Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/A7s5XddxmQ_6HO4UEdCOGd7XPXY.roa
File: A7s5XddxmQ_6HO4UEdCOGd7XPXY.roa (raw, json)
Hash identifier: zLKIxujMykN+/nxgMMI4/JJEaxZbdLh8XHbID4j6cmw=
Subject key identifier: 03:BB:39:5D:D7:71:99:0F:FA:1C:EE:14:11:D0:8E:19:DE:D7:3D:76
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0182EF340F98C36124EF1662D3392C996E14
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/A7s5XddxmQ_6HO4UEdCOGd7XPXY.roa
Signing time: Tue 30 Aug 2022 14:42:22 +0000
ROA not before: Tue 30 Aug 2022 14:42:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204692
IP address blocks: 185.243.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:34:0f:98:c3:61:24:ef:16:62:d3:39:2c:99:6e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Aug 30 14:42:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03bb395dd771990ffa1cee1411d08e19ded73d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:3b:e8:91:69:d8:ab:47:b2:3d:a7:58:85:
a3:93:4e:e4:86:43:e9:85:eb:3c:06:7a:13:76:00:
39:1b:b7:e5:fc:f2:da:63:fb:41:54:37:e0:e5:9b:
69:75:8a:19:2b:d2:09:e8:8e:f6:79:bc:3f:2a:8c:
3b:a9:82:30:e3:ae:f9:21:86:bd:6b:ea:61:65:65:
88:7e:12:88:1f:c7:24:c9:1f:f7:6d:28:2c:f7:62:
73:6c:a6:4c:ff:f3:ca:a6:60:10:26:c6:62:7b:7a:
88:72:c0:c4:ab:45:44:dc:8e:4b:50:7f:97:98:e3:
d5:e0:51:2e:dc:b9:ae:c1:22:8e:1b:cb:c0:db:30:
c7:58:93:40:e7:b3:79:98:de:17:68:55:3a:05:fb:
c1:c6:15:c5:95:99:1c:81:2e:6e:83:ae:fb:5c:e8:
7e:fc:af:84:db:9c:20:c2:9e:14:c9:25:25:32:d9:
34:e5:c5:c6:74:b1:63:e3:37:43:74:88:ba:4a:a1:
95:c2:c2:29:fb:64:76:91:6d:4c:48:45:98:bd:d5:
48:0a:57:c5:86:13:02:93:3f:fa:2c:88:1c:e7:cb:
f0:70:60:88:9b:58:f5:d8:e8:a9:9e:9f:98:fc:51:
a9:f3:59:2d:0e:7e:cd:1e:74:85:59:c2:14:43:fd:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BB:39:5D:D7:71:99:0F:FA:1C:EE:14:11:D0:8E:19:DE:D7:3D:76
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/A7s5XddxmQ_6HO4UEdCOGd7XPXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:69:ff:e7:e6:42:39:46:9d:ad:28:48:f0:da:a5:e8:cf:6a:
73:ae:2f:f8:03:96:eb:8b:ab:ad:2b:d3:14:ba:14:ed:bc:9c:
b5:df:76:ff:d6:fb:60:e1:55:1a:d7:c6:01:5a:f2:e3:1a:e4:
21:c1:74:d8:65:3f:cf:e6:ef:04:c0:fd:c4:28:d0:a5:67:49:
e0:dc:44:9f:b4:8b:d6:6b:21:cf:80:ce:71:9a:66:11:ec:21:
75:02:0f:bd:e7:d7:c1:0f:b8:09:92:3a:87:0a:f0:17:34:de:
7c:a4:be:f2:1b:59:29:4d:7e:5d:64:6c:64:37:a1:a8:b0:72:
8d:f4:44:fb:47:1c:9a:b2:a8:ae:4e:e6:a8:77:75:e6:1a:8e:
c5:22:32:bf:24:a8:35:3e:67:32:7a:63:d3:1e:e2:fd:8d:fe:
73:2f:49:07:30:3c:4a:9c:33:93:41:14:5a:44:41:fb:31:cb:
41:f5:11:4c:96:51:17:15:42:5c:3e:f4:c8:24:c6:09:f9:c4:
cc:1d:ba:ac:59:68:05:73:49:13:2c:57:c8:ab:d5:3c:43:b0:
eb:27:59:3f:1e:0d:3a:ac:c0:cc:cd:2a:c9:7a:9b:d2:0d:e5:
b4:ef:18:77:d8:51:52:45:aa:b0:8f:7e:2b:72:ae:69:60:38:
30:49:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:50 2024 by rpki-client on console-ams.rpki-client.org