5:92:94:eb:7b:6c:00:9d:41:30:ba:65:
60:ec:7c:ef:84:47:09:b6:7e:26:59:b8:e9:23:b6:ac:18:52:
41:65:ca:93:1d:28:5d:c8:ac:5a:f9:6b:d5:dc:1d:f2:0c:4e:
a7:2f:70:c0:34:78:35:89:8e:02:ca:71:a9:3f:4d:9b:aa:c4:
0d:75:f7:15:39:50:57:91:7d:86:54:18:78:41:0e:d0:23:43:
78:d7:d8:0d:52:8a:8e:b2:f5:c8:bf:b9:37:3f:7b:0c:67:13:
16:2f:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org