Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/U5OMjdIeZMi0llcq8cSEou1sL48.roa
File: U5OMjdIeZMi0llcq8cSEou1sL48.roa (raw, json)
Hash identifier: G5WIEEgVolNI74sM4JbKfWV27uLlARP6TCqq4FoG1Co=
Subject key identifier: 53:93:8C:8D:D2:1E:64:C8:B4:96:57:2A:F1:C4:84:A2:ED:6C:2F:8F
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01825ABB090343CAAB72BA41C976CD0FBDC0
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/U5OMjdIeZMi0llcq8cSEou1sL48.roa
Signing time: Mon 01 Aug 2022 18:46:23 +0000
ROA not before: Mon 01 Aug 2022 18:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 185.220.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:bb:09:03:43:ca:ab:72:ba:41:c9:76:cd:0f:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Aug 1 18:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53938c8dd21e64c8b496572af1c484a2ed6c2f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:ed:c1:1e:94:34:10:e5:21:66:c8:3f:fb:
03:70:41:77:8e:5c:c8:7c:81:07:9f:c2:8b:b3:81:
09:3d:26:a3:13:be:f7:ae:47:95:53:3b:08:25:24:
cf:88:2c:6f:b1:e7:6c:e2:e4:c2:d6:0f:95:04:dd:
2d:5e:e9:ec:0d:a8:7b:f2:19:e4:22:00:b9:77:d1:
d2:34:93:87:48:8b:c7:b7:44:01:cf:b5:6c:63:90:
b1:37:39:13:92:75:2e:0a:b4:50:f4:ae:39:d9:a7:
1e:23:4e:de:f3:08:d7:f5:fe:ac:02:7e:96:bd:52:
4f:dc:f4:ae:19:fe:0e:11:53:95:4a:e0:a9:a5:a9:
84:d0:47:4d:da:7c:e8:3e:35:71:97:36:5d:e0:68:
a2:1a:0d:a4:84:f8:6f:0c:e2:ed:e7:6d:76:ae:69:
c9:28:49:e6:8d:5e:1f:5d:f7:14:75:17:03:f2:21:
90:b5:d7:7a:99:09:df:4b:39:8f:c4:64:87:78:fa:
b2:30:44:50:0e:cc:6c:db:c6:3c:c6:6b:d1:2a:c9:
f4:15:d7:66:5d:6a:2f:c0:9b:06:a5:78:0c:9f:19:
57:f9:a9:1f:f6:48:53:4a:cd:dc:f3:f9:36:16:e8:
d7:9c:e7:92:03:e7:24:dd:2b:6d:97:fe:37:85:db:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:8C:8D:D2:1E:64:C8:B4:96:57:2A:F1:C4:84:A2:ED:6C:2F:8F
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/U5OMjdIeZMi0llcq8cSEou1sL48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.147.0/24
Signature Algorithm: sha256WithRSAEncryption
79:62:c2:1b:a2:27:fa:ba:2b:6c:f4:b8:8c:8f:cc:e9:29:3f:
a3:33:ba:2d:ad:c7:9a:e4:79:e3:ab:a8:23:a5:f8:24:4d:aa:
08:86:7b:d1:ba:86:b7:b4:9a:2c:f0:fa:a4:52:55:7d:56:16:
fa:ad:6f:fd:66:7f:8f:29:b4:08:ad:1f:77:03:01:e6:7b:58:
20:dd:d9:74:57:38:a8:0c:b6:63:f0:a5:ea:5e:16:9c:71:c5:
68:0c:27:4b:61:2e:8b:0a:cc:cf:3f:5c:64:4b:c8:8a:4b:e0:
31:ec:05:fb:a2:8b:fc:bf:94:52:9e:df:e6:38:bd:d9:b9:e9:
b4:d3:f4:4c:50:b4:5a:00:c4:5d:1d:36:d4:b2:49:16:34:d1:
9f:2c:c6:0c:81:03:b5:20:66:64:64:91:90:21:b7:a6:59:f5:
62:e6:77:3d:13:1a:36:ca:90:dc:dc:3a:7a:4f:98:d4:1c:94:
32:03:09:fb:df:ba:f3:fb:98:83:9a:1a:2f:9e:a1:9d:9a:af:
c8:a4:6d:76:a9:9e:32:8c:6a:2b:2c:f2:96:5e:96:95:61:61:
e4:f5:6f:3f:d1:17:3a:76:f7:a1:9b:14:67:39:44:0d:49:e5:
df:d2:73:21:ab:89:a9:69:a5:a7:78:cb:a5:88:01:95:73:f8:
42:3a:fe:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org