Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/52ARi4Bbu-NV02UKzVcChHjlgdM.roa
File: 52ARi4Bbu-NV02UKzVcChHjlgdM.roa (raw, json)
Hash identifier: QSOunHAKQUPB0aJeaqsslqOhIvPaonvghVzXumXXluI=
Subject key identifier: E7:60:11:8B:80:5B:BB:E3:55:D3:65:0A:CD:57:02:84:78:E5:81:D3
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 01839CDCA139E218DF1B9018C4BA7631FA6B
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/52ARi4Bbu-NV02UKzVcChHjlgdM.roa
Signing time: Mon 03 Oct 2022 08:00:48 +0000
ROA not before: Mon 03 Oct 2022 08:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15791
IP address blocks: 185.109.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9c:dc:a1:39:e2:18:df:1b:90:18:c4:ba:76:31:fa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Oct 3 08:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e760118b805bbbe355d3650acd57028478e581d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:37:8e:9b:94:a3:9d:e8:02:32:82:18:14:
2a:64:6d:20:a8:63:cf:59:35:6b:87:ab:63:18:33:
fb:23:c1:9d:90:b2:ac:d7:5c:4b:53:1d:84:01:5c:
e3:8c:ff:59:65:27:35:69:17:fe:f3:b9:62:ef:fc:
3a:31:3d:0b:63:b1:d9:f1:2a:0a:16:0d:1e:27:2f:
47:ce:6e:ca:44:7c:8b:7a:13:5b:6b:0b:dc:23:66:
c4:2a:5f:5b:87:c3:be:56:83:c5:8f:79:7d:59:3e:
25:c5:a8:70:00:67:48:41:e7:c4:2a:9c:da:ff:d4:
24:6a:11:3d:6d:b0:92:d1:70:68:0b:11:d5:76:e8:
17:ae:74:34:a0:d1:42:92:99:ae:cc:9e:f2:5d:72:
20:2c:93:88:36:3b:18:36:6b:f0:4f:0c:c6:36:12:
35:f1:99:a5:66:ac:83:c5:71:35:ff:66:be:26:cf:
30:a2:42:69:71:68:10:36:83:27:24:4b:33:fb:f4:
1e:11:bf:56:d5:ca:6a:33:a0:e8:53:d6:9f:28:64:
b2:67:3d:48:67:84:db:ae:40:b9:b0:6d:45:54:2b:
4b:d2:25:b0:9a:e6:d3:fc:1c:48:86:3b:21:c1:8a:
f6:33:7b:36:55:4f:9b:12:29:25:05:07:66:61:c7:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:60:11:8B:80:5B:BB:E3:55:D3:65:0A:CD:57:02:84:78:E5:81:D3
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/52ARi4Bbu-NV02UKzVcChHjlgdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ad:ef:11:9e:46:b6:c6:70:e9:9d:cb:35:d9:89:28:66:28:
ab:eb:cc:8f:2d:33:18:b8:05:7d:84:79:c9:19:2d:51:09:63:
fc:6b:ad:c0:db:cc:d4:cd:71:45:e0:e6:af:58:67:82:fc:c8:
b1:df:f1:f3:85:24:89:32:5a:87:dd:e9:82:4f:e3:0d:03:6c:
a9:54:eb:ff:91:cf:c6:3d:c8:93:87:e9:e3:dd:44:35:73:4f:
6f:c1:0b:fa:1e:e9:32:0f:9a:1d:a9:34:55:19:4d:cc:9d:22:
4e:ad:27:93:8c:11:7f:d6:58:7f:8e:1e:aa:5d:a3:cc:42:f0:
69:b7:74:fe:0c:a6:6a:b6:8d:ed:6e:08:25:6b:ca:56:ef:46:
a8:d2:c6:db:8c:7a:04:56:03:24:cc:ae:5e:10:70:3c:65:9f:
0c:23:7e:68:73:32:48:96:e5:60:0b:9c:4b:ed:e4:08:3c:eb:
30:51:14:7c:47:e8:24:1d:b9:98:b3:a6:14:ed:d6:3a:39:bd:
11:ea:a3:86:c0:83:ee:a8:54:09:f8:92:db:80:09:5d:44:36:
28:e1:53:ba:e7:e0:d6:8e:25:18:14:49:9f:24:f4:7b:c9:9b:
83:19:a7:fd:e4:73:4e:64:a1:78:9c:15:d6:13:b6:ac:65:9b:
16:a2:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:59 2024 by rpki-client on console-ams.rpki-client.org