Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/xbLrumKnGMw9z6_rmgF1rK_4y4I.roa
File: xbLrumKnGMw9z6_rmgF1rK_4y4I.roa (raw, json)
Hash identifier: R7afywZzi/H/BUQRTj/kSSe7ipLvA+mYA6cbr19+1g4=
Subject key identifier: C5:B2:EB:BA:62:A7:18:CC:3D:CF:AF:EB:9A:01:75:AC:AF:F8:CB:82
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 107CE6A6
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/xbLrumKnGMw9z6_rmgF1rK_4y4I.roa
Signing time: Sat 01 Jan 2022 07:55:43 +0000
ROA not before: Sat 01 Jan 2022 07:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202670
IP address blocks: 185.151.4.0/23 maxlen: 23
185.151.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276620966 (0x107ce6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Jan 1 07:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5b2ebba62a718cc3dcfafeb9a0175acaff8cb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:77:1a:ea:a6:42:3c:1e:70:53:05:4c:83:
47:78:a1:de:b0:44:3f:23:31:71:35:b1:66:ad:1b:
5f:b9:c6:de:18:89:6b:fe:cd:0d:ef:de:a9:28:98:
a7:ec:15:f0:b8:fe:56:78:70:eb:fb:d2:67:84:c2:
24:ba:8f:60:63:b4:e6:02:c7:8b:0e:5b:6c:bc:e0:
b7:eb:5a:8e:87:4f:57:3a:67:c4:d4:fb:19:79:c8:
b5:92:97:0d:7e:ef:3b:2c:83:fc:45:07:49:bf:61:
7d:a7:7c:ab:6b:c0:cb:3f:12:ae:4b:f8:6c:73:ae:
e3:e4:7e:df:cf:2f:67:c6:56:2f:32:eb:58:f0:ef:
ed:e7:e6:d8:8a:7c:2a:21:bd:36:9b:1d:4d:a9:9a:
90:75:0d:fe:3e:4c:ff:d6:dd:c2:b1:a1:dd:49:8c:
19:ca:e9:70:15:d1:c9:a0:c1:fe:3f:20:a4:0d:70:
38:dc:34:6f:9e:d4:c2:3f:3f:9c:44:10:a7:d7:7a:
73:dc:e3:d9:ce:ef:95:21:35:2a:28:ac:a8:d9:19:
37:f9:46:0d:01:d3:38:5c:c3:f9:cc:e0:d9:e7:bd:
f9:d8:d6:a3:7b:1d:84:c3:2f:67:2a:1d:78:52:40:
06:96:cb:62:f4:15:89:46:6b:54:ea:02:52:8d:c1:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B2:EB:BA:62:A7:18:CC:3D:CF:AF:EB:9A:01:75:AC:AF:F8:CB:82
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/xbLrumKnGMw9z6_rmgF1rK_4y4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.4.0/22
Signature Algorithm: sha256WithRSAEncryption
25:73:73:73:0a:70:42:e1:93:7c:b9:60:0d:f8:08:55:16:4c:
cb:80:c1:c1:c6:bb:da:b2:a7:63:a2:d2:bc:11:cf:e4:eb:4e:
58:4f:8f:4d:d2:9a:40:c6:24:82:55:d4:22:f3:a5:3b:5d:ca:
e8:2d:ec:f2:00:2c:11:41:9f:11:73:29:bd:03:3b:1a:bc:d9:
e0:e6:87:25:c2:9c:f1:a6:5e:d8:33:b7:99:a2:ea:48:d5:ea:
d4:75:50:ba:e2:6f:a4:2c:e1:49:0e:15:43:d2:f9:e9:34:da:
f8:c4:7c:17:fd:e4:6b:ba:9a:2a:14:b1:12:60:c3:d2:da:b2:
ae:8d:ac:af:66:5e:92:94:bb:70:07:1c:55:14:d7:13:11:cf:
b5:26:0b:c2:1a:89:7b:c8:ce:52:ba:04:63:fd:cc:32:6d:bd:
52:09:10:e6:f6:8f:57:02:51:8e:49:2e:9a:54:f3:b0:b8:51:
e5:d0:08:48:89:8f:be:26:1c:84:f4:26:5d:66:78:e5:30:9d:
4c:00:02:10:ba:40:42:01:bf:16:5e:28:56:54:9f:a9:41:5d:
bd:78:e7:6a:16:40:19:a2:68:47:67:74:ad:0a:b2:89:11:9b:
84:44:34:d7:62:e1:dd:cf:20:ec:1b:b5:99:1f:97:a8:97:6b:
51:08:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:41 2023 by rpki-client on console-ams.rpki-client.org