Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/_UWGemho3bisTtJunRttu-kav74.roa
File: _UWGemho3bisTtJunRttu-kav74.roa (raw, json)
Hash identifier: JNEUzqmPryCFbmJvEJD0XGn+TVgHkwUtNGVwZNKPqNI=
Subject key identifier: FD:45:86:7A:68:68:DD:B8:AC:4E:D2:6E:9D:1B:6D:BB:E9:1A:BF:BE
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 13D6F620
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/_UWGemho3bisTtJunRttu-kav74.roa
Signing time: Sat 01 Jan 2022 02:52:38 +0000
ROA not before: Sat 01 Jan 2022 02:52:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.120.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332854816 (0x13d6f620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jan 1 02:52:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd45867a6868ddb8ac4ed26e9d1b6dbbe91abfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:5d:4a:bd:bd:32:ff:f6:80:1b:a8:52:20:
76:a9:ed:d0:d0:88:63:b5:d1:32:70:95:5f:91:db:
e3:73:0f:17:da:54:5e:ad:90:a5:7e:5e:34:ac:83:
09:50:d3:f2:d9:9f:2f:07:0f:be:de:8b:40:b2:4d:
9f:e8:b8:bc:d7:59:ed:33:39:55:5b:c8:5f:c9:08:
ff:5e:8e:b7:db:a2:97:7c:08:b2:7a:f7:50:9b:47:
e7:1d:24:03:88:18:31:01:e1:01:39:3a:e4:c1:b3:
7b:3f:37:f2:85:be:ba:15:e1:54:a4:35:54:5a:5f:
e4:48:52:27:59:0f:ab:d0:97:3f:3f:e9:45:50:1b:
2e:56:8c:f7:50:f7:94:e8:74:0b:37:ea:bd:96:a7:
b0:06:5b:af:d3:33:e6:77:de:0e:69:2e:a0:77:23:
fb:66:ef:c3:c5:34:ab:43:77:f2:aa:61:d7:ca:89:
83:a8:02:20:5a:5e:ea:c8:5d:27:c9:1d:77:8d:41:
c4:fe:9b:b4:1d:22:9b:b5:95:46:57:81:81:53:83:
08:f4:12:4a:79:dc:3e:75:2d:32:51:ba:c5:66:06:
e7:e3:e2:1e:32:df:43:72:c6:9c:99:bf:3a:c3:6f:
b2:24:71:4d:7a:4e:fb:77:39:d3:e2:35:c5:a0:5f:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:45:86:7A:68:68:DD:B8:AC:4E:D2:6E:9D:1B:6D:BB:E9:1A:BF:BE
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/_UWGemho3bisTtJunRttu-kav74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fe:1f:d7:14:c6:48:97:18:ee:6f:ad:c4:2c:86:28:ad:5b:
0c:ab:c2:e4:d9:0f:ad:ca:17:7b:6b:37:3d:12:18:f0:14:10:
29:b5:9c:d7:ee:77:4a:c1:d4:3d:b9:d8:71:fd:9a:af:90:bc:
41:f7:0a:09:b9:b7:2e:cc:c7:92:89:14:40:12:cf:14:aa:b3:
03:f2:37:df:24:b6:89:2f:ea:54:14:27:f1:23:3c:08:a6:d4:
e5:42:23:b4:14:43:20:20:6d:3e:94:ea:3b:0a:49:a2:dd:55:
eb:65:98:ab:4b:6f:d8:df:fe:d1:a6:76:3c:94:26:46:12:1f:
c3:95:81:30:1a:e7:c7:dc:c1:c8:ad:6d:9d:74:02:c0:de:e0:
1c:f7:77:5d:61:70:03:a8:a9:26:5d:c2:cb:63:ea:99:73:44:
49:17:d7:fa:8b:84:c3:63:8d:9f:c5:67:72:f3:9b:65:cc:5d:
73:73:a4:cd:12:de:23:5c:fa:19:f3:00:9b:e5:50:98:28:08:
77:f5:f0:f4:d3:9f:d0:38:11:bc:2b:67:c1:92:0d:11:d4:d0:
db:6e:51:3f:57:6f:0d:21:bf:7b:e0:04:89:e9:5a:4b:64:84:
30:74:ec:03:c9:5e:36:a9:be:40:f6:7c:12:29:ab:7d:46:91:
13:23:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:11 2024 by rpki-client on console-fra.rpki-client.org