Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/eE5cIHEVrakQ6AimYq1j3R88eBE.roa
File: eE5cIHEVrakQ6AimYq1j3R88eBE.roa (raw, json)
Hash identifier: mJFXB1grAYKIb4hwzpKdZP0z4Z11Ld5ZphYLP3ibfxI=
Subject key identifier: 78:4E:5C:20:71:15:AD:A9:10:E8:08:A6:62:AD:63:DD:1F:3C:78:11
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 0373FD90
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/eE5cIHEVrakQ6AimYq1j3R88eBE.roa
Signing time: Sat 01 Jan 2022 12:56:44 +0000
ROA not before: Sat 01 Jan 2022 12:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51862
IP address blocks: 185.132.44.0/24 maxlen: 24
185.132.47.0/24 maxlen: 24
185.132.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57933200 (0x373fd90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Jan 1 12:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=784e5c207115ada910e808a662ad63dd1f3c7811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:23:8e:1d:b5:1f:08:53:66:35:b3:40:7f:
09:c7:05:b0:d2:e5:2a:97:90:7b:f4:d7:c4:0e:e6:
f2:d7:0b:8b:7d:4f:ce:06:cc:05:01:f0:0f:cd:0f:
14:d1:a7:a0:f4:b1:c6:45:b0:6e:0f:5b:49:6b:0a:
b5:27:af:f3:46:3e:f8:1b:52:6b:9e:b0:81:79:9e:
58:87:b8:45:f7:4c:0e:75:5c:a0:82:7b:7d:98:2e:
d3:af:7f:b6:d5:54:fb:b7:58:f4:a6:ab:da:8b:8a:
34:5a:27:ed:94:bf:4f:28:75:b7:ee:9b:de:b8:7c:
30:f2:de:e8:4d:e9:da:25:4c:b6:80:a3:2e:5a:2b:
3b:c0:bc:bf:54:1b:e9:b3:96:90:7e:8f:08:a5:14:
cb:36:ae:ba:dd:60:bf:e2:06:43:69:4d:b6:a7:10:
ca:2f:96:83:19:e4:a0:f7:1a:4d:b5:4e:06:22:43:
9a:c7:77:c5:d1:32:8a:48:fa:9f:b7:4e:c7:f9:be:
7e:b2:17:ac:ac:f2:6d:9b:1e:22:ef:d2:77:f5:8b:
81:69:13:9b:ca:cf:be:8a:cf:c8:93:db:67:b4:f3:
34:5e:c6:2b:d4:34:dc:d4:80:be:69:27:89:ba:d5:
fb:1f:32:78:8b:1c:56:ba:6a:7e:e2:b7:34:58:f0:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:5C:20:71:15:AD:A9:10:E8:08:A6:62:AD:63:DD:1F:3C:78:11
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/eE5cIHEVrakQ6AimYq1j3R88eBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.44.0/23
185.132.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5c:82:ff:42:d2:38:be:7f:93:b8:45:95:16:7d:8f:f7:d3:
9e:2d:f1:33:b5:c8:ec:e2:09:8b:43:27:69:f4:7c:17:ba:ae:
16:fe:da:6e:f4:75:f6:86:12:e0:de:30:c3:bc:3e:49:4a:41:
0d:75:24:64:49:61:5d:b4:bb:21:52:25:18:cf:2b:05:b6:83:
75:35:8b:fb:70:42:a9:f8:e4:2a:84:ca:bc:2f:a1:a9:56:dd:
19:b3:0e:2d:0c:bb:01:7c:89:73:51:93:3f:83:73:5c:ac:5a:
b6:29:3b:98:21:4b:be:e1:8c:33:cb:d9:6e:21:c3:de:0a:eb:
55:b4:42:eb:cc:e6:c3:08:30:75:60:63:8c:39:e7:f4:ab:9d:
f4:95:9e:a3:6c:1e:f5:17:a8:ed:81:a0:61:1f:28:77:33:50:
3c:45:03:4f:22:ce:a9:e5:8e:51:68:74:41:cb:0b:0a:0c:12:
16:26:aa:55:2c:28:e9:27:c7:14:7f:bc:cc:72:e9:9f:57:01:
ba:ac:ec:45:0d:0a:18:ad:91:8a:ee:9c:e0:54:04:21:27:7c:
14:f1:c9:e7:cc:4d:0b:78:0f:d1:b1:c5:4d:e3:17:c0:41:4e:
4f:60:3a:ae:bd:81:a8:89:e3:17:fc:e9:7f:52:ad:64:55:be:
56:01:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:48 2024 by rpki-client on console-fra.rpki-client.org