Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/L618QoYFYFhUNvX_TG-nk1J5BVk.roa
File: L618QoYFYFhUNvX_TG-nk1J5BVk.roa (raw, json)
Hash identifier: EnJob2CM5oeUvIhU9sNIGIrvJRNYrW0wNVgyCljaNNM=
Subject key identifier: 2F:AD:7C:42:86:05:60:58:54:36:F5:FF:4C:6F:A7:93:52:79:05:59
Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial: 0183CC9D7C6EFC14EB51378D85D1D0F142B3
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/L618QoYFYFhUNvX_TG-nk1J5BVk.roa
Signing time: Wed 12 Oct 2022 14:33:36 +0000
ROA not before: Wed 12 Oct 2022 14:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200915
IP address blocks: 185.91.152.0/22 maxlen: 22
2a05:eb40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:9d:7c:6e:fc:14:eb:51:37:8d:85:d1:d0:f1:42:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
Validity
Not Before: Oct 12 14:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fad7c42860560585436f5ff4c6fa79352790559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:ca:ee:12:64:fa:ac:07:7e:c5:fe:f6:76:
d8:ba:17:9a:61:33:79:89:1e:98:61:79:51:ec:06:
7b:6b:87:3d:ef:96:3c:88:ad:99:d9:c9:6a:e3:49:
b9:6c:9f:46:2c:cd:f5:37:50:b8:4e:07:bd:25:25:
c4:32:1b:55:c3:ec:fe:12:ea:b7:f0:86:eb:f0:04:
7e:ad:f7:e1:fc:44:8b:77:17:ad:3c:79:d1:c4:43:
32:e1:fa:28:63:75:3f:90:18:61:9d:8e:16:3e:58:
e7:bc:84:54:a3:81:bb:20:01:7a:48:43:76:72:12:
5f:57:b3:1d:06:90:40:39:a4:55:52:b1:60:f8:60:
15:ba:66:9b:6e:4a:3f:da:c1:27:28:1e:c6:7f:88:
a4:84:92:0e:3a:fd:4e:b4:53:a0:05:0c:ae:36:a8:
61:05:1d:59:0e:1e:a0:ac:8b:dc:79:ed:a9:2d:77:
76:58:60:de:c3:d3:2e:38:18:7e:93:d0:2f:49:25:
45:08:61:62:e2:58:87:8e:e9:9a:9b:a3:80:a8:56:
8a:fe:50:18:94:c9:c1:92:9e:53:70:a5:54:37:00:
56:3e:52:51:8f:21:82:0f:de:bb:41:cf:e7:9a:b7:
bf:42:6c:f7:12:53:74:3b:23:95:2f:16:63:39:7a:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:7C:42:86:05:60:58:54:36:F5:FF:4C:6F:A7:93:52:79:05:59
X509v3 Authority Key Identifier:
keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/L618QoYFYFhUNvX_TG-nk1J5BVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.152.0/22
IPv6:
2a05:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
2e:64:de:cf:b3:1a:d2:05:f2:a1:0d:88:df:56:ee:ac:86:ee:
c4:f7:c2:da:0b:00:53:9d:64:e5:a8:d5:64:2a:b4:d0:d5:a7:
50:78:21:f6:4e:07:98:f6:96:f0:1f:70:d6:1c:53:1d:df:8f:
69:7e:7f:96:02:ff:49:66:70:9b:73:aa:d7:0d:c0:b0:41:bc:
29:af:ff:91:49:58:1c:71:f9:1c:80:39:9a:f8:af:54:3d:07:
19:1f:96:a7:9d:dc:f7:5f:63:53:68:df:7f:00:8f:d8:bb:32:
cd:42:e9:77:6f:e8:34:19:82:f2:50:1c:42:93:7e:56:cf:3b:
d8:ae:ae:c9:4f:f2:8d:22:fa:04:04:1f:68:8e:4d:e9:d7:59:
37:27:f3:76:a2:82:19:1f:d2:83:5c:ef:69:52:3b:31:86:ee:
64:26:92:96:d2:f0:ca:2c:e2:d6:09:76:fd:be:fc:67:89:b7:
5c:ed:63:a9:81:2e:a8:57:98:96:03:82:00:52:97:37:7b:86:
99:4b:41:1e:d4:92:d4:1f:6d:2e:f3:eb:4b:38:f3:15:09:50:
57:8b:54:ec:50:7d:6b:cf:23:7d:fc:c5:73:65:e7:01:e4:42:
e8:06:d1:08:a6:ef:43:ed:fe:24:66:02:34:86:e9:c8:0c:56:
7d:a3:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:59 2024 by rpki-client on console-ams.rpki-client.org