Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3smXI4FGhiIcoO6cWXWk-QvcBFU.roa
File: 3smXI4FGhiIcoO6cWXWk-QvcBFU.roa (raw, json)
Hash identifier: m4XuEynzSujo05SIpdqusxMNxdmz9yDK6O3A59xyPLk=
Subject key identifier: DE:C9:97:23:81:46:86:22:1C:A0:EE:9C:59:75:A4:F9:0B:DC:04:55
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183080B50F619177675A279C7C897819A4D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3smXI4FGhiIcoO6cWXWk-QvcBFU.roa
Signing time: Sun 04 Sep 2022 10:28:22 +0000
ROA not before: Sun 04 Sep 2022 10:28:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42922
IP address blocks: 185.252.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:0b:50:f6:19:17:76:75:a2:79:c7:c8:97:81:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 4 10:28:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dec99723814686221ca0ee9c5975a4f90bdc0455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:69:23:74:71:66:22:88:19:6d:9c:9f:0c:
64:25:3b:21:39:51:d6:83:e9:46:07:56:fe:69:3d:
56:3e:3a:53:8d:41:a7:ab:e6:2d:49:a8:f3:bb:2c:
84:50:60:58:a0:d3:0c:34:5e:77:2c:10:2b:6c:64:
93:4d:c9:a7:3f:43:81:bc:d7:1e:40:cc:73:77:3c:
f7:24:ad:8a:f4:94:75:69:54:1d:83:9f:e8:db:40:
a6:8e:a2:1b:93:1d:cf:90:cd:02:d9:16:7b:78:8b:
3b:f9:8a:f3:6d:17:dd:31:14:7c:55:89:65:6a:3e:
21:55:36:3b:51:ea:47:9c:5b:74:3e:35:2d:61:d9:
11:f7:37:94:2a:de:d4:26:99:a8:11:67:dd:97:ad:
eb:65:39:cd:40:67:61:e0:5d:98:57:24:6b:9c:86:
d3:fb:58:2d:a3:02:1c:29:48:9f:6d:23:4d:d6:8d:
74:40:94:68:ad:06:49:95:80:f3:d5:3e:3b:15:71:
c8:b9:ee:e2:cd:7f:95:06:13:fb:70:b9:45:59:20:
19:8b:8e:5e:f8:70:90:3e:6e:04:ec:75:67:5f:99:
21:98:a9:a3:48:aa:84:2a:b9:42:60:ae:81:b9:8e:
0b:07:b2:3f:db:78:54:70:75:3c:f7:0c:0f:23:07:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:97:23:81:46:86:22:1C:A0:EE:9C:59:75:A4:F9:0B:DC:04:55
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3smXI4FGhiIcoO6cWXWk-QvcBFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:68:85:4b:c2:4c:ab:78:de:78:cb:49:e3:fc:e7:56:3b:bf:
66:23:ef:0c:e4:ce:23:f5:1c:f7:92:27:3e:0c:bb:91:08:fa:
a4:cf:0b:07:c2:b9:23:a0:76:53:fe:69:f2:35:05:e4:a7:c8:
0d:71:12:10:0d:f8:3a:b9:15:8f:40:42:9b:52:78:a2:5a:ff:
3d:ba:08:2c:63:f6:0a:0d:a1:fe:a4:25:9b:cf:44:d8:0b:8e:
7b:a9:5f:d0:99:14:a9:e9:51:0d:af:8e:c6:3e:84:c1:3a:16:
bc:e7:15:e1:81:ac:a9:a2:1f:2c:e2:64:0f:5d:6c:5b:b6:63:
10:1c:fb:32:7f:e1:42:92:ea:61:08:dc:10:97:64:96:2b:0d:
95:5c:34:6f:eb:95:29:67:5f:75:71:f4:f3:30:e0:f4:4f:1f:
46:1a:0e:06:ab:d3:4d:dd:af:73:a8:22:57:21:e3:13:2e:40:
76:0d:fd:39:18:14:13:81:4d:75:b5:69:14:ae:ed:79:38:2e:
22:0a:76:e4:55:d0:7d:c1:c1:ce:8c:b7:5b:68:e4:3b:f2:45:
7a:ee:ae:52:f2:30:76:b7:86:11:d1:67:59:e1:45:5f:de:c3:
5d:df:36:d6:71:a3:10:4c:c9:9a:29:65:3e:b7:88:10:26:87:
f2:22:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org