Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/HlhLlK0Bg2bhYi91u7jS9qVGHQo.roa
File: HlhLlK0Bg2bhYi91u7jS9qVGHQo.roa (raw, json)
Hash identifier: lw9d/pmWT0YyiE16oCFZ/oFR2ZrDm9vaLoPB+zuIJok=
Subject key identifier: 1E:58:4B:94:AD:01:83:66:E1:62:2F:75:BB:B8:D2:F6:A5:46:1D:0A
Certificate issuer: /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial: 09188D7D
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/HlhLlK0Bg2bhYi91u7jS9qVGHQo.roa
Signing time: Sat 01 Jan 2022 06:05:58 +0000
ROA not before: Sat 01 Jan 2022 06:05:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47381
IP address blocks: 185.51.64.0/22 maxlen: 24
2a01:ae20::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152604029 (0x9188d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Validity
Not Before: Jan 1 06:05:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e584b94ad018366e1622f75bbb8d2f6a5461d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:bf:61:e9:46:bb:1a:88:32:d4:b5:77:39:
c1:50:ab:91:8a:76:f7:49:be:05:63:2e:b2:e9:a6:
f7:f8:7b:8f:51:49:5c:70:f7:65:ba:cb:e1:a3:15:
9f:8e:a0:54:59:d9:61:7d:4e:35:89:d1:0b:a4:26:
58:bb:86:d5:38:22:b2:63:e2:6f:51:5a:3e:1a:03:
20:fa:9d:17:33:6e:25:50:b7:d4:eb:ee:be:b7:34:
68:5e:11:84:58:d9:d7:32:b1:18:11:85:e5:27:07:
68:7d:c3:8b:ae:8c:6f:08:5f:7f:4d:82:e2:ae:a2:
07:cc:e1:a4:ca:63:0b:76:6a:c6:1e:12:ae:b9:86:
fa:d3:a8:c8:74:08:fc:e5:47:a1:07:1e:0d:64:e5:
81:f8:ac:95:2d:12:fe:67:0d:9a:45:18:29:24:1c:
99:57:22:4e:df:a4:65:45:35:be:ce:58:1d:19:cd:
10:ec:0e:9a:31:17:d8:04:0c:fe:67:5b:d8:80:20:
20:77:a9:f7:b1:ee:c8:4e:63:21:3f:3f:51:68:73:
02:29:05:35:5a:80:3b:55:e4:46:d2:60:a2:69:27:
9d:da:57:b8:77:c1:cc:43:65:cb:5c:d5:32:74:52:
4b:01:5a:c2:3c:26:07:c7:a1:e8:1b:38:d7:a3:13:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:58:4B:94:AD:01:83:66:E1:62:2F:75:BB:B8:D2:F6:A5:46:1D:0A
X509v3 Authority Key Identifier:
keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/HlhLlK0Bg2bhYi91u7jS9qVGHQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.64.0/22
IPv6:
2a01:ae20::/32
Signature Algorithm: sha256WithRSAEncryption
73:16:9c:4e:31:46:cc:62:9e:40:4d:d7:46:59:92:e6:ad:45:
39:a9:d8:db:37:79:53:8a:b1:0c:0d:b3:b0:f3:5f:26:2e:12:
4f:c8:da:de:ef:56:31:3c:6a:02:ca:81:47:49:65:c4:36:18:
48:4a:fa:7f:16:d3:3f:32:6a:8a:e1:48:2a:c6:d6:72:60:07:
9d:27:88:86:65:87:f9:04:da:13:67:5e:00:d9:35:9d:af:f6:
81:91:d5:e3:e4:f9:ef:8d:d2:78:d5:94:d8:7c:32:c3:1d:29:
84:0d:6a:78:d3:f0:1f:35:e9:94:25:ed:8e:cc:c0:6e:09:9a:
b2:fb:d7:a3:18:4d:8e:69:e8:5c:60:ae:97:b3:ad:e1:37:ef:
21:9a:a5:fc:13:46:36:64:ba:d4:87:53:19:a9:2d:a5:60:4a:
b0:bc:00:fb:4e:53:59:cf:2a:a3:70:d0:e2:22:fa:3f:1a:a4:
fb:eb:5a:da:da:ea:21:b0:65:5c:16:8a:f9:6a:64:d4:cf:a2:
7e:37:5d:e0:5e:fa:94:03:e0:b1:6d:9e:db:e2:4a:28:e9:c2:
c0:21:2e:d6:88:d6:9a:14:35:ee:c2:0b:38:e8:2a:69:47:f2:
8a:fb:e0:b8:e8:f6:e0:ff:5d:f4:60:a4:ce:9a:fa:20:9e:72:
2b:7c:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:11 2024 by rpki-client on console-fra.rpki-client.org