Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/5j2vVkX4D6RKQbbGOsHkXniOUfM.roa
File: 5j2vVkX4D6RKQbbGOsHkXniOUfM.roa (raw, json)
Hash identifier: rx/hDYr5c5jwgEbSrXPf8b39CumG5LQEr4WsERC6MVM=
Subject key identifier: E6:3D:AF:56:45:F8:0F:A4:4A:41:B6:C6:3A:C1:E4:5E:78:8E:51:F3
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 1049C986
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/5j2vVkX4D6RKQbbGOsHkXniOUfM.roa
Signing time: Tue 01 Mar 2022 09:42:13 +0000
ROA not before: Tue 01 Mar 2022 09:42:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49142
IP address blocks: 185.139.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273271174 (0x1049c986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Mar 1 09:42:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e63daf5645f80fa44a41b6c63ac1e45e788e51f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:69:13:84:15:36:65:7e:0c:5f:6a:15:eb:
93:8d:e2:a4:d3:4c:c7:b8:b8:08:67:1e:93:15:b1:
1c:1a:e6:95:d1:10:d7:a0:0a:69:b2:d2:7e:cc:3e:
d0:30:6e:92:79:2d:0b:eb:e2:be:1c:52:3d:bf:d1:
bd:5e:9d:d8:da:43:1f:2b:19:cd:0b:33:b4:6c:19:
fe:c8:26:e2:99:13:53:c8:fd:4a:d4:d2:a2:63:4a:
8c:82:9d:dd:e9:a5:20:00:d9:ce:7a:70:d1:91:09:
db:e9:b6:ac:bd:f7:e7:82:d2:97:da:dc:9e:f7:0d:
da:27:8e:7a:26:d6:3d:8c:44:73:67:e4:20:8a:36:
9c:e3:87:75:7e:ab:75:38:57:1a:e5:42:9a:89:5c:
05:88:53:53:f5:ed:05:ae:18:15:7a:90:7d:a4:9b:
9e:2e:69:cd:bc:f7:81:e0:dc:40:ee:34:7c:7e:c8:
09:b1:1c:07:4e:31:ce:08:05:27:97:f2:b7:59:0b:
18:f7:88:0b:ed:df:fd:87:3f:56:69:dc:df:cc:aa:
28:d8:ea:b3:34:93:42:82:9e:c1:12:9a:01:b2:4c:
d2:2d:33:c9:58:bc:77:70:a2:d0:6c:1a:81:55:1a:
3f:c2:6c:a7:67:23:fd:e9:b8:7f:2b:b4:15:01:34:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3D:AF:56:45:F8:0F:A4:4A:41:B6:C6:3A:C1:E4:5E:78:8E:51:F3
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/5j2vVkX4D6RKQbbGOsHkXniOUfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.216.0/23
Signature Algorithm: sha256WithRSAEncryption
17:d8:2e:ce:05:96:86:22:21:db:b7:9b:95:7f:89:ce:22:ea:
d9:e9:52:df:ab:d5:28:53:7e:b6:94:65:82:97:10:19:47:9e:
0b:73:6b:74:98:66:e8:06:23:7c:5a:76:4b:47:d6:89:bd:a4:
f2:5b:29:be:04:f9:02:09:88:44:85:78:a3:19:0d:54:92:5b:
33:95:75:73:4c:7d:ae:46:1f:71:7d:a2:84:84:38:c7:66:4a:
1e:78:80:23:9e:18:50:47:04:21:83:fc:ff:34:5a:f2:9b:f8:
17:4b:37:03:26:db:aa:42:ef:21:0a:24:46:78:50:a2:f5:a9:
87:f1:61:d2:e9:0a:7a:e0:33:81:97:da:28:03:3a:7e:67:34:
b6:86:62:6c:19:41:c3:38:db:4c:28:10:bd:41:cd:7b:4a:d4:
07:82:ba:0c:ea:fc:1c:bb:b3:9e:8d:fe:3b:f4:af:71:9b:bf:
9c:ba:f1:18:37:63:ef:14:72:76:7d:51:46:e7:ab:cd:8d:0e:
14:00:bc:db:2d:76:27:e3:80:8f:6f:7e:c3:2b:fa:ad:73:56:
af:18:30:31:3f:3d:81:e6:30:33:29:5b:2d:bb:7a:fc:5c:2f:
a1:3c:14:c5:62:c7:93:50:68:5d:3d:f1:ac:21:ad:a4:dd:f9:
c3:d0:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:35 2024 by rpki-client on console-ams.rpki-client.org