Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/s2U6pdWVPgpz5cGxmr7A1cUDHD0.roa
File: s2U6pdWVPgpz5cGxmr7A1cUDHD0.roa (raw, json)
Hash identifier: g+djGNQN2awuuyQAjzOhb4T+eGSKs8ufUIonZFPyuqc=
Subject key identifier: B3:65:3A:A5:D5:95:3E:0A:73:E5:C1:B1:9A:BE:C0:D5:C5:03:1C:3D
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 02CB8CD7
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/s2U6pdWVPgpz5cGxmr7A1cUDHD0.roa
Signing time: Thu 19 May 2022 12:55:30 +0000
ROA not before: Thu 19 May 2022 12:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.22.57.0/24 maxlen: 24
147.185.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46894295 (0x2cb8cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: May 19 12:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3653aa5d5953e0a73e5c1b19abec0d5c5031c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:9e:f2:c3:b9:ce:7b:0a:5a:d6:63:40:90:
d0:a8:5f:8b:9e:4d:7d:84:82:95:14:bf:c1:4c:c2:
77:13:34:54:71:dd:14:be:09:41:3a:9f:2b:0a:a3:
8c:ab:6d:4f:fd:70:00:b8:1c:82:a4:a7:3b:1b:7a:
47:9c:55:02:e0:96:5a:bf:ad:26:7c:05:0a:8b:d8:
fc:98:cd:ae:7a:d6:7c:fd:e1:5b:92:90:7e:c9:de:
22:23:05:33:11:93:40:ad:fd:d9:f4:56:f9:9e:65:
96:a9:51:70:7a:bd:20:67:56:18:9d:2b:cb:80:36:
4f:17:8b:e5:6e:81:90:5d:e3:cf:16:b0:fb:fd:a6:
27:3d:0e:72:67:01:4a:bc:af:36:b5:71:19:02:ed:
ba:ef:d1:5d:8b:9f:b5:16:02:cb:02:42:a9:b7:59:
94:84:0d:b4:7c:97:e1:5e:b8:82:ce:c7:d7:7a:6c:
a9:ff:fe:7f:b9:0d:2a:82:93:3c:c7:49:e0:e2:00:
8f:d6:94:dd:6b:fb:11:31:49:59:3c:cb:68:bc:04:
e8:c7:f2:79:9e:1f:9e:5a:b8:71:80:40:c5:73:85:
d0:69:48:cb:1d:94:29:04:f9:9a:e6:2d:64:8f:a1:
9c:34:9f:c3:2e:6c:90:db:97:90:2a:3f:0f:8e:26:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:65:3A:A5:D5:95:3E:0A:73:E5:C1:B1:9A:BE:C0:D5:C5:03:1C:3D
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/s2U6pdWVPgpz5cGxmr7A1cUDHD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.163.0/24
185.22.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f7:36:c5:c6:8f:70:6e:a3:34:6c:96:74:49:73:10:26:91:
49:48:0f:74:0f:4a:ae:00:83:eb:e8:4f:3c:01:78:d2:be:75:
c8:2f:cf:f4:23:5b:8f:7e:a5:1a:51:e4:d9:59:f4:4d:24:92:
c5:a0:05:be:c1:b2:de:e3:40:29:a4:e3:96:3e:c6:66:8b:36:
28:fb:1e:71:4c:47:81:c0:ca:e4:18:c2:05:49:45:1c:1f:f4:
c7:e1:2a:b4:5b:eb:03:a2:72:ec:f9:23:bd:7d:b2:e8:bd:4a:
2f:82:e5:02:0c:09:a5:ef:5b:5b:bd:56:af:16:90:6b:c6:f6:
91:15:18:22:1e:15:8f:20:b0:8e:41:bf:1f:3d:c4:5e:62:7b:
b1:20:03:40:9d:fd:20:ce:a1:a3:99:1f:ce:be:e7:39:24:8d:
e0:ac:2a:25:27:69:80:81:34:3c:c1:9b:bc:4b:77:d7:e2:28:
96:87:f3:06:08:66:82:f9:ab:ac:44:db:00:ce:96:19:6f:16:
66:85:0f:5f:92:98:e1:6c:6a:32:34:70:a4:20:43:42:4b:2a:
a7:a7:b0:10:99:3c:c6:23:da:40:f5:28:ef:47:df:96:ed:2a:
af:31:f5:84:e2:dd:d6:77:9a:5d:5a:42:88:78:7a:e8:d7:4d:
86:d7:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org