Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/kEakmpshftcSCuvKx23pHF6Udhk.roa
File: kEakmpshftcSCuvKx23pHF6Udhk.roa (raw, json)
Hash identifier: bfhn6XC2D45i4WeGSc4kN2PB1Zmbx0f3m+pxKUBL4io=
Subject key identifier: 90:46:A4:9A:9B:21:7E:D7:12:0A:EB:CA:C7:6D:E9:1C:5E:94:76:19
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 018331FA49163D6BAB50B0F2C59FB48A90AB
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/kEakmpshftcSCuvKx23pHF6Udhk.roa
Signing time: Mon 12 Sep 2022 13:53:49 +0000
ROA not before: Mon 12 Sep 2022 13:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207990
IP address blocks: 185.5.146.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:fa:49:16:3d:6b:ab:50:b0:f2:c5:9f:b4:8a:90:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Sep 12 13:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9046a49a9b217ed7120aebcac76de91c5e947619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:b0:d1:ce:90:76:aa:4b:84:c7:08:12:78:
8a:c9:c4:69:5c:8d:bc:90:df:75:69:a9:79:da:d1:
fb:e6:6c:37:42:34:ba:39:cb:80:38:09:0a:58:be:
4f:0c:0e:87:3a:7f:ff:15:29:6a:34:25:c9:5f:56:
68:4a:9a:fc:a6:d7:cd:c3:03:1d:bd:e3:48:d0:4e:
34:56:4c:21:0e:fd:32:c1:f3:a5:e4:99:dc:a2:35:
87:23:11:42:ba:77:d5:04:01:1a:08:a9:88:8d:33:
e4:60:04:8e:e5:9b:38:93:98:73:c4:09:e5:bc:e7:
0e:69:b4:a1:84:57:4d:85:d7:a6:79:f4:58:11:52:
da:4a:15:7a:88:0c:c3:4f:43:fd:cf:44:09:60:2d:
b2:ca:c2:58:e5:9f:ed:79:1c:01:11:1c:76:1f:ef:
8f:c7:ac:63:9e:bd:cc:ec:bd:14:f3:32:cf:fc:db:
08:de:5a:1f:fe:d0:0d:2e:cc:4c:1e:d9:6b:76:e1:
83:50:de:73:91:0e:24:51:c7:ab:5d:b7:88:bf:b2:
8d:7d:3a:9d:82:cd:e8:0c:6d:10:9b:b4:ef:25:1f:
11:8e:cb:5b:ce:47:fe:95:43:1f:bb:cc:53:99:6b:
a0:5a:73:75:34:30:57:1a:c3:2c:40:82:8e:99:b9:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:A4:9A:9B:21:7E:D7:12:0A:EB:CA:C7:6D:E9:1C:5E:94:76:19
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/kEakmpshftcSCuvKx23pHF6Udhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b3:c6:bb:00:c7:74:19:08:c1:d5:c4:4b:d9:ed:83:31:2c:
54:77:be:6a:f0:71:c5:2f:18:28:bb:20:48:80:18:5c:22:30:
2c:87:b2:58:60:bf:77:b8:88:a5:ca:6c:9c:df:96:c6:69:94:
6e:64:65:c4:b1:77:fd:48:d8:17:14:b8:2c:f9:36:8a:ff:85:
72:32:09:f3:99:85:05:87:30:ad:96:c7:23:61:8f:01:ff:9d:
4e:77:1c:39:0d:02:bc:e8:11:57:6e:b5:3a:e2:c0:3e:93:5a:
35:59:33:85:30:8b:58:fc:cf:27:ba:e1:16:5b:76:08:1e:9f:
3a:63:82:cd:e3:d2:e3:b2:9c:32:17:c4:99:d8:6d:ad:e5:de:
a4:d5:58:29:18:83:cb:4c:db:44:e4:74:84:2f:ba:cf:15:7d:
fe:03:53:04:91:3b:16:72:5c:1a:36:72:60:23:be:92:1b:c9:
79:f8:bf:d4:40:bd:44:3c:0c:cc:c4:8f:5e:13:06:a0:27:38:
f4:50:ed:64:f6:81:39:6b:a5:16:8d:7d:8e:46:c6:4a:6b:97:
24:f2:56:e4:86:d3:6f:8f:6f:96:de:e8:8d:18:2d:8f:ba:27:
75:75:03:10:e9:f9:8c:a3:6b:b0:1a:dc:7d:a7:25:ce:43:c4:
3c:75:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:05 2024 by rpki-client on console-ams.rpki-client.org