Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/tHChmysjXZ2pj7R9jC84P3RKSU8.roa
File: tHChmysjXZ2pj7R9jC84P3RKSU8.roa (raw, json)
Hash identifier: fxse21FckbXvA993ouwO6bFROE3AffLxk1KOwxIvZHM=
Subject key identifier: B4:70:A1:9B:2B:23:5D:9D:A9:8F:B4:7D:8C:2F:38:3F:74:4A:49:4F
Certificate issuer: /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Certificate serial: 06C34EE8
Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/tHChmysjXZ2pj7R9jC84P3RKSU8.roa
Signing time: Sat 01 Jan 2022 14:02:44 +0000
ROA not before: Sat 01 Jan 2022 14:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34372
IP address blocks: 185.192.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113463016 (0x6c34ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Validity
Not Before: Jan 1 14:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b470a19b2b235d9da98fb47d8c2f383f744a494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:99:12:b5:52:eb:ac:5b:fe:b8:b0:11:42:
23:f7:8f:57:a8:71:16:f5:c5:c6:4c:41:b7:37:74:
df:34:bd:97:b5:67:6a:cc:5b:5c:6a:f8:f5:6f:19:
6e:b6:04:72:21:58:0d:f5:c2:e9:ee:c6:77:b8:49:
94:3d:76:f2:8e:ab:8f:00:5e:61:d5:74:07:19:56:
96:54:f8:89:87:cf:3a:97:e0:6f:b9:b8:e9:aa:e8:
8e:35:83:cb:6c:b2:4b:b3:c8:37:d5:b5:11:ad:92:
b3:84:c0:7e:7a:55:cf:9d:b9:b7:25:bf:a4:43:bd:
21:ef:46:27:8f:e0:97:49:35:70:f5:b2:c4:25:03:
05:93:1b:92:1d:62:3d:44:2c:93:a2:5e:9f:59:8e:
ff:f5:14:17:7d:1e:7b:46:e2:f7:ee:ad:10:b3:d4:
e6:34:4d:25:fb:41:7e:3f:b0:5c:0e:d7:9d:78:30:
3d:73:91:64:12:d4:9c:ae:fe:e7:00:a6:5b:45:19:
9a:60:45:66:37:94:7c:d1:c2:a6:bd:f5:bd:10:e2:
e7:22:3f:fe:7b:4b:57:c1:7d:dd:1f:39:7f:95:c8:
b6:b7:67:e3:6e:b9:12:1a:56:40:83:48:2c:47:b3:
40:9c:1c:72:31:2b:01:78:7b:ad:46:3e:45:25:ea:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:A1:9B:2B:23:5D:9D:A9:8F:B4:7D:8C:2F:38:3F:74:4A:49:4F
X509v3 Authority Key Identifier:
keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/tHChmysjXZ2pj7R9jC84P3RKSU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.76.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8e:45:bd:4e:a7:0e:00:18:2a:e5:92:a3:60:b8:46:64:a5:
ce:25:53:f3:ba:d5:c0:61:40:a4:36:2d:79:00:f0:8c:a5:03:
69:73:bf:de:0b:ba:cf:d0:aa:ae:33:9b:d0:49:45:08:a1:95:
29:0e:3e:80:e7:14:d1:ec:74:44:07:50:07:e0:a3:01:f0:e4:
a2:df:01:be:fe:b1:8a:ca:73:a9:5e:3a:4f:f2:82:8c:0a:07:
05:67:09:4c:5d:74:e0:3e:ce:6a:40:a8:2b:7a:9c:ba:6a:63:
72:1a:ba:37:93:0b:f8:b0:54:2a:4a:02:10:78:eb:e2:fd:71:
46:56:63:61:fa:53:14:a4:4c:7a:18:11:42:60:c8:db:d8:87:
ae:0f:98:ab:48:69:7d:57:c5:0b:f7:2d:a4:8a:a1:cc:ce:6e:
44:08:64:d2:d8:7e:f4:49:e9:a2:c5:2f:09:94:db:8b:a8:a7:
b9:11:82:c3:53:80:c4:f6:59:1b:90:c9:2f:5e:65:c1:1d:5d:
e4:8f:30:b9:7b:44:65:30:fc:bb:06:ff:d7:d5:24:b2:ad:6b:
b3:a3:c9:19:6d:e6:5c:0a:bf:42:7b:4c:69:1d:13:0b:ff:63:
83:32:08:6f:43:a8:4c:ce:5c:bf:90:52:71:69:a2:ec:d0:85:
49:89:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:29 2024 by rpki-client on console-ams.rpki-client.org