Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0sjHTbL-y-q5bJub_3UbvzXiSy4.roa
File: 0sjHTbL-y-q5bJub_3UbvzXiSy4.roa (raw, json)
Hash identifier: 90tHJxGoG2nKxKZ6q4LONlYOD+EqbCS4GnD0zuzaCUU=
Subject key identifier: D2:C8:C7:4D:B2:FE:CB:EA:B9:6C:9B:9B:FF:75:1B:BF:35:E2:4B:2E
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01852AF91AA74065A68B7EF9F3272EFB748B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0sjHTbL-y-q5bJub_3UbvzXiSy4.roa
Signing time: Mon 19 Dec 2022 15:20:46 +0000
ROA not before: Mon 19 Dec 2022 15:20:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201435
IP address blocks: 185.72.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:f9:1a:a7:40:65:a6:8b:7e:f9:f3:27:2e:fb:74:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 19 15:20:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2c8c74db2fecbeab96c9b9bff751bbf35e24b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:a8:c9:4e:69:a3:97:4e:79:93:75:87:e3:
a1:91:db:d0:fc:6f:e3:a6:b2:58:30:4f:72:36:b8:
e6:f6:63:3a:50:d4:06:9d:15:4c:67:ff:09:c9:be:
e6:ec:c9:ab:d4:b8:90:ab:41:48:f5:f9:fc:9b:5b:
0c:1a:01:7d:d3:4a:72:e7:34:6f:d6:52:94:60:88:
43:cf:b2:62:52:9b:c7:43:99:e3:f7:b8:f6:2f:a1:
f3:6d:be:1d:eb:23:f9:dc:a4:1f:1e:f1:88:7b:dc:
5e:94:a9:ca:a1:70:64:a8:9a:cf:44:87:66:56:9b:
87:28:1a:15:1c:ca:34:b2:92:8c:6d:a7:1e:64:3c:
af:a7:dd:5a:f4:de:92:ea:05:9c:40:81:a7:db:eb:
2d:2b:b0:28:db:c5:dd:f2:1a:8a:92:ef:8e:9c:7e:
45:99:9d:f3:28:48:c0:5a:e9:8f:a4:20:92:28:ba:
94:59:39:21:59:49:e6:20:4a:78:4d:66:b1:05:ff:
9f:0b:c0:37:07:c3:c9:a0:3e:78:77:54:24:58:51:
5b:45:e0:18:f7:64:3e:0e:89:6a:b7:25:75:aa:d6:
59:06:d9:12:5a:22:18:09:5b:b1:d1:fb:bb:cd:58:
19:64:ae:3b:ff:b3:c8:b5:b4:6e:c9:26:cc:98:c5:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C8:C7:4D:B2:FE:CB:EA:B9:6C:9B:9B:FF:75:1B:BF:35:E2:4B:2E
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0sjHTbL-y-q5bJub_3UbvzXiSy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.52.0/22
Signature Algorithm: sha256WithRSAEncryption
58:29:37:93:a1:e6:7b:02:79:62:d9:67:6f:57:b1:29:53:48:
19:c5:98:5a:6f:36:34:62:df:6c:01:e5:4a:6a:cb:1f:38:ea:
1a:53:4a:15:80:86:b1:0a:bb:59:b6:f8:ab:d4:f9:1e:e3:61:
f6:f0:15:79:99:1a:5e:dc:47:ef:ea:56:c7:8c:b5:e6:ae:ee:
61:c0:e5:dc:6e:f2:33:43:2c:1a:5e:b2:1f:cd:74:0e:67:c0:
c6:25:0c:92:86:3f:87:e7:2b:e8:67:e7:41:3e:98:ae:0b:2e:
c4:09:69:a5:e6:40:bd:b5:24:8d:73:43:cf:e2:12:5f:66:59:
85:e0:82:bb:ff:8e:f1:85:b2:23:f3:82:59:88:dd:3d:31:02:
9a:57:6f:fa:02:44:39:d0:bb:ef:d2:9c:78:34:35:91:1d:2d:
f7:10:4a:f6:67:03:b1:fe:b3:aa:00:d0:10:12:50:a5:be:eb:
0a:5d:06:9e:b9:14:24:ac:3f:11:d2:fd:00:26:8d:a6:8f:99:
54:45:a4:b1:2f:c8:7a:b6:0e:93:5e:35:b4:65:d0:bc:eb:9f:
f5:87:06:11:41:73:ca:ba:3f:01:ce:8b:03:67:45:de:4e:f3:
2a:18:b4:52:91:13:95:29:0b:55:a2:df:43:ae:6f:a0:b4:59:
19:59:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org