Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rcXozl3sYMqRJXALZAUxjNGu2Hs.roa
File: rcXozl3sYMqRJXALZAUxjNGu2Hs.roa (raw, json)
Hash identifier: slncF5qpo0sxOhcb9rORsAONViC+wLf+5UHficypmeI=
Subject key identifier: AD:C5:E8:CE:5D:EC:60:CA:91:25:70:0B:64:05:31:8C:D1:AE:D8:7B
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 028FA052
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rcXozl3sYMqRJXALZAUxjNGu2Hs.roa
Signing time: Wed 27 Apr 2022 10:55:35 +0000
ROA not before: Wed 27 Apr 2022 10:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.22.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42967122 (0x28fa052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Apr 27 10:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adc5e8ce5dec60ca9125700b6405318cd1aed87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:57:c8:15:d3:83:08:35:e0:9c:f7:6d:69:
3b:11:cb:eb:a8:ab:de:9b:e9:f6:8d:dc:54:52:6c:
10:e5:f9:ce:1a:e7:33:61:a4:de:e7:46:a8:05:23:
f2:c4:c2:31:97:fd:61:bb:c8:fe:5a:4b:4e:16:71:
68:1f:dd:bc:f9:5c:f1:04:ce:56:98:ef:98:f7:03:
a4:10:da:56:8c:63:37:bd:5b:ae:6e:69:29:28:44:
e9:e3:55:40:5d:e0:f5:ae:c2:24:ec:1d:ec:b2:5f:
1f:4b:6c:b3:b7:3d:2e:08:98:20:ac:2f:7f:28:d8:
d4:67:8d:ee:04:7c:84:7f:fa:9c:ed:f1:b5:ff:4d:
2b:e9:3c:f3:f3:3a:6e:77:e8:11:01:c8:32:c3:78:
5a:41:91:c2:01:0b:49:28:32:57:b9:0e:40:98:b9:
7b:1b:11:b7:a5:7d:05:d4:7c:8d:d8:10:6f:c9:79:
38:0b:9a:8f:e3:cb:5e:f7:4e:50:5c:ad:e8:5b:c9:
b0:ab:05:91:66:a8:92:d6:f8:3f:7b:06:1d:9d:b3:
06:d0:a8:b3:2b:a1:e0:aa:c6:17:ed:02:8d:b0:66:
ab:32:00:29:b8:74:fa:9d:78:3e:f1:59:6e:f5:0b:
cd:e8:6d:60:b1:ef:13:c5:79:02:19:3a:be:86:ba:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C5:E8:CE:5D:EC:60:CA:91:25:70:0B:64:05:31:8C:D1:AE:D8:7B
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rcXozl3sYMqRJXALZAUxjNGu2Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3b:65:69:1b:13:97:8a:57:d3:aa:7f:06:0a:bc:7a:51:be:
1b:a8:b7:9f:ef:b5:e7:a1:9e:e1:32:7e:0a:48:56:4c:f6:ad:
e7:95:59:d3:4c:0b:e0:cb:db:f8:35:0a:6a:52:bc:a5:a5:e9:
40:0b:6d:b6:bf:2e:68:59:47:4f:b5:39:d3:79:d4:d7:cb:41:
82:b1:c2:39:fb:70:6c:0a:54:30:7a:20:e0:7d:d1:20:69:2b:
09:bf:c0:02:d6:71:39:cb:87:25:77:0f:76:7f:ea:1b:1c:9c:
ad:bc:5f:e4:9c:3f:0b:b4:1f:a4:c0:81:7a:ad:b0:b9:fd:b7:
61:54:1a:f4:29:3d:73:de:8f:ef:47:7e:c2:00:d3:3d:a6:6f:
50:fe:15:29:41:0d:44:99:ed:51:e1:60:c9:b2:f0:a0:51:7d:
02:86:e8:69:a1:fa:ad:b9:1f:15:7e:ee:59:41:c1:82:0f:cf:
04:3f:11:d7:53:44:48:ff:c8:ea:88:ca:a0:70:e5:69:05:f6:
ff:cc:b2:0d:69:9f:92:82:6b:ca:7c:fe:85:ef:7c:35:76:18:
46:11:48:6e:58:4e:5e:41:55:46:75:0e:8e:b1:2e:70:bb:64:
bd:76:9a:2f:7b:60:ca:f1:73:4a:a0:d2:6a:5a:66:4f:07:7f:
65:15:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:47 2024 by rpki-client on console-fra.rpki-client.org