Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/cEd7-a0DBd58tWw5a3YRLzlxaNE.roa
File: cEd7-a0DBd58tWw5a3YRLzlxaNE.roa (raw, json)
Hash identifier: C5/PR+ixBfxiYXsyTam7YPArkEnlOJnAbcnbBu5W6N8=
Subject key identifier: 70:47:7B:F9:AD:03:05:DE:7C:B5:6C:39:6B:76:11:2F:39:71:68:D1
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 0182ABEF3DEC69A05D5DF5D4BBAB520B0F3F
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/cEd7-a0DBd58tWw5a3YRLzlxaNE.roa
Signing time: Wed 17 Aug 2022 13:12:39 +0000
ROA not before: Wed 17 Aug 2022 13:12:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48727
IP address blocks: 185.124.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:ef:3d:ec:69:a0:5d:5d:f5:d4:bb:ab:52:0b:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Aug 17 13:12:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70477bf9ad0305de7cb56c396b76112f397168d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3d:84:c8:96:8a:cb:9a:41:5c:91:59:31:77:
61:5d:82:6c:e8:80:56:cb:ac:3f:06:9e:ae:f3:ad:
25:36:28:3c:53:c0:c7:f9:16:46:81:19:84:1a:97:
b2:0d:3f:24:70:91:98:7c:96:a2:a2:f4:50:31:79:
67:ca:16:41:48:77:bc:45:44:ea:58:5f:75:55:6a:
bf:4c:35:ae:2b:9b:94:e2:72:45:1d:a4:9b:a4:db:
58:43:04:99:a5:2b:07:de:9a:6c:e4:51:bb:5f:88:
2b:e7:13:6c:d1:ce:28:6d:86:2a:9a:f8:4d:29:1e:
42:07:46:48:36:78:d5:ce:13:b1:6f:1d:1f:47:d6:
01:ab:3e:d9:83:24:5f:71:6b:c9:82:97:f7:aa:20:
05:81:51:3e:45:ef:a8:d9:e5:b8:14:71:4d:26:f3:
8b:69:26:84:31:9f:40:99:ad:43:00:94:c4:52:86:
50:6c:d7:93:4a:31:97:62:7a:26:96:fb:2d:bc:1e:
1d:0c:08:71:94:c2:3c:cd:be:a3:8f:5b:36:6e:2e:
66:f6:af:f9:ab:9f:b9:c5:ec:16:d9:04:db:40:53:
54:45:94:01:d5:42:46:9c:c6:b9:8c:65:5d:22:66:
c1:59:0c:f3:ed:ec:ff:5a:97:ba:da:8d:99:d0:ef:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:7B:F9:AD:03:05:DE:7C:B5:6C:39:6B:76:11:2F:39:71:68:D1
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/cEd7-a0DBd58tWw5a3YRLzlxaNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:14:ff:63:3b:5d:16:96:a9:08:e8:0f:f6:44:9b:24:bf:fb:
13:df:b7:50:02:a1:08:73:f3:74:61:54:ef:1b:df:5b:da:fc:
57:77:be:05:17:4b:22:38:f1:a1:4b:4d:c4:2a:5c:38:4a:9c:
a8:a4:17:09:23:5d:c1:76:ee:70:0a:34:6c:17:a6:cb:02:d9:
1f:2b:e8:74:b0:4c:14:62:a1:73:8e:b1:13:48:59:2f:13:2d:
cc:92:33:80:d7:da:e7:e0:dd:a4:d9:59:fd:57:47:42:16:6a:
e4:0e:83:a6:8a:de:b7:dd:64:48:db:d4:06:24:5a:04:a8:ad:
cf:82:7f:db:c7:f6:e0:86:5e:fe:cc:15:0c:9b:01:cf:5c:5f:
bd:94:6c:28:51:6b:0c:f0:2a:2e:5d:b4:74:6b:60:57:ef:f7:
01:15:17:c3:fc:75:ab:65:ee:f5:41:95:b1:77:76:af:da:5f:
e3:22:d5:31:a5:b0:4b:d4:65:c3:96:79:8c:b9:87:dd:ca:d7:
b8:9e:c0:7f:ec:27:33:ba:3d:97:1c:61:85:1c:c4:92:7a:4f:
32:17:a1:d9:16:38:41:e4:c0:41:cf:3a:a9:84:53:f0:7a:57:
40:dd:f9:f9:60:30:dd:fc:1d:2a:fb:20:af:35:8f:50:70:ba:
9a:cb:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:50 2024 by rpki-client on console-fra.rpki-client.org