Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/U8AYFBOhSnE_7xjyEXLUGg8DDiw.roa
File: U8AYFBOhSnE_7xjyEXLUGg8DDiw.roa (raw, json)
Hash identifier: OlGWAPfkCxKzR6M0+0kSMfvGFAR6a8F8uOHxwEGT/+c=
Subject key identifier: 53:C0:18:14:13:A1:4A:71:3F:EF:18:F2:11:72:D4:1A:0F:03:0E:2C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 03345C94
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/U8AYFBOhSnE_7xjyEXLUGg8DDiw.roa
Signing time: Sat 01 Jan 2022 16:04:30 +0000
ROA not before: Sat 01 Jan 2022 16:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203106
IP address blocks: 185.128.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53763220 (0x3345c94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53c0181413a14a713fef18f21172d41a0f030e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:e3:ac:65:7e:81:a4:21:c4:88:36:71:e6:
72:85:59:5d:fe:1f:ed:b8:e4:23:20:6f:c9:43:2b:
9e:4b:a3:3f:a8:70:a2:3b:b3:64:9b:03:b8:6b:c2:
a5:3c:ac:c6:66:df:f2:00:ae:18:80:eb:de:6d:ea:
6a:4f:b1:89:c9:ba:d7:1b:13:06:d7:c6:82:df:c6:
fe:f8:3d:02:90:bd:82:c4:aa:4a:be:d2:9e:bd:b7:
e7:db:37:eb:03:41:bb:d8:f0:12:11:be:1d:36:92:
20:85:24:fb:ff:cf:aa:36:af:ef:54:ae:61:9b:f2:
59:2a:a0:d2:2b:40:fc:a8:55:e5:17:94:61:c5:3a:
44:57:a0:d0:08:46:46:6e:b1:bc:5c:96:14:91:b8:
c4:3e:52:46:f9:2d:00:aa:f6:61:d7:93:56:20:af:
a0:49:77:b7:b8:40:98:3f:61:ea:2d:04:b5:6a:a5:
0e:fb:7c:53:9a:f6:bb:9e:ae:4d:b4:8a:0a:50:d1:
70:45:14:9f:63:00:1a:ce:e9:2c:08:b1:b3:d1:d4:
c9:28:f6:dc:50:57:15:2b:c0:37:65:fc:37:44:96:
d8:1a:a5:b9:1c:0b:77:be:61:c4:76:54:c1:dd:d9:
17:4c:7d:d1:89:dd:db:bb:30:07:10:8a:e4:e8:81:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C0:18:14:13:A1:4A:71:3F:EF:18:F2:11:72:D4:1A:0F:03:0E:2C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/U8AYFBOhSnE_7xjyEXLUGg8DDiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.104.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ac:9d:62:c5:fa:7b:29:09:9d:2e:5d:b1:b9:0f:a3:e5:46:
eb:2d:58:85:fc:32:2b:66:5c:a0:22:86:b8:a8:0c:9e:97:ba:
75:80:54:68:33:65:c7:fb:b1:b4:be:1b:fe:2a:06:76:4f:b9:
bb:c7:60:d6:9f:24:b8:02:54:e1:57:ce:dd:bc:dc:20:37:10:
e2:6b:6b:a2:b1:a6:38:18:56:cf:19:36:fd:dd:21:c6:ba:da:
99:72:77:ff:09:1c:87:63:d1:18:b5:18:b7:b7:8a:9f:ba:69:
9e:b3:62:96:9e:d2:34:58:a8:90:d3:d5:10:d6:71:42:88:2a:
0a:5c:e2:a2:ba:14:3c:df:7a:1e:45:55:31:19:d5:6a:c6:a8:
d7:02:66:db:3b:c7:f2:a7:bf:ef:e3:1d:bf:39:3a:45:d7:79:
80:38:af:7e:a8:6b:2a:54:a5:97:70:6d:23:ce:30:93:c1:98:
23:19:77:0a:1b:47:24:fb:38:da:57:b4:30:96:33:a4:d0:7e:
65:58:11:b9:35:45:5a:09:9c:a2:30:7d:c2:4b:f7:cd:08:43:
35:b5:49:c8:e6:87:7f:b5:bc:52:1c:d9:91:15:25:c5:5d:21:
a5:ca:5a:a0:e0:39:8b:e9:16:0f:69:fd:27:da:c0:63:1d:19:
7d:08:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org