Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/rbc5Z9MXsZIfv3Hk93rRaJq1CO0.roa
File: rbc5Z9MXsZIfv3Hk93rRaJq1CO0.roa (raw, json)
Hash identifier: gn7wbPhZEpR2USns/4Al8FY66ymp4hQoDJY5s5BNwyM=
Subject key identifier: AD:B7:39:67:D3:17:B1:92:1F:BF:71:E4:F7:7A:D1:68:9A:B5:08:ED
Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial: 0782169E
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/rbc5Z9MXsZIfv3Hk93rRaJq1CO0.roa
Signing time: Sat 01 Jan 2022 13:06:00 +0000
ROA not before: Sat 01 Jan 2022 13:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206556
IP address blocks: 185.182.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125965982 (0x782169e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff0ab25662757afb831675319296f63d989b69
Validity
Not Before: Jan 1 13:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adb73967d317b1921fbf71e4f77ad1689ab508ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:2a:0f:eb:81:d5:35:73:59:6d:5e:16:79:
0f:e8:da:47:61:f0:18:bb:32:f1:4a:bb:44:34:43:
cc:7c:6b:59:03:6e:e5:04:ea:85:2a:7d:1a:35:0d:
8b:96:3f:af:ab:02:d4:8c:5f:c3:85:ee:63:e0:31:
68:7f:f3:81:f5:08:90:b4:a3:20:21:8f:05:26:43:
3e:e5:af:5f:d6:6f:cd:85:12:52:d1:25:68:e8:66:
bd:9f:a1:1c:78:ff:09:a0:2b:ec:58:fa:89:74:eb:
27:e2:46:01:cc:a1:6f:d2:af:9c:2a:49:f5:73:84:
bb:8d:96:88:b6:4f:ae:82:38:f1:d7:90:56:9f:ec:
b1:3b:f7:79:c6:30:d0:a5:1e:37:c8:79:0a:20:c1:
40:87:5f:9c:a4:4c:ee:fd:10:6c:92:d4:e4:58:0e:
f5:c7:4d:3e:30:9a:3e:f1:1e:b6:c6:c8:de:18:84:
01:90:75:24:5c:e6:a2:82:1e:de:fe:1b:2c:ed:62:
8e:b3:5b:1e:e4:92:a9:60:60:d5:65:14:49:03:2f:
16:8d:71:07:3a:26:3d:80:2f:b2:7f:a3:5e:07:49:
0f:7c:05:fc:96:79:33:42:e0:b9:eb:11:c7:81:a5:
83:f0:9e:a6:4f:96:c1:1b:1c:41:cf:22:ce:7d:d1:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B7:39:67:D3:17:B1:92:1F:BF:71:E4:F7:7A:D1:68:9A:B5:08:ED
X509v3 Authority Key Identifier:
keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/rbc5Z9MXsZIfv3Hk93rRaJq1CO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.239.0/24
Signature Algorithm: sha256WithRSAEncryption
37:08:82:90:2a:4a:fc:7e:0a:73:6a:af:49:0b:24:e1:ce:b1:
37:ed:fe:d1:56:91:d3:50:e3:d4:03:72:79:68:61:8e:58:82:
15:b9:d9:45:4c:b3:30:14:7f:e1:8d:84:66:fe:f0:ee:7d:ef:
dd:e5:9a:36:33:05:6b:27:02:2b:5f:77:81:1f:3b:47:5c:29:
41:9a:ec:f6:c6:20:64:24:73:35:9d:e7:68:76:89:a6:cf:91:
e5:c6:5e:c5:5d:36:fd:fd:58:22:ad:89:87:60:9b:85:56:34:
d0:4f:64:5b:20:29:cc:47:59:c6:ea:ec:6a:ba:d4:cb:a3:c9:
db:5c:35:50:77:1a:80:86:a7:92:d9:c3:9e:14:d0:4e:d6:7f:
3a:6b:61:a9:0c:1b:e2:1f:66:45:cf:e7:00:c9:a2:ee:0e:d1:
ba:57:65:a7:6c:e7:7c:b4:e2:e2:47:58:2c:a7:6d:f9:a7:ef:
a1:81:ad:15:fd:8b:3b:9c:43:3a:33:b1:85:0f:63:d7:ba:63:
06:6a:84:a5:5a:16:2e:75:04:dd:4b:7b:39:1d:ba:39:fa:e3:
40:3b:2c:c4:4c:52:64:38:51:a1:05:b3:19:38:97:69:06:14:
21:6c:69:cc:d0:9b:9a:17:ad:30:46:ef:cf:7a:40:54:63:99:
88:6e:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org