Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/rO4sf9WHrNO9vyAmuj1S6IY5H2w.roa
File: rO4sf9WHrNO9vyAmuj1S6IY5H2w.roa (raw, json)
Hash identifier: 0jTdTNSQHXdh5N8BAU8VuKEpCBOS6ELSvZLaNYMxOoo=
Subject key identifier: AC:EE:2C:7F:D5:87:AC:D3:BD:BF:20:26:BA:3D:52:E8:86:39:1F:6C
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 0EB3C9C1
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/rO4sf9WHrNO9vyAmuj1S6IY5H2w.roa
Signing time: Sat 01 Jan 2022 06:53:37 +0000
ROA not before: Sat 01 Jan 2022 06:53:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198785
IP address blocks: 185.155.226.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246663617 (0xeb3c9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jan 1 06:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acee2c7fd587acd3bdbf2026ba3d52e886391f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:3a:ef:1b:0c:b2:3a:1c:44:f1:a5:61:5b:
61:77:1c:74:a5:95:eb:73:b9:22:be:42:ef:2d:25:
fb:4a:7e:cd:d1:d9:78:7c:91:9b:e1:06:55:87:95:
be:dd:40:72:77:62:92:99:46:d7:5e:f3:e6:ed:c3:
6e:d1:5e:62:a8:54:da:28:26:14:80:b5:a2:db:73:
8a:e2:f4:88:90:f1:56:b0:35:00:db:71:d5:44:7a:
b9:29:0f:79:cd:4e:a7:0f:a3:13:b0:ad:db:00:f3:
ca:7a:61:93:c3:a0:2e:05:e8:fe:83:a2:fd:7e:93:
46:3a:a6:f3:7a:95:bc:74:23:3d:91:d6:d7:a5:28:
0b:40:64:46:14:df:aa:26:7b:ed:35:1e:e5:f5:f2:
24:df:c0:1f:fb:85:a8:49:ce:10:79:8e:6b:41:c7:
a0:af:0b:4c:2e:d2:63:76:5b:6f:bd:e3:de:b0:f2:
c8:71:0f:46:ff:d2:51:94:b0:e7:d1:23:40:18:c3:
b4:69:20:93:64:44:0d:fb:12:d4:55:2c:f4:46:e8:
fb:a6:fb:18:0b:f5:f2:46:3e:fd:78:56:9b:1c:79:
df:85:e7:b6:8d:f9:d2:e4:17:ea:c2:27:2b:e3:58:
10:a7:c5:fd:20:14:3b:9f:46:49:ff:49:65:42:77:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EE:2C:7F:D5:87:AC:D3:BD:BF:20:26:BA:3D:52:E8:86:39:1F:6C
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/rO4sf9WHrNO9vyAmuj1S6IY5H2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.226.0/23
Signature Algorithm: sha256WithRSAEncryption
04:98:3a:72:7d:d3:4f:70:a5:59:5b:61:16:e8:05:ea:17:02:
31:28:78:c5:1a:17:5d:a1:26:34:27:65:54:e9:af:04:a9:0b:
66:7f:7c:23:79:9a:c2:2f:c6:81:a1:18:17:95:44:b3:22:62:
bb:59:f8:89:4f:9f:13:ad:4b:c2:54:a1:74:fc:12:b9:cb:d4:
a5:03:b9:2f:8d:83:30:22:85:f0:92:2b:af:35:d9:b3:ab:6f:
d9:2c:f6:f2:98:10:6b:b3:1d:81:61:97:bb:c7:b7:35:a4:13:
f9:fc:35:5b:26:70:8e:ef:06:e4:e9:cf:e7:54:f5:23:c0:28:
cc:cd:a9:54:10:02:b1:78:8e:d8:f1:17:04:f5:7e:39:64:57:
b3:fa:f0:61:91:02:1d:91:6d:c0:71:a8:38:4d:06:90:36:7c:
24:a9:fc:d7:49:2a:05:87:71:75:2f:b2:a7:1e:46:68:31:73:
e3:1e:47:d8:21:d4:f7:31:78:c1:f8:33:bc:a2:82:ec:83:16:
a1:b3:4b:84:3c:60:f1:57:bb:fd:92:1c:23:01:8a:ed:f7:86:
e7:5d:e8:93:8f:3b:76:b0:16:b2:4c:77:92:54:4f:22:0c:dd:
c1:fd:0f:e7:ca:d2:3a:f1:11:25:23:7d:80:2c:66:4d:24:40:
66:d4:33:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:19 2024 by rpki-client on console-fra.rpki-client.org