Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/5P-QtsmBLPe5F4WAedMQd9BMKIc.roa
File: 5P-QtsmBLPe5F4WAedMQd9BMKIc.roa (raw, json)
Hash identifier: PmP5urejNvp4ElKFSi8pTazmzqDKy0ExX7ukXOa9360=
Subject key identifier: E4:FF:90:B6:C9:81:2C:F7:B9:17:85:80:79:D3:10:77:D0:4C:28:87
Certificate issuer: /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial: 132D509A
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/5P-QtsmBLPe5F4WAedMQd9BMKIc.roa
Signing time: Sat 01 Jan 2022 05:53:38 +0000
ROA not before: Sat 01 Jan 2022 05:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203904
IP address blocks: 185.118.44.0/24 maxlen: 24
185.118.47.0/24 maxlen: 24
185.118.46.0/24 maxlen: 24
185.118.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321736858 (0x132d509a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Validity
Not Before: Jan 1 05:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4ff90b6c9812cf7b917858079d31077d04c2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:f0:fa:e1:bf:2e:4a:8a:4d:23:1e:40:b4:
64:3e:ff:f5:2b:b9:e8:6d:d0:0b:1d:47:9a:84:9e:
88:17:d2:05:db:d1:86:f8:3c:dc:01:3b:5b:32:3c:
63:e0:12:59:4c:bc:2f:e2:26:9b:98:b0:78:7f:a9:
8c:b8:eb:27:2a:00:6a:df:fd:b2:f7:06:07:b8:24:
af:7c:24:e9:92:9a:86:78:bb:59:2d:fb:1c:f1:fa:
e0:b5:55:0b:e8:7d:29:87:4a:8a:92:a8:5b:ae:e0:
5a:9e:8e:99:aa:9d:a4:8a:ba:b1:f6:ca:2f:d5:53:
e5:8b:0d:e3:6e:49:5a:fe:43:fd:fb:01:55:3d:11:
cd:f2:a8:31:85:fa:47:37:dc:e7:f4:ad:40:56:a3:
4a:1c:9d:7a:3a:f7:c9:e5:50:9c:b9:e1:e3:0d:58:
3a:58:36:12:db:13:74:47:6c:8b:06:e9:c1:c2:a9:
b1:03:92:c2:6a:14:e0:c4:bf:e7:6e:db:da:9d:03:
82:24:ae:70:75:cd:4d:31:15:e2:57:88:d2:ca:d4:
59:22:c3:0f:7e:9a:a9:1b:45:ea:74:8b:9e:85:c6:
cf:27:16:03:9a:34:14:3f:3a:0f:69:1e:d8:9d:d3:
04:35:be:ac:65:42:6a:d6:38:42:61:fa:62:55:03:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FF:90:B6:C9:81:2C:F7:B9:17:85:80:79:D3:10:77:D0:4C:28:87
X509v3 Authority Key Identifier:
keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/5P-QtsmBLPe5F4WAedMQd9BMKIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:0c:33:3a:79:a3:2f:e6:8e:76:7d:8e:bd:a7:61:5f:ee:7e:
e4:08:c0:1c:c1:b9:5c:67:ec:36:98:88:f9:5d:30:6f:29:fc:
7d:b3:29:d2:e4:45:0f:19:ca:1c:87:dc:83:11:18:22:bc:ec:
ee:ea:01:21:1d:d7:84:25:58:23:b5:66:c6:70:6e:6d:57:e1:
32:5f:f0:3c:d9:13:28:db:e0:da:30:c3:5c:a7:a5:21:d7:6d:
16:af:33:53:ae:40:51:dd:3b:12:36:c0:4f:20:08:f4:9d:88:
d2:8d:fa:fa:78:d7:6e:b3:45:ee:dc:ed:1b:bc:b1:64:2c:5c:
f7:9f:a8:8f:51:6b:83:78:6b:d2:0e:83:f3:4e:d2:cb:12:df:
61:9d:fb:8f:86:95:f9:7f:3b:c9:9a:f9:9f:32:43:93:f2:63:
d3:fc:4a:58:ea:50:46:28:e3:fd:31:86:14:7b:5f:9f:59:1f:
35:6e:92:8c:b9:c7:9d:3f:c4:f7:b2:f9:97:f3:30:c4:eb:36:
7d:a9:c9:35:2d:4f:14:51:c2:34:42:a8:b4:5c:a8:93:73:e9:
f7:c2:8c:94:77:8d:88:ba:6b:37:ed:f6:fa:57:3f:dd:aa:02:
30:3c:ce:ac:04:c9:ac:54:19:42:0c:38:6d:de:6d:24:86:df:
da:42:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:21 2024 by rpki-client on console-ams.rpki-client.org