Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/s_ZH4hBR63Ci2lLfhFyJPum47dQ.roa
File: s_ZH4hBR63Ci2lLfhFyJPum47dQ.roa (raw, json)
Hash identifier: e+jlQulYnmef7s55rpdj9Ql18hq4iDDgsntJ32niD68=
Subject key identifier: B3:F6:47:E2:10:51:EB:70:A2:DA:52:DF:84:5C:89:3E:E9:B8:ED:D4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 082A3091
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/s_ZH4hBR63Ci2lLfhFyJPum47dQ.roa
Signing time: Sat 01 Jan 2022 15:05:59 +0000
ROA not before: Sat 01 Jan 2022 15:05:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1764
IP address blocks: 185.245.64.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136982673 (0x82a3091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Jan 1 15:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3f647e21051eb70a2da52df845c893ee9b8edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:b9:6f:49:9d:cd:f5:8a:ab:f1:62:f8:70:
4a:51:db:80:0c:6f:c6:05:a5:6b:0d:59:37:2f:cf:
83:81:3a:a8:0a:7f:95:4a:87:85:26:c5:4e:83:9f:
24:7a:81:ea:bb:93:f3:3a:4f:79:fe:be:09:6c:ba:
08:bd:43:5e:5f:e0:0f:33:13:7f:25:d8:2d:3f:a2:
ca:27:ec:9f:c4:07:66:a6:e7:0f:bd:f9:07:29:b6:
13:1b:a0:45:06:7e:87:cc:c2:ba:7b:77:86:43:a8:
eb:45:26:9b:61:e4:bd:36:45:74:28:3c:32:49:b7:
fc:a1:c4:b1:29:7e:81:34:f0:b2:25:ac:25:fc:46:
bc:f6:30:49:0b:9d:56:d6:ce:25:3f:61:39:06:47:
11:39:82:d8:16:b3:85:8f:3d:32:bb:f4:c3:ef:2a:
17:7d:a9:0e:34:69:f0:82:aa:33:59:0f:8e:94:be:
d1:df:cd:56:3a:7c:37:ef:15:16:78:5d:03:5a:2a:
5a:59:6c:4f:3d:7e:b4:59:4a:4a:5b:6d:59:1e:6d:
8b:0d:02:5c:70:59:a6:e6:42:43:c8:a3:54:8a:5c:
43:e9:be:35:3e:51:c6:50:16:b1:32:c8:95:ca:f6:
39:99:2b:40:7e:20:92:35:05:28:e2:b1:9c:7d:d3:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:47:E2:10:51:EB:70:A2:DA:52:DF:84:5C:89:3E:E9:B8:ED:D4
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/s_ZH4hBR63Ci2lLfhFyJPum47dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.64.0/23
Signature Algorithm: sha256WithRSAEncryption
81:07:d2:85:bc:1f:d4:1e:16:c3:e3:bd:f7:07:2f:c0:de:5f:
22:8f:64:a4:05:f2:90:6d:9c:24:4c:c8:88:88:8b:cb:cc:8e:
2f:f6:7d:41:c8:c1:15:6d:61:89:d7:0d:13:14:6d:8d:f2:64:
0e:22:dd:61:94:6d:dd:50:63:db:f2:db:6c:0c:be:25:d7:c0:
2e:18:6e:f8:dd:e2:68:a5:eb:cb:9b:cf:25:b5:3d:2d:71:a2:
f0:00:08:cf:27:a7:df:34:65:82:71:70:54:df:d4:4a:15:49:
92:e0:9b:40:7c:a8:23:73:9a:f2:11:4f:9f:fb:5b:d9:2c:88:
67:fd:34:c5:c4:9e:e3:99:b9:25:7a:d9:8f:d2:96:52:4a:5f:
6a:ef:47:91:e7:f2:1d:3e:8f:0d:31:4b:5f:ff:a5:07:5d:6b:
70:f4:ec:48:6e:e6:ca:25:2f:45:50:1f:2a:45:d0:a3:24:9b:
29:c1:1a:55:a5:d9:57:f8:0a:a7:de:e9:39:55:4a:2c:68:9d:
aa:2f:a6:54:ab:ca:18:ba:3d:7a:e6:ed:91:c0:23:83:98:c8:
2e:72:58:82:53:4f:95:59:71:57:28:dd:f2:b0:e9:a3:85:57:
53:b8:b9:1c:a4:a0:e3:1b:85:c5:76:28:3e:1b:9f:19:3c:23:
6e:27:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:29 2024 by rpki-client on console-ams.rpki-client.org