Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/5wuI6fhzMlniti7zMlUBmnlc4RA.roa
File: 5wuI6fhzMlniti7zMlUBmnlc4RA.roa (raw, json)
Hash identifier: iEAVHvytd9O3SMMiRwpqyc7aJ5wpKMlnKxP0F6gbtNE=
Subject key identifier: E7:0B:88:E9:F8:73:32:59:E2:B6:2E:F3:32:55:01:9A:79:5C:E1:10
Certificate issuer: /CN=7da31ee9c989a6311a08ff232289978401415e91
Certificate serial: 0182C5046471AAD0140E7E5576896BA86EF8
Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/5wuI6fhzMlniti7zMlUBmnlc4RA.roa
Signing time: Mon 22 Aug 2022 10:06:15 +0000
ROA not before: Mon 22 Aug 2022 10:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57778
IP address blocks: 185.126.44.0/24 maxlen: 24
185.126.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:04:64:71:aa:d0:14:0e:7e:55:76:89:6b:a8:6e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91
Validity
Not Before: Aug 22 10:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e70b88e9f8733259e2b62ef33255019a795ce110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:6f:9d:fe:02:c9:5e:9b:fb:c4:dd:df:85:
ef:58:c5:15:a4:42:50:98:f9:f5:2f:f4:5e:b7:f1:
e6:76:39:7e:3b:a8:96:20:fd:c8:59:84:c5:34:68:
cf:ef:da:45:3f:de:cf:67:29:2a:48:a3:c1:64:35:
a1:d7:e8:bc:d8:db:e2:ba:78:31:0b:3c:4a:76:25:
8a:ed:83:04:66:fc:fc:cf:ea:dc:e5:2c:14:38:3e:
f0:6c:8d:64:70:90:a2:9c:08:2e:44:c7:9e:d9:54:
98:83:9b:81:5b:65:07:4e:d4:bd:72:6a:d1:98:b0:
8b:b9:d2:0c:cd:64:98:5b:e2:eb:25:45:33:6d:5d:
c9:27:1f:0c:f5:1e:86:80:2b:77:a4:92:e5:f5:f7:
10:02:07:20:b5:63:7a:f0:b0:c9:57:13:85:15:a0:
b3:d9:9e:d9:8e:49:79:19:12:54:03:f8:9f:96:c0:
a6:03:ed:f0:2c:01:ab:0a:dc:95:11:2f:88:da:03:
42:0f:7c:24:0b:0f:96:c8:7a:a0:b9:39:48:ff:2c:
1c:db:25:d7:6f:c0:2d:a4:0d:40:46:ee:d7:e6:60:
35:5a:91:57:e5:9b:08:b9:5e:e8:0b:04:f7:cc:b8:
36:20:51:3f:07:ac:98:b9:e9:b8:e9:50:78:f0:6b:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0B:88:E9:F8:73:32:59:E2:B6:2E:F3:32:55:01:9A:79:5C:E1:10
X509v3 Authority Key Identifier:
keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/5wuI6fhzMlniti7zMlUBmnlc4RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.44.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:ae:46:ad:f8:4b:7b:2b:d5:c4:e0:8c:5a:42:8e:0f:26:a7:
9e:b4:50:1b:71:d6:fc:e4:3a:9f:fb:ee:16:63:9b:db:be:9e:
fb:cb:91:a1:d5:bc:77:51:57:06:e1:71:43:e9:1b:b4:c2:a6:
ed:4f:25:7d:06:07:60:2a:14:0b:3b:a7:91:97:05:0c:db:7f:
db:19:40:4d:da:74:f0:1d:7c:09:05:e0:fc:ad:de:b5:f5:c9:
6b:68:db:57:e3:72:0b:02:3c:8e:3e:96:fe:36:45:a2:0c:a9:
a8:99:94:af:17:3d:70:11:0f:3c:8f:6d:23:1a:c8:cb:8d:f4:
3c:c0:a9:47:41:be:09:8d:b0:bb:73:14:7f:60:8b:49:43:4a:
11:47:7b:cc:50:95:77:54:82:7a:60:95:af:61:2b:8c:d6:e9:
d5:9b:9a:34:52:a2:fb:90:ce:af:fd:1d:d9:24:00:34:3f:0f:
3b:06:49:2a:a3:6a:a5:0c:f1:7b:37:00:a4:f1:8f:7c:b6:0f:
4c:8d:bc:a2:e5:3f:23:7e:16:f9:98:2a:fc:0b:74:94:22:4a:
0a:d5:e5:33:0d:ce:c5:33:b5:1d:9b:e1:16:be:3f:da:dd:9d:
54:b0:2c:0b:ff:ae:c7:1b:b8:57:36:28:36:c0:d5:0b:71:c8:
65:e7:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:20 2023 by rpki-client on console-fra.rpki-client.org