Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/b5NNgDcnysw8wrYX9jvJ3sZcFzo.roa
File: b5NNgDcnysw8wrYX9jvJ3sZcFzo.roa (raw, json)
Hash identifier: gZuBiQ1FHC81tAtNce5rzl395g1lKRFoT4WLNZmE9Yo=
Subject key identifier: 6F:93:4D:80:37:27:CA:CC:3C:C2:B6:17:F6:3B:C9:DE:C6:5C:17:3A
Certificate issuer: /CN=286f9a9bbb868ce6d43a154e2a7e298b6b2365b2
Certificate serial: 0101411E
Authority key identifier: 28:6F:9A:9B:BB:86:8C:E6:D4:3A:15:4E:2A:7E:29:8B:6B:23:65:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KG-am7uGjObUOhVOKn4pi2sjZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/b5NNgDcnysw8wrYX9jvJ3sZcFzo.roa
Signing time: Sat 01 Jan 2022 03:01:44 +0000
ROA not before: Sat 01 Jan 2022 03:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.252.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16859422 (0x101411e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286f9a9bbb868ce6d43a154e2a7e298b6b2365b2
Validity
Not Before: Jan 1 03:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f934d803727cacc3cc2b617f63bc9dec65c173a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:d8:0a:d4:df:f7:82:f7:12:e3:f1:f5:a4:
8a:f4:9f:1b:ad:12:8f:19:a2:b2:5b:76:59:c9:83:
63:95:a0:d6:bc:7b:56:2b:76:99:ec:ec:69:c1:6c:
78:b4:2f:cf:5e:58:78:bb:de:52:d9:56:d9:7d:ef:
ed:7e:c1:3f:fa:fd:c7:11:d4:ea:0e:f1:6f:f9:f6:
1c:ab:09:3b:a2:49:30:03:2b:6f:49:0d:74:5e:bd:
05:b2:a6:38:42:61:67:87:0a:67:cc:e4:5f:21:1a:
17:49:c8:eb:90:3d:3b:1a:89:87:3f:c2:89:d1:0b:
4d:32:e8:f0:ec:c0:d9:86:ca:7c:6b:47:bb:26:34:
6d:51:aa:fc:fa:49:72:08:08:bd:77:08:25:50:3c:
9a:28:24:9f:99:7e:77:6d:e7:7c:c4:9e:eb:b0:0a:
d4:9f:a6:15:35:04:1a:25:83:30:53:da:5a:0a:54:
3c:42:b3:f7:95:c0:9a:b4:3a:b9:53:da:16:9f:89:
40:f9:45:3c:d3:2f:06:62:22:7c:36:4f:e4:e9:c8:
0e:57:a6:f6:ce:78:3d:94:47:22:62:cc:65:3b:36:
87:bd:b8:a8:dd:d1:92:46:b4:c0:ce:0b:e4:ab:6f:
00:1e:b9:17:ff:93:86:d6:dd:c7:5f:3d:ba:a1:db:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:93:4D:80:37:27:CA:CC:3C:C2:B6:17:F6:3B:C9:DE:C6:5C:17:3A
X509v3 Authority Key Identifier:
keyid:28:6F:9A:9B:BB:86:8C:E6:D4:3A:15:4E:2A:7E:29:8B:6B:23:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KG-am7uGjObUOhVOKn4pi2sjZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/b5NNgDcnysw8wrYX9jvJ3sZcFzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/KG-am7uGjObUOhVOKn4pi2sjZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.211.0/24
Signature Algorithm: sha256WithRSAEncryption
32:91:02:f6:50:2c:7c:32:89:d9:c9:e8:ce:8e:eb:0a:be:71:
2f:fb:54:71:2a:db:ca:6e:c7:b8:8d:00:95:e1:96:d7:d8:5d:
8c:0d:cd:e8:b0:a7:db:de:88:53:2e:df:2c:23:b9:b3:03:96:
46:cf:f0:74:d9:f2:ce:2f:5b:32:bb:ee:13:2b:6f:d0:72:70:
2a:1c:c6:96:5b:18:ca:8b:dc:2f:f0:81:6e:24:d3:ad:ba:61:
ef:26:8f:66:36:db:fd:87:b7:4e:f4:41:5b:5b:3c:c5:52:c8:
71:84:f7:0a:2e:43:e5:72:3c:9c:00:ff:dd:b1:4c:e3:68:7f:
36:9f:4e:c2:8b:29:a7:5f:1b:bf:9c:75:50:2e:a9:58:1c:db:
9b:24:14:79:a1:17:09:70:59:d8:90:63:bf:f3:4e:8d:62:7f:
70:19:88:cc:8b:0d:a0:6b:7c:df:2d:91:66:2d:06:e8:e3:69:
37:eb:d2:cd:a4:f5:8e:03:69:87:4a:b0:ac:e4:9d:a3:44:73:
8e:21:d9:31:ac:c1:1c:26:d4:07:f9:46:94:98:31:65:a3:c9:
fd:1b:3e:3d:0f:ff:75:e5:f3:9a:21:dc:c7:08:e1:89:43:f4:
eb:2e:3d:90:50:88:53:d1:8e:e6:75:44:a3:8e:03:63:ca:e8:
2f:c8:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:32 2023 by rpki-client on console-ams.rpki-client.org