Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/ay5VKVA2-BWLWcU8PuyRjExp1tY.roa
File: ay5VKVA2-BWLWcU8PuyRjExp1tY.roa (raw, json)
Hash identifier: 6IMEzu+fO1iKB6wRePQL1JqUR57vyf2aRG8oCoRiq+0=
Subject key identifier: 6B:2E:55:29:50:36:F8:15:8B:59:C5:3C:3E:EC:91:8C:4C:69:D6:D6
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 5755
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/ay5VKVA2-BWLWcU8PuyRjExp1tY.roa
Signing time: Mon 31 Jan 2022 11:34:36 +0000
ROA not before: Mon 31 Jan 2022 11:34:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58173
IP address blocks: 185.96.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22357 (0x5755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Jan 31 11:34:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b2e55295036f8158b59c53c3eec918c4c69d6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ea:a8:80:a7:05:6f:9d:dd:64:04:e8:59:72:
20:13:8f:1f:61:9a:c8:67:4d:64:cd:29:4f:68:5f:
29:79:e6:0b:e5:72:25:4f:f8:60:b1:61:aa:e5:5a:
56:da:6d:f6:f2:59:f3:31:6b:e0:44:f3:c8:d8:f6:
b4:3e:d8:2e:59:08:91:99:3f:22:e4:1f:f9:9d:38:
40:a2:4e:86:35:e3:51:39:c7:32:e8:8c:6c:f9:44:
9e:de:4e:de:07:94:22:e9:25:6f:aa:f2:9d:2b:bf:
93:d5:56:17:2b:96:fd:1c:0e:8d:ba:f9:4e:67:7a:
05:09:34:e4:62:7a:74:b1:8b:4e:f7:2b:53:e1:f6:
ab:71:27:93:66:2c:8b:89:74:c5:00:d5:19:13:b6:
65:25:ae:5d:06:77:f7:8b:c7:3e:85:ab:b1:66:9b:
ea:fe:3f:bc:79:40:23:b9:4b:8b:14:a2:d1:8d:ab:
71:e2:12:78:39:14:7f:78:f9:83:45:37:ff:4b:9c:
ac:5f:82:a2:60:5f:73:c9:f8:aa:85:7f:d4:60:5a:
15:97:0f:e9:ef:13:71:66:81:8a:4f:90:35:41:81:
42:6f:05:47:6d:21:7e:49:02:eb:90:3c:e6:b5:5e:
1c:8b:f0:04:60:19:35:0f:70:72:0e:f5:a5:2a:b6:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2E:55:29:50:36:F8:15:8B:59:C5:3C:3E:EC:91:8C:4C:69:D6:D6
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/ay5VKVA2-BWLWcU8PuyRjExp1tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:47:22:6f:1c:52:f1:54:39:08:0a:fd:a7:aa:06:db:f0:53:
7c:eb:ef:05:51:4e:cc:18:ae:9f:54:ed:23:99:be:78:ec:06:
6b:52:30:29:82:98:3c:23:3a:6f:64:b5:66:fd:e5:81:74:71:
fd:7f:2a:74:f6:a6:15:c1:fb:3e:4e:40:84:4d:0a:25:a6:10:
00:ac:a9:de:86:e5:8b:3b:b5:52:f3:16:df:6e:c9:30:e7:da:
fa:c8:9b:af:29:ff:c5:13:e0:1e:4c:e6:fe:c9:72:f7:3d:ce:
ef:4f:23:1e:53:2d:9f:d3:bc:06:57:8f:fa:3d:22:da:4f:7d:
be:87:13:9a:52:f7:35:1e:fc:5e:72:81:8d:56:a3:90:db:34:
3d:c0:63:fb:fc:e2:77:61:8a:21:53:0a:ac:dd:7c:f8:d6:f9:
e1:4c:ea:6d:47:e4:e9:37:b4:65:28:82:65:4b:0f:a6:e5:f7:
4c:ca:30:31:92:42:22:44:c3:0c:a7:d1:d7:ea:f3:0b:89:06:
d4:d0:19:32:89:a4:fc:83:1f:9d:e9:48:1e:4a:98:6b:52:72:
df:ae:fc:05:75:1d:25:09:51:00:f1:3c:5f:58:7a:cb:18:af:
ae:9b:c0:0a:06:53:31:64:d3:df:48:2a:78:22:53:6d:1e:3d:
cd:9f:5c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:28 2025 by rpki-client