Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/81Qo12nMaVJX56WShg2Jn_s4xnk.roa
File: 81Qo12nMaVJX56WShg2Jn_s4xnk.roa (raw, json)
Hash identifier: XcFxuSJxNJGNxzv0iwWAP6FHuXkrSDuCExWbdP7l9D4=
Subject key identifier: F3:54:28:D7:69:CC:69:52:57:E7:A5:92:86:0D:89:9F:FB:38:C6:79
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 01855D19F9FB173F2B62CEB7F84F40B3BC6A
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/81Qo12nMaVJX56WShg2Jn_s4xnk.roa
Signing time: Thu 29 Dec 2022 08:57:41 +0000
ROA not before: Thu 29 Dec 2022 08:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 185.36.140.0/23 maxlen: 24
45.155.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:19:f9:fb:17:3f:2b:62:ce:b7:f8:4f:40:b3:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Dec 29 08:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f35428d769cc695257e7a592860d899ffb38c679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:2e:e6:b6:e2:78:7f:58:22:64:54:23:a5:
27:52:fb:56:f1:ef:3b:fd:94:4b:8d:4f:ce:a4:f7:
39:0a:08:9e:fb:ef:7c:1c:b7:b9:a6:18:8a:84:fb:
09:2b:a2:d8:1f:36:18:74:31:4c:de:6a:8a:b2:56:
a4:89:e8:5a:60:9d:2c:b6:f3:61:e5:bb:4e:b3:8f:
7a:af:ef:0c:5d:6d:8f:03:b3:c7:ae:23:a9:c0:c6:
5a:60:ba:85:85:5f:10:8a:02:01:ba:44:6c:a8:34:
67:19:d2:bc:ae:7c:84:90:16:a1:80:25:3b:5b:77:
ac:fe:fb:20:65:c7:15:cd:14:97:0a:a3:d4:68:1a:
c0:18:ff:6f:02:dc:d2:12:15:cc:04:63:99:31:f2:
ee:9a:d3:4c:b9:77:36:7b:83:2a:69:82:49:50:30:
16:33:8b:79:18:5d:1e:4a:f5:76:b8:18:2b:c5:b9:
d4:e7:05:d4:c1:a2:7c:79:8b:66:b0:ba:a0:39:46:
4d:35:ce:44:fa:1f:a9:79:03:da:02:81:cd:75:7a:
7d:30:7c:b8:de:fe:15:be:24:81:48:2f:3d:c4:1f:
4d:1d:d1:12:97:63:b9:62:8a:08:cf:99:05:b5:c8:
33:a9:84:f4:2a:c5:8b:b8:c1:32:86:21:5c:89:0f:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:54:28:D7:69:CC:69:52:57:E7:A5:92:86:0D:89:9F:FB:38:C6:79
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/81Qo12nMaVJX56WShg2Jn_s4xnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.122.0/24
185.36.140.0/23
Signature Algorithm: sha256WithRSAEncryption
85:f6:e1:00:43:20:92:54:8f:68:09:f2:67:6a:4b:0e:6a:6d:
da:f5:41:05:e4:d0:40:73:50:73:32:33:5d:55:86:e7:fb:c4:
99:9f:d2:85:16:24:a6:95:ac:35:bb:99:a3:e7:ea:2d:bb:dc:
6d:e8:ec:ab:a0:64:c7:6e:e7:b4:76:f2:a7:4e:c8:34:a3:cc:
a8:86:4a:c1:c0:e3:d9:8c:0c:de:2a:97:c3:c1:91:cc:b9:89:
0d:f5:1d:de:42:2d:97:e1:0f:27:c0:e7:e5:ed:50:f7:7d:fd:
d9:11:c5:73:60:6c:44:4d:c7:b8:35:b1:7d:33:3a:8e:76:69:
85:d9:08:7e:a5:29:5b:12:67:16:e9:04:26:e9:7e:7c:00:09:
11:f0:90:07:75:eb:25:98:ad:bd:7c:f2:d3:30:26:c5:5e:de:
c5:9a:7a:8b:22:c4:dd:fa:92:ec:29:ab:78:8c:50:bc:5e:7d:
94:f6:25:7a:b8:b9:05:73:60:83:d5:ac:d6:44:0a:71:4d:03:
4d:6a:a4:9e:57:4d:ea:0e:0d:9f:c4:77:22:4a:6a:25:9e:09:
cc:bd:cc:b1:20:ba:7f:40:1a:cc:6a:06:09:31:a0:eb:25:4b:
e5:89:d7:be:34:a7:70:65:1d:b0:fb:ce:7c:d8:8c:63:43:39:
32:93:f8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org