Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/iNzneRs5k3JolxcMpYmotfTaDdM.roa
File: iNzneRs5k3JolxcMpYmotfTaDdM.roa (raw, json)
Hash identifier: 329Fq2sKXz/J5pCQROk8weIR3eJpIOCCTAua1T9eOaQ=
Subject key identifier: 88:DC:E7:79:1B:39:93:72:68:97:17:0C:A5:89:A8:B5:F4:DA:0D:D3
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0805DDAC
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/iNzneRs5k3JolxcMpYmotfTaDdM.roa
Signing time: Sat 01 Jan 2022 06:55:48 +0000
ROA not before: Sat 01 Jan 2022 06:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202409
IP address blocks: 185.1.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134602156 (0x805ddac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88dce7791b3993726897170ca589a8b5f4da0dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:09:2d:32:64:5d:7b:e1:df:14:af:c3:67:
9a:23:44:f7:f1:4d:d0:bb:8a:4c:ae:bf:18:a5:df:
97:f2:99:95:e1:d2:81:68:f2:dc:57:2d:41:bd:24:
b0:9c:60:47:59:75:53:72:6b:08:48:69:db:93:de:
72:9b:46:3c:80:c1:6a:92:cb:46:d5:ba:c6:c0:21:
2a:17:df:e0:25:02:f6:c1:1b:a9:2f:9f:48:4d:37:
95:d7:89:97:4d:11:0b:1f:de:46:ea:db:5d:45:0e:
dd:50:fc:9d:a7:02:9f:8c:b0:f3:06:af:07:a3:26:
b3:34:fe:33:05:30:bc:8e:ce:04:3b:e0:47:93:e2:
7e:fd:85:ef:80:a0:28:c8:6a:7c:4a:d2:d1:fc:32:
3a:14:1d:ed:80:59:7a:e2:ce:50:95:2b:12:1e:50:
6a:c0:58:b0:f8:a0:66:7a:f1:a9:07:01:e1:b7:b2:
09:84:30:0e:6c:8f:1a:94:b4:83:8e:dc:fc:fb:51:
08:35:d0:1c:c8:4f:98:f2:f8:da:55:b0:a5:a9:7b:
c4:74:5e:6d:0a:5f:73:98:fe:20:d3:55:ff:24:bb:
9f:91:d2:92:d2:ef:62:55:b5:03:f4:da:0b:29:b0:
9b:00:2c:bf:02:2f:3d:58:d6:7a:4f:26:8d:0f:04:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:E7:79:1B:39:93:72:68:97:17:0C:A5:89:A8:B5:F4:DA:0D:D3
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/iNzneRs5k3JolxcMpYmotfTaDdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.155.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8b:0e:c8:a8:45:9f:7a:8d:fb:14:69:25:a2:fc:45:30:4a:
9d:42:1f:fb:20:95:84:c5:9c:65:d7:d1:aa:f8:a3:29:21:81:
ee:4f:e3:16:7b:5e:fa:58:63:57:5b:c7:44:0d:fe:3b:dd:19:
79:33:a7:57:db:9d:3f:c8:21:d2:e6:d3:d0:af:92:54:80:a9:
32:bf:31:5d:48:72:19:5b:ed:8a:25:6e:c4:b8:0b:44:0d:a2:
a5:e7:e4:9b:24:52:b2:38:e9:33:9d:dd:38:28:f2:be:47:45:
fc:29:9f:6c:6c:d9:e1:82:51:11:f9:fb:66:b7:c5:c4:7e:fa:
42:48:b9:19:29:8e:69:90:02:f0:d1:2a:72:7c:e0:17:0e:d0:
f7:fa:f4:ee:5f:2a:30:47:f2:bc:46:b4:58:a6:d7:b4:2c:50:
a5:1c:23:c2:70:b7:7a:8e:46:6b:84:1c:d2:21:6a:af:09:ac:
3e:c5:59:3d:b4:32:b9:1b:63:4c:09:d1:3b:69:49:c1:c9:ae:
97:57:48:86:08:71:be:bb:07:b9:5f:24:66:66:bf:0e:7e:11:
04:89:bf:19:a2:49:b0:e2:d8:f9:78:d3:b7:bc:95:69:d6:b9:
6e:8d:da:64:e4:a2:45:bd:d3:7c:60:e6:2d:c4:d9:b3:ba:18:
0e:98:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org