Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/vmu8kFxSTAHzCJjkRM7vgVR6tDo.roa
File: vmu8kFxSTAHzCJjkRM7vgVR6tDo.roa (raw, json)
Hash identifier: 7a4pLgk5FQ7xgVS+ctSHNWDjxTmehrnkU6j4lDYoYrE=
Subject key identifier: BE:6B:BC:90:5C:52:4C:01:F3:08:98:E4:44:CE:EF:81:54:7A:B4:3A
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 055B61A1
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/vmu8kFxSTAHzCJjkRM7vgVR6tDo.roa
Signing time: Sat 01 Jan 2022 01:55:40 +0000
ROA not before: Sat 01 Jan 2022 01:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21232
IP address blocks: 185.193.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89874849 (0x55b61a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jan 1 01:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be6bbc905c524c01f30898e444ceef81547ab43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:f3:f4:91:07:58:f3:9e:6b:fc:4b:29:48:
ea:74:93:fa:b5:d3:e3:99:58:20:1a:93:a2:ec:f4:
82:6e:2f:99:31:42:87:c1:25:4b:89:54:b2:81:7d:
11:a9:25:f2:c2:48:e5:33:32:5a:c4:3a:51:a1:4a:
a2:a0:32:56:81:51:2d:73:ec:bf:88:3c:4d:3c:d3:
61:6e:80:42:cf:20:5b:fa:f4:12:47:ea:31:33:0b:
e2:73:1f:75:f9:d0:09:72:8a:af:a1:9d:ec:41:4f:
b5:ec:2f:46:48:47:6b:fe:ae:ba:f8:7a:ab:2e:2b:
b5:90:73:78:e7:1e:98:da:b9:f6:c7:d1:44:e7:58:
9f:5c:dc:d7:11:13:58:80:75:72:11:fb:8f:fb:d5:
26:ef:84:37:91:1c:f8:22:09:aa:3b:0d:4d:cc:6f:
95:f2:36:d4:86:1d:9a:ff:63:4b:ab:0f:57:6a:ca:
17:cc:03:2e:94:3a:6a:58:7c:86:58:57:7b:df:35:
fb:56:92:2f:20:a9:61:fe:74:79:90:36:a3:69:cb:
4c:53:4d:aa:fa:f6:16:22:ec:5c:ea:4b:7d:5c:a1:
31:65:fc:db:d6:66:7b:39:c7:db:a7:f1:62:77:c7:
cd:ab:f7:64:26:97:6f:fe:2a:2d:ed:ce:26:40:2a:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:BC:90:5C:52:4C:01:F3:08:98:E4:44:CE:EF:81:54:7A:B4:3A
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/vmu8kFxSTAHzCJjkRM7vgVR6tDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:dc:4a:32:98:94:42:05:ae:70:98:0a:01:1b:45:1b:2e:25:
47:e6:38:09:58:69:9c:e1:d1:49:e7:68:5e:07:ec:46:fe:b7:
39:f3:4b:8d:5d:48:46:67:92:23:b3:1c:de:58:42:ca:5c:db:
ed:e7:03:30:95:83:df:4a:7a:f2:d0:86:26:13:47:84:62:b4:
02:53:06:3c:d6:4c:1e:93:5f:af:4f:67:e6:13:79:56:fb:a5:
d0:91:41:80:d8:a5:b6:bb:9f:61:02:89:75:f8:91:92:25:2f:
46:58:c3:e5:a0:b2:c3:e0:28:b9:bb:a3:31:2a:87:ee:a3:f7:
bc:4b:de:a0:7a:f3:c6:d9:01:2f:96:9f:81:f4:03:a7:cf:75:
60:39:90:f8:d9:8e:e8:48:3d:1f:14:e3:1f:bc:77:3c:59:75:
77:55:cd:d2:ac:12:f3:d8:65:25:4e:a8:98:51:71:81:da:fc:
40:47:86:2f:69:35:18:34:89:37:bd:73:e1:21:6b:44:be:cd:
d1:2a:43:52:69:01:74:fb:5b:0e:62:ae:50:0a:20:21:4a:b5:
1e:90:7b:78:24:b9:2f:04:2c:2d:5a:9a:eb:d1:d3:41:24:7d:
3e:93:f6:70:08:69:68:d9:70:a1:6d:ab:3f:d4:cb:29:58:fb:
ce:dd:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:16 2024 by rpki-client on console-fra.rpki-client.org