Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/XnLeB0Jdlw2O9Xn8fZS1yUVNdeQ.roa
File: XnLeB0Jdlw2O9Xn8fZS1yUVNdeQ.roa (raw, json)
Hash identifier: XCXx95h+iOWoSQ/fiSDfxuAEwK8qu3cMC7J7EIXLO6o=
Subject key identifier: 5E:72:DE:07:42:5D:97:0D:8E:F5:79:FC:7D:94:B5:C9:45:4D:75:E4
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 1680E5D3
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/XnLeB0Jdlw2O9Xn8fZS1yUVNdeQ.roa
Signing time: Sat 01 Jan 2022 05:04:30 +0000
ROA not before: Sat 01 Jan 2022 05:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59883
IP address blocks: 185.67.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377546195 (0x1680e5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Jan 1 05:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e72de07425d970d8ef579fc7d94b5c9454d75e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:10:af:e0:e9:34:f9:2a:84:fa:96:43:4f:
f1:e2:46:4b:c1:95:bc:30:25:a0:7b:e0:bf:9e:f2:
62:89:b6:e1:4f:ae:46:d3:f7:f4:fe:22:0a:ce:0d:
f9:71:66:2d:04:cb:9b:d7:c1:98:56:fb:44:a9:bc:
dd:fb:83:5d:58:df:21:4e:bf:fb:ae:63:b2:54:4d:
d5:00:4b:8e:76:3a:03:c9:ba:28:8d:50:e8:38:26:
93:88:5a:27:77:0d:ff:64:44:ae:c8:22:f4:67:e2:
88:87:49:33:f4:e2:41:f3:e4:ff:64:2d:0e:89:b3:
23:f5:f3:39:51:f3:96:93:44:97:21:09:49:96:a1:
9f:3e:46:03:ce:fd:79:a3:33:a2:61:e6:f9:b8:13:
f0:ec:dc:bf:40:73:ef:5f:c9:23:0d:0f:46:bc:db:
83:9b:01:66:f1:65:a9:a7:bc:17:d8:36:f3:ec:6b:
28:78:e5:86:b1:b0:0b:21:63:d6:a3:d4:eb:80:4f:
b6:5c:9c:14:15:3f:24:5a:52:5b:29:22:78:34:69:
67:88:3a:0f:ce:14:2d:b0:1f:85:7f:b3:49:b8:33:
1c:74:24:49:70:a1:24:28:b2:bf:d1:21:3c:7c:b4:
3a:65:23:11:8f:30:c9:f2:f5:74:0c:75:22:e3:ba:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:DE:07:42:5D:97:0D:8E:F5:79:FC:7D:94:B5:C9:45:4D:75:E4
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/XnLeB0Jdlw2O9Xn8fZS1yUVNdeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.160.0/22
Signature Algorithm: sha256WithRSAEncryption
96:38:ac:cb:d2:f7:d1:3a:32:15:6c:8b:70:40:62:cd:de:0e:
2b:8a:ad:5e:93:0d:b6:3c:89:de:24:0c:35:95:63:1a:5e:c8:
1b:34:8c:e3:78:6e:6a:ed:31:86:5b:31:32:74:42:26:eb:7a:
a8:58:cc:e5:5b:d7:77:c7:95:a2:79:62:d7:40:5c:0a:44:3e:
b6:1a:8d:9b:c0:a0:20:f0:7f:0c:b4:70:7a:f6:62:35:41:92:
6d:fd:f7:54:3e:b0:13:af:cc:db:81:ba:11:78:23:7f:5f:ff:
8f:12:54:45:c9:38:7b:36:7c:c9:de:ea:d5:84:2f:ae:70:63:
6b:30:6e:04:31:66:bf:cf:5a:8f:94:98:93:ab:3f:e5:b3:2e:
d8:e8:81:23:d2:41:e2:22:7d:95:9b:42:d9:5c:a5:b0:48:3e:
7b:49:33:da:7b:72:ab:df:c4:ec:c3:55:bd:55:b6:b2:6a:ec:
87:b5:ca:c0:fe:0b:03:fc:fe:2d:94:b9:d9:67:34:2e:28:78:
9c:f2:b3:3d:cb:4b:c9:12:c8:50:5d:a8:3d:77:b6:eb:97:ac:
0c:f2:50:17:0f:a0:58:e8:08:29:00:b9:93:62:84:1d:a0:12:
40:43:ec:1c:f9:79:02:03:2e:21:e2:8b:1b:d8:63:37:e4:af:
25:50:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org