Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/XBsw4D_6spnFrwgBRurPevgKrdQ.roa
File: XBsw4D_6spnFrwgBRurPevgKrdQ.roa (raw, json)
Hash identifier: TbB+RqC18Al+PRINtUrOmV0nOMrhGKgB5OJxzsK9cm0=
Subject key identifier: 5C:1B:30:E0:3F:FA:B2:99:C5:AF:08:01:46:EA:CF:7A:F8:0A:AD:D4
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 02953DAB
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/XBsw4D_6spnFrwgBRurPevgKrdQ.roa
Signing time: Sun 03 Apr 2022 22:06:55 +0000
ROA not before: Sun 03 Apr 2022 22:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.75.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43335083 (0x2953dab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Apr 3 22:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c1b30e03ffab299c5af080146eacf7af80aadd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:08:97:73:a4:b2:c7:ed:da:ac:23:d9:fa:
b2:4a:f3:be:ca:54:b4:ab:92:f0:c8:a6:15:89:bb:
41:5c:bd:6c:87:3f:86:f4:58:0c:75:8d:e1:67:53:
b8:99:8b:90:19:c1:90:00:6a:cc:68:44:72:86:f1:
53:0c:61:27:9c:e8:17:43:51:80:33:f1:8b:29:2a:
cb:c1:c5:63:ce:4e:d7:93:9b:9e:d4:f0:76:76:7e:
b4:38:27:e6:af:3e:56:d7:7e:5c:a9:be:91:8d:1d:
66:06:15:a2:1c:12:be:c0:51:48:61:28:6c:9e:2a:
90:9f:9e:13:9d:3f:40:a4:bb:39:a0:55:28:f5:31:
7d:95:62:13:fa:ad:1f:94:aa:1d:7c:4b:a2:9c:92:
5f:00:ea:17:09:36:57:94:63:76:bf:36:98:8d:d0:
4a:d2:70:e6:a2:99:b6:1c:fc:2a:4f:71:58:59:30:
33:bd:b3:29:b6:4c:c6:49:6f:a8:d2:5a:04:b7:35:
71:c0:91:a4:fd:4c:b5:56:19:ee:d5:20:45:70:62:
39:31:c6:87:0f:41:b1:6f:04:b3:d1:6f:86:1b:f1:
ff:10:92:87:59:5a:96:5b:51:c8:76:a2:2d:b4:d5:
ad:02:a3:b2:e6:6d:50:53:1e:c4:92:ec:f9:d1:d0:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:30:E0:3F:FA:B2:99:C5:AF:08:01:46:EA:CF:7A:F8:0A:AD:D4
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/XBsw4D_6spnFrwgBRurPevgKrdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d5:bd:e0:4e:3b:7a:5d:24:9e:f6:f6:7b:fc:1a:d6:c7:ce:
b1:2f:20:3b:40:bc:69:28:06:36:23:09:18:75:6c:84:b4:34:
50:46:ac:93:f5:84:6c:b8:9f:3a:74:ea:d1:52:c4:65:ac:9b:
7f:a5:53:a2:24:44:9c:17:35:ff:b2:c6:4e:0d:bd:33:73:f7:
9f:e2:e8:fa:43:72:d1:c1:9b:c2:cd:f0:dd:d2:96:fc:13:67:
b0:f4:6e:ce:bd:7a:3e:74:8b:be:ab:b2:f1:40:61:b1:42:f5:
42:6b:68:d7:fb:65:72:90:dd:ee:b7:10:6b:ea:1d:c0:af:4e:
75:06:49:b9:ad:f2:54:58:36:30:27:84:94:94:01:07:75:46:
76:3b:a9:c8:89:83:2e:97:66:3e:86:3d:46:84:f9:0d:29:63:
89:24:61:fa:08:b9:7c:c2:7f:ed:da:5b:a5:0e:d3:f1:f7:7d:
e1:bc:b4:2c:5b:69:b4:9c:04:a4:3b:26:41:9a:3e:d3:05:79:
e6:01:e6:7e:7d:a7:ef:93:d3:3d:51:ca:52:23:85:b5:87:60:
9c:be:c7:d0:43:7f:d9:b4:27:a3:c2:27:4d:48:9d:1b:bf:82:
d9:32:92:f5:1b:50:dd:b8:6b:73:3d:2e:80:46:48:3d:f2:63:
04:5f:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-fra.rpki-client.org