Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/4qeQlShKvPYWmSXslfXtrwyysFc.roa
File: 4qeQlShKvPYWmSXslfXtrwyysFc.roa (raw, json)
Hash identifier: fzR3vsTCnwYaWmoUIYB3ZvUdflv6nd7p5adq20T9QgI=
Subject key identifier: E2:A7:90:95:28:4A:BC:F6:16:99:25:EC:95:F5:ED:AF:0C:B2:B0:57
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 04F196
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/4qeQlShKvPYWmSXslfXtrwyysFc.roa
Signing time: Mon 28 Feb 2022 17:26:32 +0000
ROA not before: Mon 28 Feb 2022 17:26:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18345
IP address blocks: 185.164.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323990 (0x4f196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Feb 28 17:26:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2a79095284abcf6169925ec95f5edaf0cb2b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:b1:12:fc:b4:cd:80:ae:d9:0f:db:36:84:
44:e2:b6:2d:8e:1f:70:88:e3:2c:a6:fd:ad:f0:ac:
7e:84:39:be:6b:0b:e5:a3:24:6a:0e:93:03:57:1e:
d3:b7:91:da:73:a2:9b:64:02:cf:4a:60:03:78:7f:
e0:af:30:5e:5d:2c:36:4f:63:ba:3d:8c:2b:d6:3a:
d3:9a:80:9d:0b:79:45:92:cb:24:9d:73:ce:e4:c3:
6b:49:48:ce:f0:5f:35:b7:a5:ac:3d:18:d1:8b:67:
55:17:eb:5d:73:98:ed:44:c7:e4:dd:48:d0:84:30:
8a:c0:1a:f1:60:9b:d0:b3:d6:37:ca:25:f9:18:de:
54:76:c9:4c:90:62:74:4f:68:bb:2c:6f:b6:12:1e:
cc:23:e2:a7:3b:8f:30:b5:e1:61:5c:c5:3c:c7:21:
18:06:f8:00:ca:72:94:05:d4:49:93:ba:67:80:b9:
b7:ab:0a:0e:c9:41:8b:d4:e8:88:01:dc:e8:35:cb:
05:e2:de:ac:28:0a:4a:ec:26:ff:7b:89:80:ed:0b:
b5:43:58:ed:b0:83:c0:ca:8f:f8:23:06:01:35:90:
2a:57:0f:9b:e0:bf:7f:f2:04:06:93:6f:1a:3f:a3:
65:ec:74:b2:d0:ec:1c:eb:38:c3:a4:5a:ff:d7:71:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:90:95:28:4A:BC:F6:16:99:25:EC:95:F5:ED:AF:0C:B2:B0:57
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/4qeQlShKvPYWmSXslfXtrwyysFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:79:3a:0f:13:f5:a1:eb:1e:2e:5c:60:18:d1:33:37:e9:e6:
53:c5:17:42:2d:39:e1:ff:b1:18:bb:4b:18:d2:3c:fd:74:7d:
e5:f4:1a:3d:ee:5c:8f:f6:ab:e8:a2:c5:75:44:9b:bc:38:f4:
42:22:71:57:cb:61:3e:f2:8a:e5:8b:74:7b:ef:0c:b8:d8:a2:
3b:30:59:a1:46:1e:67:65:90:db:b4:d8:93:d6:59:e1:f9:79:
73:c0:5a:ce:e6:d5:0d:3e:c2:bb:14:61:25:2a:d7:b7:40:ec:
2b:ae:c7:26:21:70:57:d4:06:fc:41:97:f1:85:cb:73:16:84:
e0:a8:d8:b8:df:5d:4a:0f:40:84:d2:c2:0f:69:6e:04:43:d5:
f6:7a:7c:8f:88:32:f0:60:3c:4c:19:2f:76:46:37:93:29:f7:
80:9b:5f:5e:f9:aa:6e:98:06:37:60:fa:61:94:62:8a:9c:cd:
96:c2:a8:e0:97:ea:67:0d:62:f3:96:d6:3f:73:0a:48:e5:43:
92:67:b9:48:0c:e7:9e:22:b8:47:31:25:72:c5:7c:85:e3:90:
b3:3b:24:8b:39:1c:a0:34:12:81:0c:71:c5:e7:e8:ac:5d:3b:
f4:72:1b:1b:3e:ff:6f:ea:7b:5d:03:64:52:76:f9:38:7b:15:
5e:c5:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:29 2024 by rpki-client on console-fra.rpki-client.org