Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/hpN5eUOxSk_bAfO0bFthSMIZuhA.roa
File: hpN5eUOxSk_bAfO0bFthSMIZuhA.roa (raw, json)
Hash identifier: kbADsn9uVJZcbKoFvfGlLlU77mIujNjZ7m9V33Cn7Kk=
Subject key identifier: 86:93:79:79:43:B1:4A:4F:DB:01:F3:B4:6C:5B:61:48:C2:19:BA:10
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 0C4E52D6
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/hpN5eUOxSk_bAfO0bFthSMIZuhA.roa
Signing time: Sat 01 Jan 2022 08:56:25 +0000
ROA not before: Sat 01 Jan 2022 08:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 185.168.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206459606 (0xc4e52d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jan 1 08:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8693797943b14a4fdb01f3b46c5b6148c219ba10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:01:e8:a0:42:06:a0:df:97:3e:37:59:e5:
d0:f7:49:a6:4d:f6:a0:0a:40:02:7d:ef:98:75:47:
1c:2c:c3:ac:27:40:bb:ec:8e:f7:0a:29:40:3e:4b:
79:c3:fe:eb:c7:91:29:1d:0c:0d:5f:ec:d2:8a:17:
be:10:fa:5d:56:fd:40:c4:90:92:f7:58:90:66:a9:
d2:b0:b4:22:0b:37:a5:bc:b1:c9:dd:8c:92:87:1a:
d9:84:49:3c:f9:e7:6b:14:0b:f2:45:b7:72:80:be:
15:ba:67:7d:bc:1c:a0:2b:23:65:bf:65:7f:a3:6e:
41:a2:09:81:ab:7b:1c:3f:19:0a:f4:7a:d7:5d:59:
3d:4d:2c:80:9e:98:11:0c:5c:9e:69:ac:9b:a3:d7:
ed:ce:3c:fd:76:6c:a1:57:6b:5f:f4:4c:e1:1a:aa:
de:30:b5:d7:b8:d4:16:12:46:15:22:49:92:db:fc:
1e:ce:40:65:3b:24:63:f9:4d:67:bd:c1:4a:07:cc:
15:c9:04:99:92:d7:0c:02:2c:f8:4a:d2:01:57:23:
03:d1:18:ae:79:e3:99:0a:d1:4b:e1:97:77:08:cc:
8e:a7:9a:b1:78:11:dd:8e:da:4e:cb:88:35:23:90:
f1:b5:41:76:43:d3:8f:1e:9f:e6:1e:6f:b7:8f:58:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:93:79:79:43:B1:4A:4F:DB:01:F3:B4:6C:5B:61:48:C2:19:BA:10
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/hpN5eUOxSk_bAfO0bFthSMIZuhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cf:22:de:8d:4c:7a:b6:48:60:35:e5:0f:c7:c2:c7:ff:99:
ac:41:12:da:4d:c7:25:8c:f1:f6:d8:78:40:1f:b5:2d:ca:c5:
40:66:a9:ee:ae:d2:04:ca:0b:3c:3b:6d:67:ba:9f:0d:83:59:
ce:24:dd:db:40:a6:15:c3:21:d6:5b:e4:a5:2e:d4:51:04:93:
e7:74:1c:6a:f8:e5:14:ab:ff:43:41:00:a2:19:4a:c1:c0:5c:
ce:36:0e:07:e1:a5:22:50:5e:16:5d:b8:f1:b7:f9:1f:29:28:
64:4e:c7:42:b1:8b:17:1d:b6:8d:6d:0b:25:59:40:76:5d:f1:
f8:33:71:b8:f6:5c:7b:f1:2b:dd:50:97:bf:a1:1a:9d:89:50:
20:95:7e:8d:b3:71:52:b0:22:81:45:bb:3b:d4:1e:95:0d:8d:
7b:9a:51:64:bc:1f:14:10:67:4e:9b:e5:66:d0:c2:67:e9:75:
e2:93:98:58:db:15:49:61:47:94:d8:b4:b9:5b:e6:e3:a3:3f:
64:0b:0a:07:6a:4f:ba:41:52:62:17:69:21:8d:89:74:bb:3b:
0d:ea:4f:90:f6:e0:93:8d:3d:29:4b:e8:aa:65:01:ff:ee:e4:
3e:1b:f1:77:46:3f:5c:6d:d5:b6:26:9b:64:ac:22:3d:33:0a:
90:65:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:34 2023 by rpki-client on console-fra.rpki-client.org