Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/opEkoINsWAOYoqTqm-wFXV1GHjs.roa
File: opEkoINsWAOYoqTqm-wFXV1GHjs.roa (raw, json)
Hash identifier: fj9rn2MS3EjfRMCn1kI6xcjbNvVWlH3/aqtsf5MuSEk=
Subject key identifier: A2:91:24:A0:83:6C:58:03:98:A2:A4:EA:9B:EC:05:5D:5D:46:1E:3B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AC58B55
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/opEkoINsWAOYoqTqm-wFXV1GHjs.roa
Signing time: Sat 01 Jan 2022 03:02:32 +0000
ROA not before: Sat 01 Jan 2022 03:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203377
IP address blocks: 185.254.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180718421 (0xac58b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a29124a0836c580398a2a4ea9bec055d5d461e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:b7:a6:f6:79:95:b6:92:92:41:c1:f2:ba:
5e:76:e4:9b:ca:9c:62:11:0e:29:69:b7:59:7f:e3:
a9:1b:7f:54:f9:7f:09:b3:0a:ff:ff:8e:f4:a2:40:
b9:1b:05:5b:01:a7:00:f6:c9:ff:a3:e8:e1:5c:51:
5d:7d:43:4a:a4:31:0a:d7:7c:20:2a:0e:b3:ee:de:
cd:9f:2e:d9:96:38:59:9a:20:45:40:c8:3b:4d:c3:
be:82:bd:ca:b1:44:ee:9d:47:43:08:a0:b2:76:60:
78:d7:c1:9d:44:d3:8f:68:1b:38:78:04:e6:52:5e:
39:75:8d:78:25:b6:64:31:10:04:c5:b6:7a:43:d0:
76:e8:db:c7:ab:cd:65:b6:e8:5b:99:dd:93:ec:26:
6b:ca:0a:8d:d9:bf:fd:91:7f:20:3f:72:42:9e:df:
89:ad:90:1e:c5:de:5d:b9:f4:bf:c5:03:56:0e:e3:
98:e3:f6:97:d2:52:35:bb:f1:e0:97:91:50:f2:79:
22:15:d3:01:ad:4e:3e:8c:40:03:fa:ae:11:81:c3:
14:41:02:a9:ea:fc:b4:37:7c:b5:d0:6b:6e:76:19:
d9:ba:be:53:b2:95:44:21:20:75:e4:70:67:0a:c9:
0e:1c:92:80:b6:2f:f8:95:8b:d3:76:92:4e:1c:fc:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:24:A0:83:6C:58:03:98:A2:A4:EA:9B:EC:05:5D:5D:46:1E:3B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/opEkoINsWAOYoqTqm-wFXV1GHjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:da:a3:31:6b:f7:45:dd:da:0b:6a:0d:f5:32:a4:0b:9e:21:
fb:6c:62:b7:5f:34:39:e1:32:d9:0e:04:07:52:1d:bf:49:44:
27:c5:95:2b:51:d3:a5:9c:ab:f4:ee:86:43:e8:7a:a1:38:8c:
af:3f:fd:ee:39:b0:42:c3:18:a5:ba:79:92:ce:57:b0:1c:e9:
ff:e9:cd:1f:92:4d:2f:bb:82:82:09:d5:e0:a1:77:83:2f:ed:
37:0b:61:b8:da:bf:0f:b2:d1:18:fb:91:e2:23:f1:ad:aa:a3:
eb:68:97:13:d6:72:72:41:d7:30:85:aa:f6:8a:29:1f:f5:c3:
0e:f1:83:02:8c:b9:aa:09:c4:eb:63:21:0f:96:ae:55:c5:50:
cf:eb:e5:78:b7:09:16:9e:27:95:eb:87:21:2b:21:74:ef:95:
a4:e5:ca:d7:ae:8e:40:47:27:0b:ec:cc:1f:8a:dc:51:47:f8:
b6:a3:44:91:46:48:36:f6:45:2a:5d:a2:ea:3c:87:05:63:1d:
74:45:f3:f3:fa:25:13:ea:43:6d:26:2c:05:00:72:a9:1a:19:
e1:51:aa:b6:16:6a:ce:80:7d:df:1a:b5:b5:f1:00:cf:3a:67:
bb:ac:25:c5:bc:5d:dc:97:ae:11:3b:20:cc:6d:a8:54:37:4c:
65:4a:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org