Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/Xap2rn94cn2mSlexo6UJDBI6tcE.roa
File: Xap2rn94cn2mSlexo6UJDBI6tcE.roa (raw, json)
Hash identifier: yQaam1ZCWgI3QBNhTqwnrw630Cl1Int37bW47vU1TYc=
Subject key identifier: 5D:AA:76:AE:7F:78:72:7D:A6:4A:57:B1:A3:A5:09:0C:12:3A:B5:C1
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 1522F893
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/Xap2rn94cn2mSlexo6UJDBI6tcE.roa
Signing time: Tue 31 May 2022 09:31:13 +0000
ROA not before: Tue 31 May 2022 09:31:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.120.172.0/24 maxlen: 24
185.120.174.0/24 maxlen: 24
185.120.173.0/24 maxlen: 24
185.120.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354613395 (0x1522f893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: May 31 09:31:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5daa76ae7f78727da64a57b1a3a5090c123ab5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:7d:de:c7:24:6c:f8:ec:dc:c7:5f:53:05:
3c:75:9e:5e:9a:22:61:98:47:1a:de:e3:be:a8:9e:
a1:45:6e:80:14:66:0c:e0:40:ba:65:28:97:ac:a2:
8e:7f:63:16:6b:6c:89:f4:aa:16:29:24:ad:d9:d6:
29:63:92:b4:c3:5a:76:cb:34:e4:3a:9f:97:8e:e4:
b7:ef:3b:86:1a:54:4d:e3:bb:b8:21:e7:58:e8:f8:
1d:fd:fa:ee:76:05:f0:b9:69:05:9b:c2:86:15:09:
87:fe:ae:9b:e8:77:1c:75:a0:f9:85:1f:10:12:3f:
03:4b:8f:bf:0b:18:33:bd:15:6f:ed:2e:6b:72:ca:
71:3e:31:e3:31:79:d2:21:69:06:66:01:0e:a5:4f:
3f:18:d5:e5:9f:68:ba:5b:2d:b0:f8:71:dc:4d:25:
85:d4:08:dd:ef:bf:d3:5f:f7:09:d4:5e:db:1f:1d:
04:40:a4:59:5c:80:2e:bd:5d:41:69:62:63:aa:1c:
f2:93:73:11:7c:f0:cf:96:02:20:c0:58:26:97:62:
74:7b:ab:26:19:35:fe:07:28:22:5e:4a:41:3f:7e:
3c:42:08:c6:7d:dd:00:2c:36:28:20:72:07:fc:9f:
ec:45:38:93:ba:36:26:24:3f:75:4f:e5:70:50:b5:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:76:AE:7F:78:72:7D:A6:4A:57:B1:A3:A5:09:0C:12:3A:B5:C1
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/Xap2rn94cn2mSlexo6UJDBI6tcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:e6:11:bf:4e:2a:f6:9c:91:90:19:05:b5:3f:4a:5d:84:a5:
bb:f9:b9:21:a5:e3:94:b4:f4:07:df:b5:39:40:bd:88:ea:a4:
f6:d6:9f:53:f7:8b:8f:63:c2:5e:12:ef:d2:b3:ed:b9:fd:e8:
17:7a:12:af:3a:16:49:af:9d:b3:c1:b5:a6:0a:7d:ff:d9:2a:
99:0a:38:6f:18:49:65:5e:65:64:8c:74:9a:3d:f6:a9:43:49:
52:c1:e6:70:c5:a5:02:71:b0:09:d5:04:c5:77:d0:0d:c4:bc:
1f:79:19:44:5b:e7:30:b3:f2:1b:ad:40:d6:fb:e8:e2:1b:e4:
f6:f9:12:c1:69:5e:6f:d0:ce:44:b3:53:92:a6:4d:6f:c7:8b:
6d:91:12:63:26:2f:44:ef:33:1b:4a:65:f7:2e:1f:af:81:0f:
b9:15:8d:59:71:3e:d7:25:1f:e4:d4:52:f0:33:71:6a:ce:41:
2f:11:e7:4f:12:02:f7:db:8d:ff:3e:99:86:eb:00:a7:4b:58:
61:f1:9a:d2:31:2c:4f:69:09:26:8a:d9:23:f8:0a:09:df:4e:
48:64:fd:ee:6c:59:c8:e2:5e:7f:5b:ec:3d:9b:3e:78:dc:f9:
e8:7d:84:08:c8:a1:16:5c:ab:36:6e:47:ed:86:99:25:0a:69:
7c:80:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:33 2024 by rpki-client on console-ams.rpki-client.org