Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/F5W6tmvsrsu8HijZIkVSaQrxMxM.roa
File: F5W6tmvsrsu8HijZIkVSaQrxMxM.roa (raw, json)
Hash identifier: 9uOG3epp3n4d6OgLZM+GWijotf4vyX/sZbddHUSXKv0=
Subject key identifier: 17:95:BA:B6:6B:EC:AE:CB:BC:1E:28:D9:22:45:52:69:0A:F1:33:13
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 109951A5
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/F5W6tmvsrsu8HijZIkVSaQrxMxM.roa
Signing time: Sat 01 Jan 2022 11:59:05 +0000
ROA not before: Sat 01 Jan 2022 11:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48506
IP address blocks: 185.163.192.0/22 maxlen: 32
2a0a:2c00::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278483365 (0x109951a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Jan 1 11:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1795bab66becaecbbc1e28d9224552690af13313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:8f:c1:e7:c8:32:c0:06:f8:b4:2a:a9:7c:
da:3b:d0:5e:84:b0:43:84:35:81:7c:97:fc:93:b5:
10:6f:b4:6a:05:4d:a7:0f:cd:49:f8:b1:be:f0:d2:
3f:c8:bc:e6:d9:10:f8:46:44:9c:fe:60:d7:ef:d3:
61:5a:65:79:ed:41:fa:f5:52:87:56:1b:b3:ef:ef:
36:50:b7:8d:78:db:55:21:53:bf:4d:65:43:b3:14:
99:1e:2a:ed:ea:26:09:31:b0:88:1d:b2:da:cd:09:
4e:d6:2b:7f:b0:c0:af:eb:21:e2:c2:10:37:ff:07:
dc:ce:b2:29:3c:3b:26:4b:89:c3:3c:7d:a9:e8:46:
b3:5b:ee:0c:61:50:9b:94:e4:87:36:b5:e0:05:f2:
1b:b3:51:2c:0c:36:21:64:76:47:6a:78:94:c4:b1:
d3:15:79:89:a9:23:e4:15:55:02:b1:e4:ae:89:16:
90:c6:6b:c6:64:85:e7:6a:10:23:18:04:57:6e:73:
af:35:ed:c8:64:75:d7:74:fc:05:3f:c5:80:7b:e8:
65:e4:de:32:b4:92:ad:dc:57:26:4d:73:0b:2d:eb:
f8:ad:3e:84:3d:d3:c9:00:db:96:36:20:54:56:0c:
13:d0:24:67:bc:a7:e0:a0:7b:40:7f:2f:0a:13:22:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:95:BA:B6:6B:EC:AE:CB:BC:1E:28:D9:22:45:52:69:0A:F1:33:13
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/F5W6tmvsrsu8HijZIkVSaQrxMxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.192.0/22
IPv6:
2a0a:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:e2:3e:d9:1b:d9:86:f2:ec:78:46:b4:48:81:a9:a0:fc:d2:
7a:b9:d2:bc:9d:18:94:b9:c7:20:9e:3d:d0:81:61:bd:5d:ec:
d1:bb:bb:be:0e:1b:5d:89:1a:83:8c:bf:a6:81:56:45:8c:c2:
de:24:7f:16:d3:69:ac:52:29:56:bc:85:95:28:ab:38:90:73:
31:07:68:42:07:10:3f:bb:d2:fe:46:93:3b:62:25:fa:1f:8a:
60:92:f4:fb:c7:b3:8e:29:8f:c0:98:07:ec:37:ee:d2:21:4b:
bf:09:49:2a:45:97:45:a6:9b:4a:bb:e2:c8:11:7e:71:ca:fa:
b8:20:98:74:6a:4f:13:65:33:ca:f4:61:59:41:d8:60:f2:1c:
b4:ad:01:ad:98:e5:1f:b5:87:4e:b1:ef:83:fc:a3:c7:ab:67:
73:24:d3:84:e9:31:50:12:42:62:31:0f:5d:9e:fc:5e:4c:58:
94:b7:20:85:a2:04:83:a0:cb:7b:0d:42:e8:57:17:02:a9:0d:
fe:e1:9b:d8:88:c2:f9:18:b0:e4:f0:35:67:b0:ba:c0:de:df:
a4:85:a0:79:ad:04:3d:6d:17:9c:46:33:4b:f0:22:74:d1:7e:
d9:36:13:f0:6f:6e:67:e6:83:ae:c4:8e:d6:ba:c3:49:24:8c:
e8:2f:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:29 2024 by rpki-client on console-fra.rpki-client.org