Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/5nXiodzMDP2faZh6Fy2urHP3Jlw.roa
File: 5nXiodzMDP2faZh6Fy2urHP3Jlw.roa (raw, json)
Hash identifier: Han0rOKMIAil46uI2Zu7BASd8mcdBlm5Q1OBFYMN8gI=
Subject key identifier: E6:75:E2:A1:DC:CC:0C:FD:9F:69:98:7A:17:2D:AE:AC:73:F7:26:5C
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 03E0D04E
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/5nXiodzMDP2faZh6Fy2urHP3Jlw.roa
Signing time: Tue 22 Feb 2022 14:32:05 +0000
ROA not before: Tue 22 Feb 2022 14:32:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204080
IP address blocks: 185.115.104.0/22 maxlen: 24
185.115.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65065038 (0x3e0d04e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Feb 22 14:32:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e675e2a1dccc0cfd9f69987a172daeac73f7265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:63:a7:0e:47:aa:3b:cd:80:5b:5f:d1:eb:
0a:45:48:bd:98:99:6c:9f:c9:b7:49:9c:bf:94:91:
9e:26:ca:ec:89:e4:f6:da:a3:7d:71:3c:cc:ff:7b:
5a:db:67:0d:f5:21:97:b1:ab:d9:ba:bb:b3:30:3f:
82:80:55:db:b7:31:90:a4:f9:6c:bb:df:ee:0a:73:
76:dc:56:e6:60:81:27:db:99:e4:98:4e:a7:2a:46:
00:23:f8:d7:84:07:75:59:5f:9a:ef:c2:cc:c7:0f:
e8:01:a1:d4:a9:c9:ed:6c:b4:56:fa:24:d1:4f:e1:
4d:7a:c3:d7:22:3e:e2:e7:c2:eb:62:5e:63:ab:75:
1d:6c:58:b8:fb:c8:4c:74:e6:82:d2:e1:4b:e0:c6:
64:d2:b8:dd:dd:53:8a:6f:50:d3:27:9d:8a:a1:c4:
b0:49:1a:0d:81:1d:dc:32:fd:78:55:f6:5e:f5:6d:
7e:64:f7:db:bc:b3:1b:65:34:86:7f:e8:cd:90:03:
65:4a:01:a7:1c:7d:d0:1b:cc:59:2c:b1:b5:56:71:
3b:9c:c8:48:a4:89:14:5d:2f:5d:42:1b:e7:82:b8:
b3:6a:0f:c6:d2:74:83:15:f1:69:0c:ca:b7:d4:40:
51:2c:d0:c4:d4:81:7a:f7:70:8a:1c:68:9a:78:78:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:E2:A1:DC:CC:0C:FD:9F:69:98:7A:17:2D:AE:AC:73:F7:26:5C
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/5nXiodzMDP2faZh6Fy2urHP3Jlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:50:d4:9c:2a:4d:13:80:ba:26:74:8b:f4:70:89:6a:b3:f3:
ef:e9:e1:81:5b:2f:9f:1c:86:65:5e:cc:97:40:f2:7d:53:1d:
3c:07:8e:20:5c:3c:23:f4:d1:e5:d7:3c:20:13:d6:bd:af:b8:
10:e9:32:be:ab:02:96:4d:85:c3:82:55:75:9d:62:9f:72:32:
b1:7f:d0:b4:19:58:4a:bb:e7:38:27:6f:22:4b:8e:12:8b:aa:
39:5c:76:4b:f0:0a:b8:1f:1e:31:16:9a:15:d4:87:a5:d7:80:
43:3e:ba:2e:47:67:ee:5c:1a:c6:df:f6:64:8a:f1:3f:d2:05:
d2:1b:f3:f9:76:98:86:a6:e8:52:39:0d:87:1d:18:7a:46:a3:
41:65:a4:b0:05:0d:c3:b9:5e:e7:95:16:f2:7c:3b:15:fb:da:
0f:c6:5b:26:aa:b6:03:54:b2:2c:05:26:e9:9b:aa:4e:86:7f:
68:4c:87:83:5c:79:a0:fb:2c:9f:8f:c7:d8:c2:c2:38:16:85:
bf:0e:1a:63:fe:ff:d9:aa:91:63:c3:3d:e4:fb:e4:c6:f2:dc:
c6:2e:eb:80:0a:74:26:65:5b:04:73:e4:ab:36:8d:3f:7e:89:
75:fc:10:7d:8b:c9:d0:c8:0c:4f:92:c4:ce:96:3a:f0:5a:3f:
72:32:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:16 2024 by rpki-client on console-fra.rpki-client.org