Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/4Z4gyLBtSu7n8XN5cDoL05FGYmk.roa
File: 4Z4gyLBtSu7n8XN5cDoL05FGYmk.roa (raw, json)
Hash identifier: N0KilUc9rNNuzNbsGbB28aGlGUvTKCmgsN+JNLKi9nk=
Subject key identifier: E1:9E:20:C8:B0:6D:4A:EE:E7:F1:73:79:70:3A:0B:D3:91:46:62:69
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 0F0595E8
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/4Z4gyLBtSu7n8XN5cDoL05FGYmk.roa
Signing time: Sat 01 Jan 2022 08:01:27 +0000
ROA not before: Sat 01 Jan 2022 08:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51025
IP address blocks: 185.115.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252024296 (0xf0595e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jan 1 08:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e19e20c8b06d4aeee7f17379703a0bd391466269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:4a:dc:c3:0e:44:e9:1f:ee:85:f1:4b:db:
5b:af:2a:d0:3c:43:3a:13:cb:8b:f3:b5:97:38:4a:
6a:01:9a:23:a5:fc:6c:17:95:48:a4:f9:3b:57:86:
56:03:62:ec:0c:d2:31:a4:bb:ee:97:95:9b:c5:91:
a4:7d:1e:bc:02:6d:f8:dd:f0:8f:6f:36:34:93:d7:
29:ce:1e:4c:3a:ec:5a:c3:b5:a4:88:64:06:0b:43:
e8:31:ec:78:b7:3c:eb:e3:20:5a:6e:08:fc:14:07:
6a:f1:ad:ed:a3:46:a8:a7:51:54:f3:97:af:36:99:
20:bb:7b:7c:fc:fa:89:1a:69:46:f0:45:c8:3c:64:
b9:73:2c:bb:b3:c6:53:1a:6e:1c:f1:6b:ef:6f:8c:
eb:bb:5a:59:f8:a0:a6:fc:e6:cd:f1:2c:cf:11:61:
6b:41:46:2c:c6:75:68:f6:31:7e:90:55:69:a3:d7:
0d:d4:4f:11:16:23:36:50:74:a2:e3:94:be:d9:a5:
27:b9:a3:ba:cb:03:7e:0a:66:3a:05:11:cc:f8:3a:
c5:d3:2e:a9:c8:93:e7:7f:0b:2e:f8:8e:60:a5:34:
91:7e:ac:d7:03:10:b0:47:29:6c:2f:42:33:7e:03:
09:60:83:38:2f:c6:fb:6b:6c:a5:03:91:f3:a8:bd:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9E:20:C8:B0:6D:4A:EE:E7:F1:73:79:70:3A:0B:D3:91:46:62:69
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/4Z4gyLBtSu7n8XN5cDoL05FGYmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.0.0/22
Signature Algorithm: sha256WithRSAEncryption
56:cb:79:aa:e6:1e:80:07:b6:7d:df:20:fd:3b:5f:cc:f7:30:
a4:b5:58:d4:ae:4b:57:e0:e5:1c:82:90:cc:65:2b:23:f6:0a:
1e:c3:1e:66:e0:bf:e0:10:2a:07:4e:a2:d7:50:6c:a6:00:76:
03:60:87:c6:56:05:8b:17:27:07:48:bc:45:0c:c6:b9:68:14:
d5:73:ed:73:4d:60:77:d4:cc:4f:f2:26:9a:87:15:19:c1:4a:
74:d3:1e:03:8d:18:db:ed:65:c3:0f:36:6a:53:05:cd:83:69:
90:76:83:57:5c:19:b2:53:b4:a0:fc:44:63:ca:34:04:69:ab:
fd:dc:66:35:4c:bb:62:1e:31:cc:0a:74:ff:f4:c4:c5:50:71:
9a:c3:65:2a:e8:db:cb:a5:b1:85:92:97:75:6a:a7:2e:73:10:
f3:28:e1:ed:8f:ed:ab:80:2d:72:aa:85:3e:f1:82:24:5b:f2:
d4:57:11:32:6a:46:d1:6f:b2:cb:49:28:36:7c:5c:a9:fb:f9:
ba:07:6b:7b:d4:12:f1:e9:40:40:26:00:9c:68:60:b6:83:46:
ae:0b:d0:16:16:37:2c:93:9b:66:f4:ba:e3:d6:0c:2d:c7:ba:
0f:a3:e1:1d:57:2f:6b:22:b4:66:fb:4b:cc:9c:23:2a:60:bb:
83:42:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:48 2024 by rpki-client on console-fra.rpki-client.org