Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/5gYWNx8xHWYl0jbNB05cMf0G5CM.roa
File: 5gYWNx8xHWYl0jbNB05cMf0G5CM.roa (raw, json)
Hash identifier: Ry/nDk674AffqkCF2o/of6PwyFurwj8IQ/rMwSzTujY=
Subject key identifier: E6:06:16:37:1F:31:1D:66:25:D2:36:CD:07:4E:5C:31:FD:06:E4:23
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 0DB82BF7
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/5gYWNx8xHWYl0jbNB05cMf0G5CM.roa
Signing time: Sat 01 Jan 2022 15:04:07 +0000
ROA not before: Sat 01 Jan 2022 15:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8455
IP address blocks: 185.31.144.0/22 maxlen: 22
2a00:bd20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230173687 (0xdb82bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Jan 1 15:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e60616371f311d6625d236cd074e5c31fd06e423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:12:31:db:5a:3a:10:e6:f6:fe:18:6f:d4:
e9:80:5e:51:7b:0d:b2:e2:e2:82:24:4e:9e:aa:c7:
84:99:47:98:22:9d:18:fd:87:9e:c1:36:53:19:8b:
1e:c6:b2:4f:27:5f:98:0d:0b:8a:47:11:6a:7e:39:
b6:09:b0:85:ad:42:5c:ca:01:e9:55:6b:47:92:20:
d4:b1:85:52:26:45:84:21:4d:e4:4f:eb:7f:0c:c2:
94:b0:bc:11:e9:62:ed:3d:f3:bb:2f:a0:12:e0:8b:
d5:98:b0:0e:59:09:df:ae:7f:75:d4:b6:fa:41:78:
a6:17:a8:aa:cc:bd:35:f5:bf:db:d9:11:e4:a7:bd:
5c:43:e3:f3:ff:f2:f0:af:aa:38:4f:f7:0c:49:f0:
e0:0c:90:58:88:eb:d7:c7:69:2e:aa:49:a5:c3:c4:
7b:83:b3:94:ec:ac:a0:bc:9c:bb:cf:02:b0:a8:d8:
3e:d6:46:9c:05:76:21:a6:2f:f7:d3:62:28:eb:39:
cd:ea:a0:b5:ac:d1:63:89:1d:0e:81:8e:47:eb:81:
f6:d5:e7:af:59:65:a5:88:94:f6:32:34:b9:c5:41:
8c:02:ec:ca:ef:5d:ac:41:46:e7:59:b0:1a:dc:1b:
54:7c:12:a2:d9:83:73:c6:d9:dd:f7:6c:6f:e2:a3:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:06:16:37:1F:31:1D:66:25:D2:36:CD:07:4E:5C:31:FD:06:E4:23
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/5gYWNx8xHWYl0jbNB05cMf0G5CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.144.0/22
IPv6:
2a00:bd20::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ec:e8:ed:70:89:94:80:23:59:87:b2:d5:7f:cd:5c:ed:93:
d8:aa:7b:12:82:0d:df:40:c0:e7:59:e7:f7:7d:07:7f:6b:d0:
69:5e:c9:0a:b2:5c:c7:59:e6:31:09:26:0e:98:40:b3:74:06:
18:37:40:db:b7:33:b9:ad:13:90:65:f3:ab:31:38:ff:0e:8a:
9f:d6:6b:44:6b:72:18:ad:16:a7:30:60:50:07:6f:20:43:63:
6e:a3:34:84:50:63:59:cf:d2:2c:3d:b0:aa:d3:45:49:0c:c3:
22:ef:f9:c8:08:e5:90:f9:76:a2:50:0f:cd:b5:8a:29:16:78:
84:4e:cd:35:14:ea:3d:bb:f2:e7:45:57:78:ed:08:35:71:fb:
eb:aa:2a:b8:7e:bb:55:5a:de:d7:53:21:e7:bf:31:ba:07:85:
40:62:a4:09:68:92:2a:c0:86:83:0d:13:92:a9:45:a0:4b:60:
99:aa:8b:ed:f7:a8:1f:fa:43:c9:b1:cc:8b:8c:6c:8e:49:c0:
14:a5:87:49:31:7a:4c:db:60:15:3c:86:47:90:a5:61:d8:d2:
ce:62:39:af:3a:aa:06:b9:3f:52:1f:47:a4:fc:5d:a7:32:77:
ed:6d:75:4d:63:92:e8:47:a7:25:7c:af:5d:4e:c2:38:74:f5:
a1:ee:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:36 2024 by rpki-client on console-ams.rpki-client.org