Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/L_5ROzWU1Xz7koz8rpN6q5QMOLI.roa
File: L_5ROzWU1Xz7koz8rpN6q5QMOLI.roa (raw, json)
Hash identifier: JEMmWK6jRhuyZmz3oY1Odzm5Spuk6mqGrtQQacZpWv4=
Subject key identifier: 2F:FE:51:3B:35:94:D5:7C:FB:92:8C:FC:AE:93:7A:AB:94:0C:38:B2
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 05E1525A
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/L_5ROzWU1Xz7koz8rpN6q5QMOLI.roa
Signing time: Fri 14 Jan 2022 15:47:55 +0000
ROA not before: Fri 14 Jan 2022 15:47:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54252
IP address blocks: 185.114.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98652762 (0x5e1525a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 14 15:47:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ffe513b3594d57cfb928cfcae937aab940c38b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:09:9f:40:be:d5:bc:99:5a:1a:7b:54:7a:
ff:da:6f:b2:5d:be:15:90:aa:98:cb:c3:90:07:80:
a9:c6:da:f6:c4:fe:84:af:33:e3:28:a7:83:90:e8:
9b:99:e1:08:d8:8e:05:c6:63:80:b6:6a:4a:e7:87:
b2:be:f2:5f:9c:67:3a:6f:4c:f3:dc:13:fe:82:e6:
5c:0d:74:6a:90:80:e8:c5:0b:7b:43:b8:54:6a:a4:
bc:32:fa:1a:06:f1:5a:e3:20:9c:50:10:48:52:8f:
b4:4d:2d:f3:bf:03:f8:ab:41:51:ad:1f:28:6b:92:
6c:98:cb:d1:36:cb:e3:bc:bf:f6:47:67:fc:5b:f8:
10:38:3b:dd:a2:7e:f2:9a:60:17:4a:0e:c7:cd:32:
79:6d:8e:e6:f9:94:5a:ea:fa:47:e6:5e:07:23:ef:
4d:71:b9:6a:0d:c9:45:3a:df:c6:72:48:91:a8:ba:
99:4b:8a:e0:c7:e7:d7:85:3d:54:30:6b:45:54:dd:
ff:c4:e5:93:00:fb:22:8f:7a:13:e5:fa:7e:d9:12:
32:6b:26:b1:9d:bf:a1:1e:d5:f2:07:8e:ea:bd:2a:
d9:2b:72:12:6d:de:ad:c6:0f:c2:bd:60:5d:5b:02:
32:61:dd:c4:63:09:2f:c3:62:c0:90:44:ad:b8:c9:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:51:3B:35:94:D5:7C:FB:92:8C:FC:AE:93:7A:AB:94:0C:38:B2
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/L_5ROzWU1Xz7koz8rpN6q5QMOLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/22
Signature Algorithm: sha256WithRSAEncryption
55:b3:5b:3a:eb:d2:48:33:bb:f2:74:57:62:30:2e:93:28:53:
00:1a:94:a8:68:13:bc:18:7b:75:e1:0b:ab:4a:cc:ba:4a:96:
4b:fb:70:24:c7:9d:f7:99:41:64:37:05:8a:da:87:d1:8c:1d:
56:af:4f:cb:68:35:89:db:90:17:f2:89:7d:48:d9:2e:f5:bb:
ac:a8:e8:09:ce:8f:18:f0:84:52:7c:5b:de:86:95:c2:43:06:
77:83:e3:30:94:5a:4f:19:dd:55:b4:6d:33:e3:0a:5a:eb:a2:
76:9a:b1:b3:e1:be:76:9e:1a:b3:f2:e2:cb:d7:95:33:36:c6:
7f:17:d6:5d:6e:c1:66:bc:ca:02:50:03:7a:5e:e9:e0:aa:b0:
5e:16:cb:dc:af:18:27:37:73:04:fe:f0:ac:b5:9c:e8:46:f8:
f2:5e:3b:64:39:d2:94:25:b3:e1:42:46:e6:37:b5:2a:5b:2f:
42:c1:ab:8c:ca:9c:9e:a7:b3:eb:3f:f6:45:cf:35:e1:50:fe:
ab:b2:7d:a0:e2:4a:18:39:2a:ee:14:79:2e:22:bc:9c:f7:3c:
eb:f2:1b:08:d8:de:8b:bd:eb:cf:97:93:7d:83:f9:f7:17:c0:
bb:47:24:28:8e:08:24:9c:08:da:b6:d2:9a:1f:43:3c:44:26:
7b:a1:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org