Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/OjgCSfpGzpLxUECaDBapuHc15dc.roa
File: OjgCSfpGzpLxUECaDBapuHc15dc.roa (raw, json)
Hash identifier: PWQuc2RWVs1P4ISvz2IxAmnD5tOFnGMEF6PoMlFthGY=
Subject key identifier: 3A:38:02:49:FA:46:CE:92:F1:50:40:9A:0C:16:A9:B8:77:35:E5:D7
Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial: 087DA5DF
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/OjgCSfpGzpLxUECaDBapuHc15dc.roa
Signing time: Sat 01 Jan 2022 13:56:52 +0000
ROA not before: Sat 01 Jan 2022 13:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201971
IP address blocks: 185.57.188.0/22 maxlen: 24
2a04:de40::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142452191 (0x87da5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Validity
Not Before: Jan 1 13:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a380249fa46ce92f150409a0c16a9b87735e5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:72:26:61:fb:a6:e9:84:fc:03:cc:0c:94:
8d:69:53:27:cf:b1:a1:37:49:4a:1b:8c:d7:41:20:
7a:7d:29:8d:c0:1c:17:e0:8e:84:a0:26:c6:b6:f5:
36:68:c4:48:d3:91:7b:48:d9:e4:8c:b7:82:48:d3:
13:ab:02:d5:7f:da:77:a0:d3:06:5c:5a:56:08:d4:
87:88:25:cc:e3:b7:97:cf:d8:37:50:10:22:dc:56:
b3:ae:b3:e6:52:7a:96:5f:6c:38:ab:43:7b:d6:ba:
00:98:1d:8d:07:16:c3:6d:3b:ae:3e:bc:4f:16:b2:
16:97:9c:40:b9:82:44:01:be:2d:2a:ed:48:fb:ed:
51:65:c1:35:ca:7c:c1:ab:20:b7:2e:14:28:c9:5d:
34:1b:26:35:db:bd:1c:1e:7b:01:fd:94:ef:6d:2b:
fe:78:d2:ec:01:b2:f4:b5:d7:7f:5d:c4:3d:90:6a:
82:00:98:3f:ac:1e:b8:d5:7d:0c:1f:df:19:ec:fb:
4b:61:30:69:69:99:46:88:3e:1e:7d:e0:5b:94:a6:
d6:39:1b:62:e1:8e:c5:a8:72:94:ef:5b:12:42:25:
4a:8c:20:63:6f:00:30:72:25:74:40:4e:58:8a:fa:
67:63:a1:0f:bc:ef:36:e4:01:9f:a9:e7:5e:5f:ce:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:02:49:FA:46:CE:92:F1:50:40:9A:0C:16:A9:B8:77:35:E5:D7
X509v3 Authority Key Identifier:
keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/OjgCSfpGzpLxUECaDBapuHc15dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.188.0/22
IPv6:
2a04:de40::/29
Signature Algorithm: sha256WithRSAEncryption
5d:84:1e:b1:f7:f9:33:c0:7a:bc:c9:8a:96:33:d4:1c:60:3e:
75:7d:e1:c5:c1:ee:0d:07:76:d8:7a:58:bd:b4:3c:d3:05:b7:
fa:4f:f9:2a:3f:c6:14:72:a8:b8:e5:9b:75:1f:97:60:5d:2a:
f9:71:9c:2f:0d:f4:d8:f0:07:33:81:4f:92:d7:16:35:60:89:
fc:36:fe:93:76:b9:18:7c:24:e2:e1:76:14:d6:64:f3:af:a7:
1b:81:cc:42:98:59:2a:5b:cd:3c:fe:d9:b0:19:98:81:8b:8b:
1a:12:cd:58:38:a9:0c:50:61:4c:ad:b0:0d:5e:c6:9a:3c:fd:
11:33:82:23:09:97:33:29:cf:c8:7d:19:f3:5a:c5:bf:65:cd:
9d:4b:4e:e8:3f:1f:8e:ea:ed:f9:89:52:20:85:45:4c:60:c2:
d7:33:af:57:bf:91:3c:15:89:9d:b7:47:06:2b:fd:48:cf:e4:
8e:3a:a2:15:77:b9:2a:b7:00:ff:da:ed:f8:9c:a9:a4:b3:4e:
cb:fc:5d:8b:75:6e:98:75:d2:aa:96:49:c9:c8:25:11:a6:94:
53:88:63:5c:0d:ef:cb:57:4f:98:3e:7a:23:d5:fe:39:be:50:
3c:70:0f:7e:a7:61:4c:d5:52:93:a9:77:7d:2e:7a:27:90:5c:
e3:d4:c4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org