Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1lMOQSrKhzKlphaR2A15lP6iO2I.roa
File: 1lMOQSrKhzKlphaR2A15lP6iO2I.roa (raw, json)
Hash identifier: OqDTTp9WS3cZHtTfXb+rxmrZ/c0jNK9fdyjbnGNFvOU=
Subject key identifier: D6:53:0E:41:2A:CA:87:32:A5:A6:16:91:D8:0D:79:94:FE:A2:3B:62
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 076797E6
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1lMOQSrKhzKlphaR2A15lP6iO2I.roa
Signing time: Wed 08 Jun 2022 06:28:02 +0000
ROA not before: Wed 08 Jun 2022 06:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211717
IP address blocks: 188.85.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124229606 (0x76797e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jun 8 06:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6530e412aca8732a5a61691d80d7994fea23b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:03:c6:3f:ae:f9:82:ec:6f:b7:bd:30:9b:
b9:b4:2e:78:f8:a7:a0:dd:eb:8a:9b:df:d5:77:6a:
f2:55:a6:3b:d4:f1:21:45:8f:7f:10:53:cf:8e:06:
c6:03:90:df:ac:0b:65:83:ea:4b:e9:28:fb:cf:76:
8a:30:f3:3c:f7:20:15:62:80:9a:a4:80:e0:9d:d6:
27:e2:8e:c3:bd:12:03:82:33:f9:69:b6:05:61:1c:
03:30:ee:e0:58:27:fd:92:59:56:1c:94:4e:e4:72:
25:67:2d:84:17:dd:1c:7c:46:a2:03:23:22:2c:40:
e6:58:77:da:2d:bb:74:0d:9c:1f:e7:67:3d:b1:4d:
c5:ba:1c:89:3f:d6:6d:51:a5:fc:5a:0f:44:cd:45:
a4:79:1b:78:61:3c:38:99:8b:d3:ab:c3:67:80:ea:
b4:82:31:90:4f:15:c1:db:dd:23:2e:5e:a0:2a:05:
01:93:57:96:30:35:cc:ec:30:64:80:8b:f4:8d:25:
c0:33:26:48:08:58:2f:6a:fa:c4:78:69:ba:3b:62:
ee:28:5f:6e:f5:a6:35:f5:79:06:8a:5e:1c:7b:f0:
8c:dd:60:40:80:a0:c8:20:13:58:ab:31:7d:99:15:
35:80:a5:81:aa:12:e0:76:aa:f4:35:45:e8:10:99:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:0E:41:2A:CA:87:32:A5:A6:16:91:D8:0D:79:94:FE:A2:3B:62
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1lMOQSrKhzKlphaR2A15lP6iO2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.85.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:08:38:c2:9b:72:18:c6:12:f3:3e:86:24:8e:22:63:13:c9:
cd:3b:5f:57:cc:c4:7d:9f:bd:5d:8e:c8:c3:34:f1:58:b1:95:
fe:7d:d7:a6:c2:69:bf:90:25:59:54:c3:bc:31:4f:e9:91:37:
97:11:8c:c5:c2:45:27:f7:00:2e:6c:61:af:d5:07:66:6d:04:
94:e9:14:d6:2a:8c:85:10:4e:1d:29:09:ec:0f:c8:a9:8b:51:
cd:84:e5:81:95:33:01:33:7c:ac:86:6c:f5:85:94:92:17:76:
3f:47:58:9d:16:a3:95:ba:69:5b:88:8b:17:95:3f:f8:ee:26:
91:a7:2b:30:cc:e7:de:d9:3f:05:cb:f3:97:10:35:19:61:36:
7e:25:a0:fd:91:af:ca:80:4f:12:f6:e8:4d:3b:2e:9c:d0:62:
56:ff:38:61:78:da:62:50:be:78:71:a2:61:1f:df:76:e3:a5:
2f:73:59:5b:f3:fa:13:46:f3:40:86:7a:4e:be:ec:a2:04:5c:
e3:ee:5e:79:c7:67:b8:e5:a7:64:54:6b:80:22:35:17:a7:82:
74:3c:d9:50:b1:ba:9a:e7:a3:37:de:20:a3:41:d9:c7:46:65:
b2:a7:34:9c:fc:96:8e:6a:5e:5c:32:50:f6:e8:71:18:4f:aa:
e1:24:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org