Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/rHH8U46A0RtSo5qov5PrW7PlDTI.roa
File: rHH8U46A0RtSo5qov5PrW7PlDTI.roa (raw, json)
Hash identifier: SUzJhWq1iWeE5HK6CVphYNyctqm++4T21KDsYIAv4R8=
Subject key identifier: AC:71:FC:53:8E:80:D1:1B:52:A3:9A:A8:BF:93:EB:5B:B3:E5:0D:32
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 0FA79F4B
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/rHH8U46A0RtSo5qov5PrW7PlDTI.roa
Signing time: Sat 01 Jan 2022 09:54:22 +0000
ROA not before: Sat 01 Jan 2022 09:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42183
IP address blocks: 185.189.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262643531 (0xfa79f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 1 09:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac71fc538e80d11b52a39aa8bf93eb5bb3e50d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:e0:37:ff:7b:6b:06:40:a8:ad:fc:03:76:
1d:4c:bb:2f:43:34:12:e2:cd:46:50:d0:5b:3c:fc:
cd:fb:bd:b3:f7:3a:c4:d1:75:1d:3e:06:90:00:da:
4f:cd:4a:fe:1c:30:45:23:16:dc:86:8f:3c:5b:b8:
4d:26:bd:0e:42:76:64:79:b5:e8:ad:f6:62:85:cf:
0a:76:76:0f:20:ea:19:a2:e7:44:e8:37:ee:c8:06:
0c:f8:11:be:ea:40:36:44:98:16:0a:b9:b6:8d:6d:
95:34:99:12:5f:94:45:ac:2b:3d:b4:65:91:2d:2e:
66:73:16:87:4e:6c:13:fe:27:2f:c3:90:ad:2d:6e:
84:65:12:f7:ec:fb:42:4b:e5:7c:f4:11:99:e6:8b:
28:87:24:d8:a4:a0:29:00:2c:d9:a7:4f:1e:25:49:
cf:aa:25:bf:50:35:61:35:7f:e9:a3:41:75:2c:a4:
98:85:b2:95:6b:ba:68:84:20:4b:19:7a:63:58:71:
5f:b5:9d:2d:b7:7f:63:be:fe:73:94:5f:47:83:3a:
0f:48:1b:7e:9c:f3:21:fe:80:71:2c:82:34:8e:75:
b7:31:bf:d4:5d:8d:ce:eb:62:e5:f8:58:5d:07:09:
d1:7f:7e:af:4b:60:5a:45:d6:b7:4d:ae:c2:61:d6:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:71:FC:53:8E:80:D1:1B:52:A3:9A:A8:BF:93:EB:5B:B3:E5:0D:32
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/rHH8U46A0RtSo5qov5PrW7PlDTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.90.0/24
Signature Algorithm: sha256WithRSAEncryption
96:35:fe:68:fc:5f:88:f1:9d:8b:0c:9d:cc:1c:01:59:66:9f:
a8:83:29:b9:21:eb:18:fa:7d:0b:46:62:8a:99:7d:5f:23:e7:
66:2c:04:23:de:af:b5:96:f7:ec:4b:63:a6:af:72:7d:8e:8e:
a5:88:b8:1e:76:b1:18:2f:d7:8d:06:74:fa:2e:5c:0e:0c:8a:
88:e1:31:f5:e3:0c:d8:f4:b7:b9:3e:e0:6e:28:14:1f:91:9e:
2b:56:17:68:26:08:7b:7d:18:3c:5c:d5:0f:ab:ce:5b:9e:27:
e7:96:70:5b:d4:a0:f8:d0:78:2f:85:0f:88:d8:d9:3e:c2:16:
f0:4b:ef:22:8f:e4:20:f5:ac:aa:2f:81:f9:58:fe:d0:7b:78:
2c:f3:81:fc:aa:76:92:d2:b8:2a:c9:7e:4d:24:20:a1:14:bc:
65:e2:44:df:14:17:08:71:28:d3:fd:3c:91:4b:91:dc:0d:30:
c1:2d:5c:f5:df:cb:63:55:7e:d7:ed:bd:55:01:3c:c7:80:25:
af:83:cc:cc:b1:8e:ac:b3:76:68:0d:5c:56:eb:96:22:d2:6e:
92:f7:eb:d7:bb:14:02:d6:bb:ee:53:76:6d:57:d8:70:e9:ac:
b0:74:fc:da:69:9b:fb:a5:9d:48:4e:1a:47:00:a5:b0:12:9c:
5f:9e:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-fra.rpki-client.org