Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/3YMUQnuUEDG8R_5iBENcUOVp3A8.roa
File: 3YMUQnuUEDG8R_5iBENcUOVp3A8.roa (raw, json)
Hash identifier: 54lFFGihlh2i6if7FI46MIIF3vveyTDUoKuhu0GyE7w=
Subject key identifier: DD:83:14:42:7B:94:10:31:BC:47:FE:62:04:43:5C:50:E5:69:DC:0F
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018308ED
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/3YMUQnuUEDG8R_5iBENcUOVp3A8.roa
Signing time: Sat 01 Jan 2022 13:02:09 +0000
ROA not before: Sat 01 Jan 2022 13:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.22.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25364717 (0x18308ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 1 13:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd8314427b941031bc47fe6204435c50e569dc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:e9:2a:b9:ca:4a:24:b8:b4:ae:9c:fe:92:
60:27:86:73:71:83:42:4d:e8:8b:da:67:ee:4f:fb:
1b:8b:83:45:db:3f:2c:ec:79:76:d8:76:69:bc:16:
17:3a:d0:96:b2:77:0f:28:5d:61:bf:b2:db:59:d6:
01:77:7c:96:d2:38:97:30:7a:c6:b9:5c:7f:1a:4d:
c8:cb:c3:67:5a:f7:9d:8a:7f:69:81:0e:b5:13:1e:
63:40:b0:a3:25:ae:c5:02:4d:18:1d:c7:4b:cd:db:
84:4f:87:36:63:61:bf:30:85:cc:54:a4:11:de:97:
91:8b:6f:ac:7f:59:64:fa:97:3f:81:0e:7d:e9:21:
3c:18:f6:a2:19:3e:b8:89:16:e2:c1:d0:80:03:03:
b9:16:53:ca:0c:52:ac:84:da:09:f6:c5:f6:45:c4:
e3:4d:c2:f6:81:e1:40:b5:8c:3a:7f:53:73:a0:4f:
e5:48:38:4f:33:47:c3:06:6c:42:4d:98:86:87:2f:
ff:fe:67:e5:1e:5c:23:b2:3a:d4:d1:f5:b3:19:50:
c5:74:24:70:7c:d4:b5:13:04:93:61:ae:e4:0f:e2:
26:2b:88:60:b5:54:00:e9:a2:2d:36:6e:b5:16:c0:
a3:66:01:26:73:dd:1e:3f:26:20:4b:b2:4a:7b:a1:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:14:42:7B:94:10:31:BC:47:FE:62:04:43:5C:50:E5:69:DC:0F
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/3YMUQnuUEDG8R_5iBENcUOVp3A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.56.0/24
Signature Algorithm: sha256WithRSAEncryption
52:35:fd:e2:1c:bb:57:4f:7a:b3:12:b3:ca:fd:97:fb:53:e1:
24:de:45:bc:7a:c1:bc:41:96:a1:df:93:b1:dc:6d:4e:88:0d:
a2:91:13:74:bb:f2:16:2c:e6:c3:8c:33:e9:d3:25:10:63:25:
a1:b1:23:a7:69:8f:db:ce:b1:40:ff:e0:f5:50:e9:4c:b9:67:
50:eb:31:70:8e:73:30:49:fc:67:ba:43:75:98:6b:05:74:16:
f6:a5:f7:67:01:d7:8b:89:13:dc:2e:50:dd:e3:20:00:9f:aa:
30:15:a8:27:02:23:a2:a6:76:7f:51:ad:dc:1d:08:9a:c6:f0:
a5:4f:4b:f7:0a:8d:fc:d7:7e:6c:6e:35:cc:38:33:8c:ec:cf:
39:45:a8:12:eb:a5:60:14:57:17:32:a3:61:8d:5d:c9:18:5a:
b6:9a:23:3e:e4:08:c4:53:60:3e:34:78:10:52:87:71:13:e6:
39:b8:cf:ee:49:dc:d0:85:f1:91:12:d9:f9:1d:ec:cb:b8:b0:
9e:80:92:26:24:3f:6a:9f:c1:79:e9:c9:25:09:8c:bb:c0:0a:
04:ff:17:4b:6b:e2:d9:6f:9c:2e:cf:71:ea:df:ba:1d:54:78:
66:12:02:5c:7f:19:70:20:b8:62:41:46:a4:30:6a:44:39:eb:
ca:60:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org