Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/S1DWdkizmJHthz9LUu82wE-B9h8.roa
File: S1DWdkizmJHthz9LUu82wE-B9h8.roa (raw, json)
Hash identifier: WUn4U82MEUpHftMiKD5IuInV5b6aZcuU99esAld45so=
Subject key identifier: 4B:50:D6:76:48:B3:98:91:ED:87:3F:4B:52:EF:36:C0:4F:81:F6:1F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018533E96521A71944987E36D12AF15DE50A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/S1DWdkizmJHthz9LUu82wE-B9h8.roa
Signing time: Wed 21 Dec 2022 09:00:11 +0000
ROA not before: Wed 21 Dec 2022 09:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51487
IP address blocks: 185.138.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:e9:65:21:a7:19:44:98:7e:36:d1:2a:f1:5d:e5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 21 09:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b50d67648b39891ed873f4b52ef36c04f81f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:9c:37:4e:b8:72:47:c1:82:5f:0a:a2:f4:
ad:df:0f:35:83:9e:0c:64:5b:f8:17:79:c0:7e:7f:
2e:95:4e:4e:7e:46:c9:38:33:40:19:2d:5f:e3:ab:
9c:d6:31:bf:d3:97:0c:7e:5a:6f:ca:fb:a0:28:62:
a1:79:d2:44:49:f2:df:80:a8:98:c6:bc:19:1f:1a:
64:3e:5b:61:84:8a:63:d7:28:22:c0:f7:5a:d9:bb:
ce:d9:8f:14:00:d7:6b:7d:18:42:e1:55:e0:37:0a:
a9:47:49:81:1a:5c:d9:3a:83:f1:3a:fa:42:62:89:
2a:48:98:11:a6:78:28:df:5b:5a:64:e7:15:c3:15:
3c:89:21:54:28:44:0c:ad:ae:f3:e0:77:ea:c0:17:
08:dd:4e:d0:0e:f0:02:32:6f:f2:d3:c7:f7:e8:87:
48:0d:bf:aa:05:c7:ac:67:7a:32:46:03:a6:d8:6c:
0e:67:d9:28:97:49:e7:c5:1b:60:3d:65:ea:b9:b2:
dc:d4:46:d8:9e:1c:70:f4:d2:c2:02:31:4d:80:6b:
71:de:4f:4e:f8:2a:8f:3d:a2:83:26:ed:c1:d6:3a:
66:85:02:d3:f9:67:ef:42:e0:32:20:68:70:99:4c:
f6:66:d3:24:68:37:02:f2:6f:0e:51:56:fb:4f:b9:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:D6:76:48:B3:98:91:ED:87:3F:4B:52:EF:36:C0:4F:81:F6:1F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/S1DWdkizmJHthz9LUu82wE-B9h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.92.0/22
Signature Algorithm: sha256WithRSAEncryption
21:10:5a:35:32:70:ba:38:cc:68:23:d9:b7:df:b3:e7:df:3c:
21:5d:2d:16:8a:a7:a3:f5:2b:26:d2:42:a4:7a:14:e1:cd:d2:
25:9c:d2:29:f0:0b:a8:33:dd:aa:03:41:77:3b:fc:26:3e:6c:
64:5e:42:48:67:c8:e9:35:27:f5:54:5d:07:0d:97:85:d0:2b:
79:92:6e:97:da:e2:58:f0:86:f6:fc:dd:bd:5a:4d:8a:32:b5:
08:7a:f8:90:51:89:62:6f:3e:32:5d:b0:ea:11:9e:ab:ac:3c:
8c:57:9f:13:7a:7d:82:72:0e:62:31:c3:b0:05:cc:fd:ca:51:
8c:d5:a4:a4:5a:6f:73:fa:1b:a5:46:ce:69:06:08:34:cb:2b:
92:53:fc:7f:b9:d9:72:2d:81:97:a0:f7:56:f5:74:69:a9:7b:
dd:26:5d:31:cd:8e:b5:74:a6:6a:22:30:17:b5:49:ce:79:d8:
c6:21:90:67:b5:05:0a:24:1d:29:8b:3d:e2:99:86:6d:4a:c4:
bf:79:be:55:62:99:f7:64:30:48:fb:94:77:c4:99:33:78:a3:
b5:33:dc:41:ad:9d:1c:7f:8c:e0:74:10:26:b6:f8:07:58:7b:
f7:8c:97:dc:74:c3:29:28:b4:ef:93:a1:c5:50:5c:95:1e:07:
82:a5:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org