Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_IPE6Tfm3ciquVJQHYzhJnjftP4.roa
File: _IPE6Tfm3ciquVJQHYzhJnjftP4.roa (raw, json)
Hash identifier: GIMaNox36mR91DvRqiz/RGtp2BR48BtNHdrTdBzQ8ZM=
Subject key identifier: FC:83:C4:E9:37:E6:DD:C8:AA:B9:52:50:1D:8C:E1:26:78:DF:B4:FE
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018267814C62DAAADBC833274B10ECC20257
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_IPE6Tfm3ciquVJQHYzhJnjftP4.roa
Signing time: Thu 04 Aug 2022 06:18:23 +0000
ROA not before: Thu 04 Aug 2022 06:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400039
IP address blocks: 185.173.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:81:4c:62:da:aa:db:c8:33:27:4b:10:ec:c2:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Aug 4 06:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc83c4e937e6ddc8aab952501d8ce12678dfb4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:b8:78:75:11:7d:a3:39:21:fb:a2:c8:f5:
4f:a6:13:b1:e2:c4:95:93:1b:a5:36:0a:08:eb:7e:
78:0c:ad:19:dc:aa:62:e0:87:2f:f9:00:ec:62:a4:
20:24:a6:92:33:32:51:d4:50:22:55:49:d8:5d:36:
bf:f2:78:3b:ff:89:d3:76:3f:5a:b3:4f:4d:f7:91:
48:7d:e8:6f:c9:12:8a:b9:5e:a6:ea:5d:41:b8:16:
27:01:aa:fd:25:6e:c2:79:28:35:99:9c:5f:63:b3:
4a:8a:5a:95:bb:b0:8c:f1:c2:9a:43:35:35:af:06:
c2:0b:73:e8:d4:c4:d6:27:90:80:45:40:c4:86:1f:
87:89:f9:5e:27:f8:6a:7e:11:d2:63:0e:6a:16:b9:
31:a7:92:e4:f5:7e:a2:86:f5:00:e1:88:b8:80:ff:
47:e3:a9:e0:3b:bc:f2:70:86:3f:86:a1:d3:17:8c:
27:c2:be:d6:75:94:e0:f5:81:7b:f0:42:1b:33:50:
4f:82:ba:d6:c7:87:b8:04:23:8c:87:c5:bd:47:a4:
86:67:83:f4:cf:84:e8:d4:1b:0c:33:fe:c6:2d:c6:
87:8e:f5:40:3f:ac:1c:a7:2c:7a:70:af:9b:c0:45:
5e:d1:c8:8a:84:fa:52:e1:cf:f2:17:87:5c:5b:d4:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:C4:E9:37:E6:DD:C8:AA:B9:52:50:1D:8C:E1:26:78:DF:B4:FE
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_IPE6Tfm3ciquVJQHYzhJnjftP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7a:4f:98:b2:3c:08:63:7c:aa:83:5b:02:01:6d:88:78:89:
1d:69:e2:f1:66:60:59:5e:10:44:cd:4c:1c:9f:27:46:11:b4:
e7:f8:e5:8a:81:5b:8a:8d:29:99:0c:a9:d2:e2:a8:2e:4e:6b:
0b:9f:80:d4:eb:b2:1b:49:b2:a5:de:e2:e4:53:93:c3:45:04:
01:4d:32:d0:b5:68:c7:63:a4:4a:7e:ec:f0:2a:1e:8d:60:0f:
e5:9b:29:bd:5f:2c:06:15:83:ef:d4:4f:b0:fc:7d:4e:df:7f:
bd:2d:18:d8:90:96:9d:fa:25:6b:68:a4:4d:09:fb:c2:93:0a:
60:2b:6a:83:d0:fb:0b:68:42:d3:35:25:66:6a:5f:8b:f8:19:
2d:86:25:e4:63:29:1e:0b:8b:d4:64:54:14:ab:11:84:3a:01:
9a:45:bf:21:92:c8:91:d6:53:61:8d:86:2f:bd:14:13:04:a0:
58:ae:5c:6d:30:0b:fe:d8:b1:df:6c:91:0b:c4:23:dc:42:1b:
d6:8b:b1:98:09:af:33:08:57:e7:35:90:b0:af:48:9e:7f:24:
e8:10:d6:fd:6c:c0:53:a0:95:a0:67:5c:3d:72:90:7b:63:58:
ef:00:8d:3c:02:7b:17:01:cc:1a:a1:fc:fa:6d:48:3e:fb:10:
3b:78:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org