Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/etTO5eA_Ce67W1MzH644RlBibtk.roa
File: etTO5eA_Ce67W1MzH644RlBibtk.roa (raw, json)
Hash identifier: XYpIFhq/qk2sFXQgAjGsq79O2id9xnulhMGjdmHta54=
Subject key identifier: 7A:D4:CE:E5:E0:3F:09:EE:BB:5B:53:33:1F:AE:38:46:50:62:6E:D9
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0182EF340E9AF7540D33DDB73ADD50DD05D2
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/etTO5eA_Ce67W1MzH644RlBibtk.roa
Signing time: Tue 30 Aug 2022 14:42:22 +0000
ROA not before: Tue 30 Aug 2022 14:42:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47348
IP address blocks: 185.143.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:34:0e:9a:f7:54:0d:33:dd:b7:3a:dd:50:dd:05:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Aug 30 14:42:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ad4cee5e03f09eebb5b53331fae384650626ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:d1:32:2f:a5:7b:c9:ca:89:c7:76:91:45:
47:c1:36:ed:c8:0f:e4:3f:7a:6a:bf:13:10:51:fb:
cf:c8:a9:49:90:2f:c9:ee:f3:3b:46:28:5d:23:f5:
53:f1:73:39:78:24:52:2c:da:7c:f9:df:d7:35:20:
0e:5d:47:1d:3c:29:48:c5:c5:9f:4d:24:f0:41:d7:
78:3b:d9:72:e9:10:6d:3a:91:88:30:86:b8:2d:b5:
7e:be:d7:8e:89:2c:d3:d3:a7:d5:a7:11:5f:c4:62:
67:96:69:22:74:44:32:25:1d:bd:b0:54:47:e2:54:
69:a1:6b:59:93:fc:50:35:b5:30:2d:93:f1:8f:c7:
7d:7e:8a:62:b9:e4:b5:3b:fd:66:4b:c6:a2:8b:92:
84:03:61:c0:92:35:15:c3:80:aa:c4:4f:44:47:2e:
d4:5d:4e:2c:29:62:34:40:b8:fe:59:32:0d:8c:38:
88:78:1c:7c:6d:59:6f:67:6a:ca:e6:c1:d5:c5:f2:
c4:c3:cd:c6:e6:da:50:b2:ce:69:82:90:0f:dd:90:
65:4a:7f:8a:cd:42:8c:88:30:8b:b0:3e:45:4b:7c:
00:08:11:c7:60:30:c7:48:93:7d:88:06:06:71:54:
6d:55:28:06:67:51:da:cf:7c:d7:04:23:f4:fc:02:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D4:CE:E5:E0:3F:09:EE:BB:5B:53:33:1F:AE:38:46:50:62:6E:D9
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/etTO5eA_Ce67W1MzH644RlBibtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.32.0/22
Signature Algorithm: sha256WithRSAEncryption
43:46:66:d8:33:a1:ce:17:b6:53:be:ce:3f:02:05:db:c3:87:
dd:6b:85:28:f3:61:d3:23:c1:61:c3:f1:77:e9:d6:df:42:78:
65:14:30:40:1c:bb:3c:35:f4:1f:f5:54:7e:0a:98:fc:52:75:
1e:f6:a2:a2:bd:84:60:2f:55:65:0f:0b:1a:84:54:d8:6e:77:
4c:16:63:2e:a7:27:ed:6f:c9:78:33:02:ed:f4:3d:f7:3a:cf:
7b:f2:2a:fe:b3:79:65:b4:f5:cd:7a:40:59:bb:7d:86:9a:25:
6b:9e:43:94:25:60:db:ea:3e:ee:a8:58:38:06:87:c8:65:f6:
85:4a:1a:01:ae:e7:be:c3:bf:1e:4f:a1:41:74:d8:66:33:2c:
10:d8:6e:16:c9:f7:12:6f:94:7f:12:0e:b3:68:19:79:43:79:
c9:36:c2:52:a4:5d:59:d6:98:3d:85:6f:16:82:89:c6:2a:92:
f7:5d:9c:d2:b2:51:fe:68:44:96:fe:08:f1:dd:f3:80:b1:ad:
c6:81:c8:a6:fa:55:05:5b:00:0c:67:8f:5e:99:55:09:02:62:
2e:42:d4:f9:40:8f:7d:0f:f1:8d:c4:db:b8:27:07:44:d2:45:
3e:79:1b:ae:b6:e5:e1:49:18:61:e0:6e:99:e3:82:1f:33:09:
6e:e0:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:58 2024 by rpki-client on console-fra.rpki-client.org