Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/bhp3zqGFS-lzqlYnKQ9LIs7QHc0.roa
File: bhp3zqGFS-lzqlYnKQ9LIs7QHc0.roa (raw, json)
Hash identifier: 90NFwdh2GVcAoDNXUA8wXs09T/QnfZgk6OMBlsMGjT4=
Subject key identifier: 6E:1A:77:CE:A1:85:4B:E9:73:AA:56:27:29:0F:4B:22:CE:D0:1D:CD
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 018281E1019D04592D396CDA23E2B6294127
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/bhp3zqGFS-lzqlYnKQ9LIs7QHc0.roa
Signing time: Tue 09 Aug 2022 09:13:03 +0000
ROA not before: Tue 09 Aug 2022 09:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203903
IP address blocks: 185.158.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:e1:01:9d:04:59:2d:39:6c:da:23:e2:b6:29:41:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Aug 9 09:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e1a77cea1854be973aa5627290f4b22ced01dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:8a:3c:d9:bb:b2:89:32:07:d8:ed:57:a3:
9b:4d:27:6b:ca:8a:05:e7:b0:28:82:cc:58:bd:46:
6b:79:a7:ca:e1:14:ef:c0:cf:b0:0c:08:43:2b:ab:
7f:2d:41:25:b3:63:b8:bf:b7:4c:e0:54:59:9e:e9:
f6:84:c4:5d:4b:f2:99:94:73:b0:a2:ed:05:b8:4a:
9b:57:a8:a1:7f:04:ea:c7:01:08:86:68:8a:47:bd:
91:03:a4:e5:23:29:0e:e0:68:bb:70:8b:d8:47:1a:
5f:2f:81:bd:3a:ad:bd:c6:b6:f6:ee:8b:93:59:d8:
1b:42:f2:52:0f:31:fc:61:00:be:22:7c:81:0e:fd:
f9:59:72:6b:42:c4:44:4f:b6:fb:1f:f9:0f:f3:9d:
5b:e7:e0:c6:c5:9e:bc:08:f9:a8:09:90:53:a6:3e:
c1:fa:34:08:7a:3f:07:fd:e4:2e:6d:6f:c2:07:3b:
92:a3:8b:41:9c:55:32:a7:2c:28:94:e9:13:a6:df:
7a:1f:d8:39:c8:bd:cd:04:10:6a:11:4c:5f:79:b7:
4a:7b:8c:14:5d:3c:2f:80:3e:1f:69:00:16:41:be:
76:98:b1:a0:d6:d3:96:cd:bd:7d:80:75:15:b9:db:
5e:58:16:0d:37:08:1c:f5:73:14:de:62:e2:b1:3f:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:77:CE:A1:85:4B:E9:73:AA:56:27:29:0F:4B:22:CE:D0:1D:CD
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/bhp3zqGFS-lzqlYnKQ9LIs7QHc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:09:c6:85:34:15:8f:47:4f:f9:31:11:fd:43:f3:58:fd:0d:
41:f5:0b:41:3e:50:52:64:78:40:4d:34:c8:10:5c:f2:20:dd:
69:47:89:2b:0b:31:8b:77:e9:8e:a5:32:98:e4:8b:b4:bc:2a:
e9:64:57:f2:b0:33:30:d2:14:73:8c:88:77:ea:d8:8a:0e:55:
15:4f:a9:bb:37:76:2e:d6:14:69:47:5b:16:4d:93:ac:22:b4:
0c:40:9e:42:c4:02:62:51:d8:ce:56:21:2a:20:1d:de:35:ae:
32:45:3f:06:ec:e4:26:63:74:d6:d3:58:ce:5b:96:26:06:f4:
83:30:e2:2a:d6:5b:80:38:09:fc:88:d5:a8:98:b4:33:5c:e9:
7e:a2:9d:cc:a7:63:5c:28:77:53:ae:37:40:a8:a8:71:18:05:
0d:88:70:d6:dd:91:d2:1a:ba:e3:2f:45:93:dc:33:c7:76:dd:
70:93:34:59:dc:28:e4:de:6c:32:27:21:88:1d:1f:d1:d9:a6:
fa:2d:57:e9:a5:d6:45:67:52:66:4c:b3:84:09:89:e6:64:7a:
dc:a5:24:df:b9:c8:2d:1e:7f:61:eb:a4:68:d9:9b:1c:02:6f:
84:90:58:5d:48:6b:5d:41:c4:00:14:1e:6c:90:d5:4f:65:2e:
d3:51:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:15 2024 by rpki-client on console-fra.rpki-client.org