Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/D5J_vP5r2-m9ORs4DQ0z9cp5ISU.roa
File: D5J_vP5r2-m9ORs4DQ0z9cp5ISU.roa (raw, json)
Hash identifier: oL1xom6o2MSnxdn3wE8CPjVFpJthCDbkxUG5bNf+RBI=
Subject key identifier: 0F:92:7F:BC:FE:6B:DB:E9:BD:39:1B:38:0D:0D:33:F5:CA:79:21:25
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 05596AFA
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/D5J_vP5r2-m9ORs4DQ0z9cp5ISU.roa
Signing time: Sat 01 Jan 2022 14:58:34 +0000
ROA not before: Sat 01 Jan 2022 14:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205760
IP address blocks: 185.196.76.0/22 maxlen: 22
185.196.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89746170 (0x5596afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Jan 1 14:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f927fbcfe6bdbe9bd391b380d0d33f5ca792125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:5e:52:31:f4:08:f8:3d:b9:a0:d5:47:db:
e4:49:4e:6a:e3:ed:27:44:ef:01:9e:14:9e:fb:53:
a0:5c:87:e5:ca:91:9d:f6:7b:7e:83:24:96:b1:6e:
35:e0:a7:28:8e:67:59:3a:8e:6d:ff:44:40:b6:32:
d9:64:93:d7:88:b7:4b:f6:11:d2:5c:78:ee:57:09:
43:6e:35:e1:62:5a:3c:58:12:b9:d5:07:36:e5:bb:
e0:88:8a:a6:88:9f:5a:9f:47:85:31:86:ab:0d:13:
4e:bc:94:5c:cb:f4:97:16:e0:57:70:81:71:49:ad:
b3:ed:78:fd:1b:7a:f3:65:99:b9:ac:fc:3f:38:75:
8a:01:1a:01:73:6d:86:5d:62:49:0b:26:0b:34:49:
f6:a4:d1:83:6f:c4:67:4c:c7:84:e6:8f:d6:54:be:
35:0b:92:39:3d:62:5f:be:74:1e:d6:05:31:5e:5e:
e5:5c:a5:67:8c:0a:91:fb:c4:e5:98:e7:43:50:99:
40:c6:a4:03:42:aa:b0:42:29:64:f3:26:2e:88:8a:
88:a3:5c:f1:f3:2c:94:7c:22:4c:09:a7:ab:5a:7b:
1e:12:62:02:e2:f6:81:bd:5d:a4:5b:18:57:83:47:
3a:8c:f5:33:c2:70:10:79:8a:96:6a:4b:e8:a2:b2:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:7F:BC:FE:6B:DB:E9:BD:39:1B:38:0D:0D:33:F5:CA:79:21:25
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/D5J_vP5r2-m9ORs4DQ0z9cp5ISU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.76.0/22
Signature Algorithm: sha256WithRSAEncryption
41:f3:83:48:fb:fc:8b:7f:82:2d:51:d6:16:a2:6a:0b:f8:6a:
be:28:30:22:40:37:94:e4:42:13:9d:0b:4e:90:c6:e6:ee:9d:
81:81:8e:e2:0e:24:2f:6d:80:d6:4e:1d:c0:63:4f:10:48:8e:
f9:b4:cc:0f:41:9d:2f:41:a2:12:97:4d:35:1b:5e:c2:f2:2d:
45:4c:d0:ae:56:26:9c:23:22:8e:41:70:83:ff:68:ef:2e:0e:
77:b4:d5:21:02:4b:d8:b2:83:54:8c:f9:bd:45:e7:ad:03:34:
15:d2:61:6d:05:37:60:e5:8a:0a:77:64:30:82:61:e4:2e:1f:
8d:cf:98:5e:f6:69:2e:e2:c3:8d:d6:46:3e:0b:ca:c2:21:56:
b5:58:8b:ae:f5:64:12:0c:80:fc:16:a9:16:09:2f:e2:b2:dc:
78:1a:ea:41:6b:a6:fc:6d:17:57:9c:56:a2:6d:21:b1:03:16:
2a:b8:4a:46:c6:66:9c:0c:38:5e:3f:27:b2:3a:26:f4:03:9a:
25:df:77:9e:70:56:97:5e:76:4d:b5:3e:1c:f1:b9:cc:cb:46:
40:e8:0f:e2:5c:09:7f:b7:88:fb:6d:91:42:e9:03:f4:2d:47:
75:e0:ac:1f:eb:a4:ca:25:bc:94:30:a1:d0:62:a3:c5:7f:f4:
bf:b1:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:12 2025 by rpki-client