Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/saExr-yJ1v8fYu42OCyoAEediAQ.roa
File: saExr-yJ1v8fYu42OCyoAEediAQ.roa (raw, json)
Hash identifier: ZNWqTjBGvewGB+sAA7ZY7j/W+309isadeWQ9yh3Bh7Q=
Subject key identifier: B1:A1:31:AF:EC:89:D6:FF:1F:62:EE:36:38:2C:A8:00:47:9D:88:04
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 06B8A181
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/saExr-yJ1v8fYu42OCyoAEediAQ.roa
Signing time: Sat 01 Jan 2022 05:06:31 +0000
ROA not before: Sat 01 Jan 2022 05:06:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204860
IP address blocks: 185.181.56.0/22 maxlen: 22
80.254.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112763265 (0x6b8a181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 05:06:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1a131afec89d6ff1f62ee36382ca800479d8804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:d7:e0:cb:d1:ee:e0:c7:7e:3c:3b:e0:76:
04:ea:9d:99:ac:ad:8b:17:58:ea:bf:2d:ad:cb:0a:
7f:d6:ec:f0:25:fd:b6:cb:d7:25:6d:51:fb:93:11:
6c:b6:df:a2:9f:ca:e3:8a:7d:65:da:ee:4a:39:70:
11:ef:1d:33:0c:00:6b:d6:0c:a8:5d:bd:c0:75:51:
87:1b:da:3a:59:a7:8c:fd:fe:13:72:5f:f5:dd:37:
44:cf:7a:f0:d8:cc:d3:a7:6c:c6:a4:1b:61:e2:bd:
6f:f9:a8:dc:87:23:87:bf:d1:8e:c9:8f:6b:98:26:
29:12:8f:4a:06:e9:1e:fd:ef:e0:ad:86:87:0b:b7:
79:74:71:75:8a:f3:67:3a:3f:de:40:68:95:74:9d:
6e:e6:2c:1f:b4:9a:a9:d5:5f:5e:b6:6e:c1:d3:80:
80:4d:6b:d7:11:84:b5:dd:cf:c5:0b:d5:53:e9:2b:
ed:af:52:37:7c:51:15:3b:d9:83:86:ed:e1:ab:d7:
ad:8d:9a:51:c7:72:d0:a2:2f:ca:00:04:d2:98:45:
91:a7:bd:37:96:8c:e7:db:3b:e0:af:65:b9:f5:dd:
13:b4:00:78:df:cc:5e:48:01:2e:6f:38:b6:89:0b:
15:04:c9:76:b9:98:1e:14:b6:0a:0f:12:a7:74:24:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:31:AF:EC:89:D6:FF:1F:62:EE:36:38:2C:A8:00:47:9D:88:04
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/saExr-yJ1v8fYu42OCyoAEediAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.236.0/22
185.181.56.0/22
Signature Algorithm: sha256WithRSAEncryption
43:e0:f4:e1:17:82:88:da:fe:b8:8b:28:2a:1a:ff:60:b0:e8:
fb:ca:1a:72:31:b3:d5:79:a8:77:c8:e0:73:78:e8:1e:69:fa:
3a:32:96:d4:90:8d:ad:09:bc:4a:66:2a:c1:4e:de:49:2a:8c:
d4:3c:d0:6e:b0:d4:89:74:cf:e9:96:8c:76:68:0f:c2:3e:d0:
0b:47:74:59:96:4a:a4:c7:a4:22:ba:b7:a5:8a:bd:19:49:21:
3f:84:64:c5:b0:de:2c:3f:23:d5:d6:83:9e:a5:2c:56:96:a6:
6f:ce:20:41:2a:ca:8c:17:fe:d9:4f:20:58:0c:db:54:7d:e6:
de:1b:3a:95:d3:1d:3d:85:49:23:04:5e:0c:62:34:12:40:1a:
2f:99:c6:d4:b0:e2:c2:18:dd:ab:07:a8:d7:cf:10:23:95:60:
db:58:5f:b9:9d:8c:6a:95:05:4f:11:eb:6e:00:6e:18:da:a4:
62:85:82:c4:ea:4d:b6:54:8c:8e:ed:31:8f:c9:5c:07:f9:f1:
51:32:ec:02:f0:40:ca:95:3e:52:58:c3:5a:00:21:5f:73:b1:
07:9a:c1:07:87:67:6b:4e:b5:7a:70:df:50:8b:c1:75:f6:9e:
27:fb:d0:c0:18:a8:9d:e3:4d:8c:f9:b1:99:49:5d:54:40:a6:
ef:c8:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:34 2024 by rpki-client on console-ams.rpki-client.org