Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/gQNmFqWMxwVqhZZ_MzMuIlfdiIE.roa
File: gQNmFqWMxwVqhZZ_MzMuIlfdiIE.roa (raw, json)
Hash identifier: 0inJf5y6ZCqdWLD96iBDnBo1kpSUFiWGVf8MHTyiGbw=
Subject key identifier: 81:03:66:16:A5:8C:C7:05:6A:85:96:7F:33:33:2E:22:57:DD:88:81
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 074527AB
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/gQNmFqWMxwVqhZZ_MzMuIlfdiIE.roa
Signing time: Sat 01 Jan 2022 04:52:56 +0000
ROA not before: Sat 01 Jan 2022 04:52:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48220
IP address blocks: 185.102.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121972651 (0x74527ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Jan 1 04:52:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81036616a58cc7056a85967f33332e2257dd8881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:81:47:63:52:5f:75:9a:48:93:90:2d:0b:
44:72:3d:5b:7e:40:eb:7f:5d:62:40:2c:c3:67:8a:
db:74:a2:fe:b6:22:28:58:4c:a7:e7:fe:e5:78:69:
cf:33:16:cb:2a:4f:33:37:26:d6:78:35:d7:4b:fd:
d1:ae:ca:66:b8:e2:7f:64:91:b5:d7:bc:ea:8f:88:
7e:0d:af:d9:dd:8f:c9:94:c0:65:39:0a:3f:a4:3d:
05:c6:9f:7d:5b:c3:75:f0:e6:4a:96:9c:12:30:17:
07:ed:9e:b2:4e:7e:30:a3:70:3c:ab:9f:69:62:ef:
87:d0:ad:dd:d2:9c:e8:89:e8:26:4e:f5:66:db:a0:
9b:de:1c:38:39:69:07:33:66:94:5e:61:86:e0:52:
0b:02:7c:1f:36:7a:72:ae:72:f6:8e:37:79:ed:33:
0b:2c:97:ce:40:49:fd:53:2e:59:27:c2:ad:1e:a6:
d2:18:a0:5c:f2:68:71:ef:19:e0:07:39:78:c8:ed:
5f:cc:30:db:62:8f:7e:1a:1f:c8:72:d3:40:04:ee:
0b:5b:6f:37:c9:f9:8b:49:e5:01:1d:c6:5c:fe:31:
ea:20:76:79:8a:e7:5d:af:94:73:9f:a3:49:9e:13:
b2:4d:4f:09:06:f1:13:7b:b4:64:39:a0:2b:3a:28:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:66:16:A5:8C:C7:05:6A:85:96:7F:33:33:2E:22:57:DD:88:81
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/gQNmFqWMxwVqhZZ_MzMuIlfdiIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:27:0e:1b:11:16:3f:f0:31:0b:d0:fb:5d:fb:6a:1c:73:6b:
94:49:90:f7:78:48:cb:5a:57:3d:40:f4:4e:b4:c7:b8:23:bc:
be:92:f4:ca:20:cb:b9:db:23:80:62:d8:cf:4d:8c:cd:88:9c:
e4:6f:e1:c5:44:3b:dd:04:af:79:23:73:de:28:97:5c:de:ca:
0d:9e:b5:c6:9f:0b:61:65:62:8c:1b:3b:54:31:cc:bf:4f:5c:
7a:54:6a:ae:18:c0:f8:f0:fe:6a:91:ca:6b:1b:02:0c:ae:51:
06:9e:90:69:58:60:06:ed:6a:dd:1d:83:43:3f:f1:b4:fd:f1:
a2:08:70:c4:91:02:7e:10:02:6c:e4:76:b9:de:71:25:48:42:
34:60:88:5e:ed:17:fc:e2:32:60:d3:26:56:94:5a:27:2d:ef:
a8:37:aa:08:64:50:bf:a4:41:50:00:4c:7d:f8:85:a7:e9:0b:
a1:60:0a:b8:2f:6a:84:b8:81:38:1f:d2:10:ca:b9:b9:65:82:
ec:0e:14:fe:f7:b8:3c:9c:11:96:da:0d:45:c1:ca:41:df:f5:
55:54:ab:3b:10:cb:02:e7:29:e5:6f:e5:db:ac:13:d3:a7:bb:
dc:be:47:a2:a3:49:12:7f:82:92:6d:88:eb:92:f5:4f:47:e2:
ad:cb:1f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-fra.rpki-client.org