Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/An5I-PLuWbJfUMubDGkl4kndLk4.roa
File: An5I-PLuWbJfUMubDGkl4kndLk4.roa (raw, json)
Hash identifier: fV2q+NNTIPESKV5cjqnqy8HfnTqVwcL9IIBL5LldYL0=
Subject key identifier: 02:7E:48:F8:F2:EE:59:B2:5F:50:CB:9B:0C:69:25:E2:49:DD:2E:4E
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 08216FC6
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/An5I-PLuWbJfUMubDGkl4kndLk4.roa
Signing time: Sat 01 Jan 2022 08:00:39 +0000
ROA not before: Sat 01 Jan 2022 08:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49321
IP address blocks: 185.245.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136409030 (0x8216fc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jan 1 08:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=027e48f8f2ee59b25f50cb9b0c6925e249dd2e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:15:03:ca:31:92:c8:d1:51:34:0b:18:ae:
8a:bf:69:d2:54:c3:32:87:50:e6:7d:44:0f:2b:e2:
9b:1d:c9:5d:b5:fe:91:00:4e:ff:76:a3:54:b2:48:
cd:18:b5:96:e6:1f:99:4b:a7:72:e7:aa:b5:c6:db:
3b:dd:40:b4:cb:95:54:6b:b1:76:16:08:86:32:6a:
0e:3f:80:41:52:e3:96:e1:99:0f:a8:92:3b:11:08:
31:58:88:c6:09:ff:de:1d:83:f4:04:8e:38:15:e7:
b5:a0:0c:86:d6:30:88:95:05:05:c4:84:93:d6:ad:
fc:79:46:23:50:71:11:12:36:3e:83:a0:76:65:f8:
a4:be:56:63:eb:15:ed:e9:b9:82:65:7a:a7:b1:02:
76:45:32:99:1c:e2:81:a9:6a:b0:73:2c:20:17:11:
3e:a5:ea:c7:6b:65:40:f9:3f:90:bf:9a:61:ee:f1:
91:2e:40:0e:44:a8:f8:97:ae:3d:0a:bb:16:27:3c:
b6:f7:e2:c5:a5:24:08:ff:fc:57:f4:dd:5b:56:5a:
53:a5:13:e6:b6:d2:11:19:0a:a9:0c:fa:ad:51:47:
29:bc:da:a5:fe:7c:8d:1d:b0:7b:8f:1d:38:6d:f5:
ac:57:dd:f4:a1:c4:bb:69:67:63:32:fa:51:ac:76:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7E:48:F8:F2:EE:59:B2:5F:50:CB:9B:0C:69:25:E2:49:DD:2E:4E
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/An5I-PLuWbJfUMubDGkl4kndLk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.58.0/23
Signature Algorithm: sha256WithRSAEncryption
26:b4:f0:0d:ca:c9:41:5f:f0:a8:0c:e9:cb:e4:d9:62:7a:8d:
b1:17:39:83:06:fc:0a:f9:82:e3:cc:c2:c5:ee:e2:29:e1:98:
f9:40:32:71:70:9b:35:e1:56:5e:c5:5f:93:b0:ac:ce:0e:83:
c8:f8:6f:4a:75:07:99:7d:dc:df:bb:46:7d:67:50:a7:8f:4d:
66:b1:d4:17:32:22:46:8d:22:c2:15:10:84:11:11:c5:54:01:
61:50:d6:98:4d:d1:02:e0:aa:a6:44:ac:3c:32:94:4a:1a:d3:
f5:5a:51:01:44:93:c3:f4:30:c5:96:29:92:fe:9b:b7:43:00:
65:12:be:56:65:18:76:46:04:48:ec:ea:01:d1:82:95:a7:01:
63:1d:29:e4:8f:16:a0:0c:47:1b:db:0a:53:64:04:d9:ef:80:
63:01:8a:c6:f0:a1:92:5e:ff:d3:55:5b:62:3a:53:e9:fd:1f:
a1:b1:70:d6:27:92:58:c6:8b:7d:73:e1:3e:fd:2b:f6:25:1a:
1b:53:8b:71:94:7f:c8:4d:8f:47:ab:3f:db:9e:57:e7:22:fe:
1b:b6:f1:74:6d:f2:4d:28:23:c4:d9:01:11:e5:87:bd:65:67:
d1:72:8c:6f:d5:f5:28:e9:04:3c:9b:5d:d4:8d:31:a0:a1:fc:
5f:cf:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:49 2025 by rpki-client