Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/59yYwOmVobDz-kfgPPEq9G3ENVU.roa
File: 59yYwOmVobDz-kfgPPEq9G3ENVU.roa (raw, json)
Hash identifier: 7FjGm2Rnyz45R/pD6jkEm6CXUouB23u4I5WkkmSLSbM=
Subject key identifier: E7:DC:98:C0:E9:95:A1:B0:F3:FA:47:E0:3C:F1:2A:F4:6D:C4:35:55
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 06A5DE29
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/59yYwOmVobDz-kfgPPEq9G3ENVU.roa
Signing time: Fri 20 May 2022 20:42:30 +0000
ROA not before: Fri 20 May 2022 20:42:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62976
IP address blocks: 185.215.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111533609 (0x6a5de29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: May 20 20:42:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7dc98c0e995a1b0f3fa47e03cf12af46dc43555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:22:01:4a:23:ab:7d:d4:c4:62:59:ed:b0:
9d:97:3a:c1:6a:7a:08:e9:f6:6c:bd:84:ca:78:b1:
8e:95:30:7b:72:e7:1e:bd:57:99:4e:e9:83:ed:1c:
00:d3:dc:fe:d6:1e:9b:e8:28:c5:f4:53:41:0a:c0:
59:83:f0:cd:79:e1:16:f1:7e:d5:2c:e4:ab:ed:31:
29:15:da:ea:68:bf:49:b5:b0:cd:b9:6e:9c:77:39:
40:3c:6f:a3:d7:6f:a7:fb:95:da:a5:4b:a8:70:76:
f5:71:d5:14:e5:8c:dd:82:57:4e:49:e6:f4:11:a9:
a3:93:db:b9:93:2b:6d:be:70:ca:27:d0:e7:69:9e:
55:7f:a1:6d:76:d3:2c:22:d8:17:57:f5:31:c9:46:
42:d3:91:75:7d:62:dc:64:f2:10:ea:1e:bd:0d:01:
cb:42:2c:d3:c7:ad:be:2e:20:20:f0:42:22:f1:ad:
90:6a:59:fb:a7:0b:75:f5:83:9a:48:1e:23:9f:ad:
65:60:c3:09:16:d7:c1:ca:89:64:fc:1d:fe:1e:f8:
81:85:8f:cd:e1:7d:69:57:e1:c6:a2:9d:fd:f4:51:
17:93:87:a8:cb:26:0d:cb:82:98:0f:25:fd:0d:a5:
d9:09:50:2e:7c:6f:c6:f7:ba:2c:44:f3:2d:f1:2d:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:98:C0:E9:95:A1:B0:F3:FA:47:E0:3C:F1:2A:F4:6D:C4:35:55
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/59yYwOmVobDz-kfgPPEq9G3ENVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.116.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b1:10:af:02:6a:72:9c:f7:8f:c2:42:51:09:18:b0:62:65:
aa:1e:cb:db:3e:48:de:e8:3a:69:14:a7:8c:2f:38:a3:18:dd:
a7:8a:2c:a3:74:1f:a3:77:d9:d5:b8:c9:98:05:91:e3:44:f1:
43:71:e2:3d:61:bf:89:73:5e:38:2a:ad:41:17:f8:3b:e8:14:
d3:11:39:3a:b8:4f:d8:11:01:ac:68:0f:a0:fc:cf:30:d8:26:
cd:ac:b3:67:7f:31:93:48:b9:77:f2:c9:a4:11:0e:04:7a:47:
83:da:18:b4:c1:e3:bc:49:ed:03:8a:c6:bb:fa:48:fa:e4:7f:
89:da:b5:b3:e0:15:b4:0c:bc:05:36:30:65:f5:2b:38:fe:78:
9d:06:4d:e6:74:b0:4b:a4:42:35:f5:63:0a:36:ac:f7:bc:7d:
b0:ec:38:78:35:68:34:1b:31:5e:4e:92:3e:1b:47:22:69:7b:
d8:80:1b:c1:7c:d1:5e:7f:d5:cd:8a:63:cc:ba:95:73:ad:b5:
0a:1b:24:b3:1a:77:00:37:b4:a7:dd:9d:a7:96:57:0c:ba:77:
72:e5:ff:31:ba:39:97:06:e0:a9:d2:00:71:2d:c6:8b:dd:3e:
57:ca:e5:88:93:d1:51:e1:51:cb:0d:43:1f:1a:ba:bf:e8:56:
84:ad:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org