Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/SldShD3C-8ds5w-kQhLQs3AF05E.roa
File: SldShD3C-8ds5w-kQhLQs3AF05E.roa (raw, json)
Hash identifier: JQcoz2dYg7ZPEXA7tqUTsCGzhSYKyVxMB9NWrwTBHiM=
Subject key identifier: 4A:57:52:84:3D:C2:FB:C7:6C:E7:0F:A4:42:12:D0:B3:70:05:D3:91
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 027966A9
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/SldShD3C-8ds5w-kQhLQs3AF05E.roa
Signing time: Sat 01 Jan 2022 15:57:46 +0000
ROA not before: Sat 01 Jan 2022 15:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209231
IP address blocks: 185.161.236.0/22 maxlen: 24
2.56.140.0/22 maxlen: 24
2a09:c540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41510569 (0x27966a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Jan 1 15:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a5752843dc2fbc76ce70fa44212d0b37005d391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:fd:07:91:04:68:b5:70:2d:72:9b:4d:98:
d8:8e:af:df:b4:54:13:58:d1:20:e0:bb:59:b7:df:
b5:67:70:30:9d:62:2b:1f:c6:36:63:ca:62:a4:73:
be:d1:9f:eb:d0:e2:8c:61:82:a2:06:ef:53:9d:57:
42:32:a6:45:b6:3e:12:78:55:c2:b3:d5:5a:8a:d3:
78:b8:35:54:ec:c8:54:6f:05:b3:13:01:b0:5c:19:
d8:17:17:89:da:06:0a:c0:30:98:1e:43:80:92:da:
be:c3:1d:30:dd:4d:69:35:15:25:d9:73:dc:83:34:
d2:59:b1:0f:49:ef:a1:cc:bc:ee:e5:59:98:13:d5:
9f:9a:2e:ab:f9:78:8c:d9:69:7c:c1:66:0c:c8:23:
4f:7d:88:f5:a8:a8:70:8f:b2:cb:ad:52:3d:06:38:
ce:22:a7:aa:9f:bc:17:bd:dd:ae:b1:91:66:95:3f:
85:12:2d:13:d9:90:fd:1d:7c:42:d2:ff:d9:04:30:
0c:4a:39:f1:31:12:01:a7:dc:51:b4:4f:b2:53:3d:
ad:6b:56:8c:74:40:54:e2:e5:17:b9:9d:94:90:39:
f9:18:55:97:1c:b3:a3:a5:ac:62:87:a6:08:ff:99:
65:3f:b7:71:c9:f6:05:eb:ba:70:d1:35:4f:ab:e7:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:52:84:3D:C2:FB:C7:6C:E7:0F:A4:42:12:D0:B3:70:05:D3:91
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/SldShD3C-8ds5w-kQhLQs3AF05E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.140.0/22
185.161.236.0/22
IPv6:
2a09:c540::/32
Signature Algorithm: sha256WithRSAEncryption
9a:2a:f4:57:94:eb:95:49:26:0c:aa:38:db:68:f5:13:ca:24:
70:99:d7:fd:cc:a9:7a:74:8a:14:ad:a8:72:fa:99:01:96:93:
cc:3e:85:73:ac:02:83:46:11:67:96:7e:53:33:1f:ef:45:a4:
5d:84:5f:f8:51:db:9d:d6:12:12:37:06:d0:e9:dc:6a:a5:26:
d0:a9:50:64:70:ba:96:b7:59:a0:b0:03:23:d5:89:c5:ed:e9:
d9:03:e8:71:03:47:dc:a8:39:07:4e:3b:9c:0f:80:c9:a5:34:
0a:22:e2:a7:74:40:16:98:40:66:a2:73:ac:99:ef:95:f5:fb:
d2:9d:8b:d7:b0:06:b9:41:8c:61:6e:f4:97:fb:03:66:36:f2:
fe:a8:68:d7:34:a6:85:20:cb:02:2c:f7:eb:0a:cc:ac:7c:12:
10:f9:8f:d5:b4:56:88:16:76:7e:6f:38:37:7c:e8:db:a7:04:
d2:49:e0:66:d4:c2:3d:d8:24:63:40:91:65:19:4c:4d:d0:d3:
7a:d8:97:93:93:32:d0:76:ed:4b:cb:60:cf:4a:0c:d0:47:5a:
3d:76:71:18:41:44:73:6f:60:7a:0f:89:35:c5:6b:a5:75:21:
58:3d:6b:24:99:a9:d6:f7:91:0c:ad:0c:c1:61:d2:97:ef:98:
16:38:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-fra.rpki-client.org