Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/b9xLrJYqlEYmCVlEbgqvUa3_7Jo.roa
File: b9xLrJYqlEYmCVlEbgqvUa3_7Jo.roa (raw, json)
Hash identifier: xgngJX/d/Uw8ptS1ijgGJbnhm4xQSEaFKM9PCi29yKI=
Subject key identifier: 6F:DC:4B:AC:96:2A:94:46:26:09:59:44:6E:0A:AF:51:AD:FF:EC:9A
Certificate issuer: /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial: 0960545C
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/b9xLrJYqlEYmCVlEbgqvUa3_7Jo.roa
Signing time: Sat 01 Jan 2022 11:59:51 +0000
ROA not before: Sat 01 Jan 2022 11:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209959
IP address blocks: 185.215.92.0/22 maxlen: 22
2a02:fc40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157307996 (0x960545c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Validity
Not Before: Jan 1 11:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fdc4bac962a9446260959446e0aaf51adffec9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:8d:12:e2:ae:5b:08:c0:2b:2f:51:96:c3:
a8:91:f0:4d:d9:c7:e5:7b:9e:80:41:a3:80:81:16:
27:d4:51:57:87:e5:ab:89:fc:bc:be:ec:1c:cd:c2:
ed:43:18:4c:96:ee:dc:aa:c4:cd:e0:7a:d0:ad:4e:
54:6c:d8:db:06:16:e0:4b:1d:f9:92:6c:3c:5d:4a:
d4:25:5b:d4:75:75:2c:23:76:8b:26:1b:bd:39:43:
b1:6a:91:7c:47:db:54:89:14:f1:e8:2b:d2:cc:d0:
c5:c4:64:24:e3:49:71:00:72:5b:9c:1c:d8:f3:42:
b4:d0:e0:a7:ad:1a:15:39:86:5f:79:3e:16:a8:3e:
42:e7:90:bc:00:a8:b8:e0:55:30:81:86:01:e9:55:
af:fe:47:42:82:1a:b1:df:3c:03:69:49:29:8f:c7:
7a:c9:b2:b5:a1:82:24:73:ff:78:ed:92:22:47:f1:
33:30:32:1a:9b:bf:3c:e4:17:25:4e:55:2a:fc:8d:
9c:ed:47:c1:d1:91:74:5d:33:73:2c:92:41:3b:a8:
10:9d:39:ef:38:7b:8d:8a:e7:29:24:7d:14:ff:73:
b5:79:48:8a:07:4f:e3:98:9d:b1:f5:9a:70:be:9f:
86:7d:3f:27:3f:ac:59:8a:1f:06:27:b4:75:fa:d4:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:4B:AC:96:2A:94:46:26:09:59:44:6E:0A:AF:51:AD:FF:EC:9A
X509v3 Authority Key Identifier:
keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/b9xLrJYqlEYmCVlEbgqvUa3_7Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.92.0/22
IPv6:
2a02:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
e0:fb:81:e3:a2:83:db:72:0b:21:6b:2c:48:5e:25:b4:bd:92:
36:80:c0:55:2a:d4:f4:1e:49:31:e4:87:6a:2b:a4:51:08:84:
77:98:3f:f1:de:5e:8b:60:c6:cb:7f:86:57:e3:df:44:6d:7e:
68:53:71:22:3e:fe:01:89:8b:ae:71:0a:23:8f:d4:9d:ed:59:
9a:fc:5d:5b:21:12:47:e7:7e:85:a5:cc:ae:a7:e2:6b:21:25:
9a:4c:a8:92:56:b2:18:3c:4c:81:7f:46:92:f6:3d:d0:15:38:
4b:a4:c3:5c:36:8c:47:a5:3e:0a:ff:ea:92:1f:3e:63:4c:df:
08:0f:0c:12:58:dd:f7:38:15:ac:26:b7:9f:db:a6:0e:27:9a:
64:de:a0:d8:61:f6:5d:f9:4b:af:7c:6b:c2:51:66:cf:e6:b5:
6c:fe:e7:f9:f1:de:a9:51:d1:ec:5d:52:36:1f:af:f1:ae:18:
2c:3d:af:58:29:f4:49:c2:da:cb:04:5f:8e:87:22:be:8f:50:
a1:4f:9d:8e:ca:4f:75:ab:fe:9f:df:8a:14:6f:84:0b:be:00:
53:38:90:fa:60:97:f1:3f:ea:57:2d:a1:e6:44:9e:d3:39:79:
1b:00:66:4a:3b:12:91:d3:78:77:fc:a7:a3:a5:0f:8c:de:db:
c5:b7:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:29 2024 by rpki-client on console-fra.rpki-client.org