Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/Dl4UyMbXeDiEzzXPHDXVI7UXsrg.roa
File: Dl4UyMbXeDiEzzXPHDXVI7UXsrg.roa (raw, json)
Hash identifier: nxxmTu3JcR4DuoAJYFz2Em8EFaJgPEKPTgYikXTbtEk=
Subject key identifier: 0E:5E:14:C8:C6:D7:78:38:84:CF:35:CF:1C:35:D5:23:B5:17:B2:B8
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 0B12512F
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/Dl4UyMbXeDiEzzXPHDXVI7UXsrg.roa
Signing time: Fri 29 Apr 2022 23:11:38 +0000
ROA not before: Fri 29 Apr 2022 23:11:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205192
IP address blocks: 185.226.161.0/24 maxlen: 24
185.226.160.0/24 maxlen: 24
185.226.163.0/24 maxlen: 24
185.226.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185749807 (0xb12512f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Apr 29 23:11:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e5e14c8c6d7783884cf35cf1c35d523b517b2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:6a:a4:00:aa:6f:74:bf:01:b4:06:72:97:
d0:d0:98:ea:2c:07:20:59:f3:c5:0f:6b:68:91:67:
63:f4:c7:79:a3:5b:ef:71:32:23:c3:a4:d9:d6:19:
09:59:36:26:5d:06:96:fb:9e:e4:b7:f9:8b:46:52:
1e:cf:35:3d:55:a3:67:23:15:34:e0:50:db:f2:65:
5d:ed:27:10:96:ca:07:bb:7a:26:e7:c0:b7:3f:d3:
de:6c:61:eb:49:28:52:f6:85:27:6e:c8:07:94:a1:
6b:42:e3:fb:40:23:2c:f4:e7:1a:44:8b:03:12:b7:
fa:e9:76:b0:91:03:12:db:57:59:50:d9:78:85:75:
3f:e0:6d:06:9c:22:95:08:03:3d:ea:82:6d:2a:80:
5f:a7:03:79:e5:62:22:c1:75:06:79:84:79:07:bf:
51:5f:b2:9b:8b:13:f0:1e:a0:04:85:35:0b:90:b2:
34:a0:c3:18:91:4b:6f:17:84:72:96:9f:78:ee:66:
41:b3:d7:15:64:7e:13:90:cd:61:a5:10:ec:c9:58:
18:c7:1b:ba:80:88:22:a5:a0:90:ac:f3:6e:0a:79:
ad:f3:c3:f8:52:0a:77:5d:8f:2e:07:ff:0b:7d:e5:
02:96:e9:cb:bb:c9:34:f7:44:65:b0:68:00:22:57:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5E:14:C8:C6:D7:78:38:84:CF:35:CF:1C:35:D5:23:B5:17:B2:B8
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/Dl4UyMbXeDiEzzXPHDXVI7UXsrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:4d:72:c3:cc:a6:ee:b7:a2:b0:22:99:03:f9:4b:8b:fc:ae:
62:93:19:15:95:a2:21:28:c2:20:64:d6:01:e0:68:03:87:21:
39:48:dc:42:9f:2b:9e:aa:af:26:9e:04:e9:e4:4e:25:29:18:
bf:0a:e8:e3:f7:d0:c1:23:53:5f:a4:d7:d9:e3:9b:da:75:6e:
70:01:4c:23:72:96:18:f0:bb:5e:cc:a3:cd:24:25:9a:d8:25:
21:a7:7e:90:ce:46:54:d3:bc:88:05:c7:b1:98:34:80:96:8e:
4d:b6:51:9f:40:ab:e5:6d:09:3e:0c:57:20:a0:03:49:cb:49:
4f:9e:42:53:78:ad:b2:db:33:3a:59:ef:b0:93:7e:6d:8f:95:
ef:20:49:21:d5:7f:2c:03:36:2e:cc:8a:50:d4:b5:9c:10:48:
ad:d1:c9:d2:64:b2:9b:24:84:48:1a:d8:11:0e:f1:a1:9a:a3:
5e:da:16:17:44:a5:a2:9a:db:76:69:72:ed:03:b0:c4:bf:7a:
e6:f2:cc:2c:36:3b:55:49:fb:95:ff:c9:45:20:c6:61:4d:bd:
16:f9:d9:48:f4:54:48:9f:59:5d:77:d7:f3:df:da:0f:d8:d7:
11:fc:07:91:73:6e:b6:fc:d8:12:72:d9:0f:06:2c:84:e2:9d:
55:c3:ce:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org