Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/sP8yuPcSo36sjrW_dqgxjJLmXfE.roa
File: sP8yuPcSo36sjrW_dqgxjJLmXfE.roa (raw, json)
Hash identifier: SZaOulPBaqaX9XKO1SC8plfAH6/gr6BCPJ38lk5ra1I=
Subject key identifier: B0:FF:32:B8:F7:12:A3:7E:AC:8E:B5:BF:76:A8:31:8C:92:E6:5D:F1
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01FD544B
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/sP8yuPcSo36sjrW_dqgxjJLmXfE.roa
Signing time: Wed 23 Feb 2022 10:04:39 +0000
ROA not before: Wed 23 Feb 2022 10:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 147.185.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33379403 (0x1fd544b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Feb 23 10:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0ff32b8f712a37eac8eb5bf76a8318c92e65df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:11:11:8b:83:0d:14:fa:63:bf:02:79:c8:
42:97:3b:43:7a:a0:80:30:4c:e1:e9:de:4b:18:a5:
db:34:94:f1:31:12:53:24:a8:ee:90:43:d6:dd:0d:
7a:ca:73:bf:de:7e:f5:4d:a6:dd:14:c8:01:3c:d2:
89:45:8e:94:50:9e:88:55:c8:1f:11:88:83:b8:2e:
22:c2:17:95:83:b5:df:b1:75:c7:a2:63:6f:04:18:
12:d9:37:37:2b:29:f8:cb:67:af:7c:b2:84:8c:3d:
03:6e:53:47:83:c8:49:20:1a:f5:07:8d:04:8e:80:
9f:43:62:5f:0e:f5:76:02:2b:1c:67:c0:77:07:55:
93:00:8a:f4:e5:97:0a:d9:e7:b9:e3:5c:be:4b:bb:
c0:aa:31:00:fd:75:43:86:2d:45:ea:7b:90:d6:e4:
67:d0:73:61:7e:7a:3e:45:5b:88:09:0c:7d:71:03:
0d:30:3d:f7:ad:88:74:7f:a4:76:78:c6:77:1d:ba:
6c:1a:65:68:4f:d5:38:4a:85:3c:f5:ef:25:c4:2c:
6e:0a:3e:d0:8b:39:43:29:46:cc:bc:c3:6c:16:84:
62:93:fc:f7:12:a1:15:69:bd:36:b7:1c:dc:5f:63:
f8:07:0d:49:69:a3:31:ba:27:a2:a9:49:b8:6b:80:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:32:B8:F7:12:A3:7E:AC:8E:B5:BF:76:A8:31:8C:92:E6:5D:F1
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/sP8yuPcSo36sjrW_dqgxjJLmXfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2d:d9:df:01:cc:7a:40:71:8e:e1:35:4d:8a:f9:9d:ae:b3:
2c:4a:2c:c7:81:84:f1:97:3e:9d:63:9a:13:bb:43:05:a4:50:
a7:fe:b7:3b:74:bc:78:82:57:08:07:c0:e7:32:77:2e:4c:7a:
39:7e:02:ef:6e:f7:92:44:50:99:4c:f3:2f:04:27:dd:62:c0:
8d:7c:9e:2a:06:d3:6d:8e:9e:c2:d4:c8:f0:7b:24:38:8b:85:
ee:0f:6c:b9:03:1d:fc:ee:b1:45:e6:fb:18:aa:0a:e2:2a:aa:
df:50:72:cd:55:ba:49:13:5d:91:86:c1:1d:be:31:1b:84:50:
0f:7e:1c:15:6f:f0:05:45:62:cc:40:32:0e:32:8d:71:e4:67:
87:86:1c:88:cb:1f:d5:e5:a1:cf:0a:a9:f4:4d:2e:12:f2:90:
5e:59:e8:0d:71:ac:5b:1f:d4:58:f9:e7:a8:ec:65:8e:91:b7:
17:cc:6f:25:29:1f:63:4f:75:be:d7:44:0b:b0:01:09:b4:94:
f0:46:78:5d:a3:5f:0c:39:54:aa:45:d4:06:49:2d:4a:00:51:
c5:62:e9:76:d4:32:31:41:7f:fa:d4:40:3d:49:57:bf:03:21:
d5:f2:d5:d9:08:6d:1e:21:cf:fc:af:b8:29:6b:6a:33:aa:dc:
b1:03:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:47 2024 by rpki-client on console-fra.rpki-client.org