Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/v5e6zdSXRp3QBW8vHWe7F6NfJX8.roa
File: v5e6zdSXRp3QBW8vHWe7F6NfJX8.roa (raw, json)
Hash identifier: edP5q/c4W2hmOT4IAHfntxzp5s2XfJ2fLesHeorAHG4=
Subject key identifier: BF:97:BA:CD:D4:97:46:9D:D0:05:6F:2F:1D:67:BB:17:A3:5F:25:7F
Certificate issuer: /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial: 01826D51F47B21158988F8AEA2C48DE91F42
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/v5e6zdSXRp3QBW8vHWe7F6NfJX8.roa
Signing time: Fri 05 Aug 2022 09:24:23 +0000
ROA not before: Fri 05 Aug 2022 09:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211090
IP address blocks: 185.253.78.0/24 maxlen: 24
91.239.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:51:f4:7b:21:15:89:88:f8:ae:a2:c4:8d:e9:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Validity
Not Before: Aug 5 09:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf97bacdd497469dd0056f2f1d67bb17a35f257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:e7:45:68:cd:71:a6:ba:c4:6f:af:9f:58:
91:9c:c8:7c:06:7b:2e:59:52:cc:69:d9:63:c3:ad:
23:17:9d:88:7f:36:e5:d8:57:51:e6:b9:26:e1:da:
96:53:16:a2:3a:da:39:89:a3:46:e2:63:a5:00:f0:
a8:d6:2b:18:30:4d:bb:b0:d8:b5:db:5c:71:53:a0:
3f:a8:f9:ca:f9:b8:93:ef:d3:6b:72:98:0c:da:9a:
66:be:4b:72:1b:66:35:0e:50:b4:c2:59:37:58:df:
98:0a:5b:a0:0e:7c:17:62:2e:47:f1:13:83:ea:66:
49:89:1f:80:5b:c3:a1:cd:1d:c3:a1:d6:b4:73:a8:
b3:7b:b9:90:5b:17:59:a6:e4:2c:d7:00:24:9a:04:
e3:d8:f2:19:4a:27:d9:ae:0d:a0:1a:3c:b0:b0:1e:
41:9e:9e:bd:21:0f:69:6c:4a:e9:de:7e:4e:91:19:
a7:e4:1e:a0:b2:70:4d:79:ad:f0:ac:c8:f4:52:24:
36:f2:12:25:b3:01:3e:bf:04:cb:c6:47:5a:ee:c1:
12:11:d3:c6:96:37:de:3a:e2:ba:32:a0:6c:fe:e5:
84:f4:a2:5c:fc:51:2e:2a:71:bc:fc:6a:19:02:4d:
44:9b:b3:ad:db:c8:ca:3a:24:6d:08:83:4e:f7:13:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:BA:CD:D4:97:46:9D:D0:05:6F:2F:1D:67:BB:17:A3:5F:25:7F
X509v3 Authority Key Identifier:
keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/v5e6zdSXRp3QBW8vHWe7F6NfJX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.119.0/24
185.253.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1d:21:af:c0:33:90:4e:32:51:35:e8:b7:e8:37:31:43:51:
f6:95:87:97:5b:c9:a8:e3:21:7f:35:cb:05:c0:be:ce:d2:51:
e6:4c:fb:13:9c:de:86:49:16:5c:81:3c:47:1f:54:a5:b3:6e:
70:86:8e:f9:5f:ec:dc:45:13:1c:3c:d9:0a:76:a3:43:a2:1b:
88:8f:f4:f7:36:bf:42:87:c5:c9:85:57:39:4f:ce:26:d6:b0:
90:b0:38:01:5a:a8:c3:a8:f1:88:8a:43:93:12:0c:5b:6b:dd:
f9:c5:63:10:d2:a9:80:57:fe:38:0b:77:fc:19:d4:c5:29:e3:
07:b6:c2:75:a1:fa:4e:47:65:96:14:18:27:3f:bb:08:65:78:
45:65:b7:0a:d5:b1:60:db:65:bc:3d:fd:a6:d9:06:9d:6c:97:
e3:bf:96:b6:f6:0e:97:fc:76:fe:a2:14:b9:31:93:1c:fd:e7:
8f:91:1a:05:ed:34:9a:26:4a:a2:bf:9a:fd:67:99:87:37:f2:
33:d6:2b:d7:3a:cd:67:55:03:15:96:c4:f7:73:b5:b2:97:8c:
53:49:e7:ba:5a:e9:45:3f:40:1f:89:5d:86:b4:c0:30:7b:9d:
bf:f6:fe:53:3b:34:07:11:59:54:cb:0b:b6:10:05:4d:da:a6:
db:08:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:51 2024 by rpki-client on console-ams.rpki-client.org