Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/52VGf0g_n_CA7gRq3yOuvnjCIeY.roa
File: 52VGf0g_n_CA7gRq3yOuvnjCIeY.roa (raw, json)
Hash identifier: AZ4vWzvXLnmN+IhyHodYrCL6VilcI+N72d4desN6nXU=
Subject key identifier: E7:65:46:7F:48:3F:9F:F0:80:EE:04:6A:DF:23:AE:BE:78:C2:21:E6
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 09EE6335
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/52VGf0g_n_CA7gRq3yOuvnjCIeY.roa
Signing time: Sat 01 Jan 2022 08:55:26 +0000
ROA not before: Sat 01 Jan 2022 08:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50749
IP address blocks: 185.134.96.0/22 maxlen: 22
185.202.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166617909 (0x9ee6335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Jan 1 08:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e765467f483f9ff080ee046adf23aebe78c221e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:c6:74:51:8b:89:81:e0:03:08:bb:8b:a9:
3f:83:c2:7a:ff:c9:78:46:51:fc:0e:a4:1e:44:81:
68:1a:6e:1e:a0:fd:70:f3:76:c7:85:8f:a8:c4:a9:
19:c2:ff:d8:a8:b2:b0:e7:f3:14:0f:6b:0b:59:aa:
31:76:85:8e:c3:f1:f9:94:d0:54:cc:e9:3b:7d:11:
b1:f6:3d:28:54:ae:d0:d5:a7:ea:69:0e:7e:fa:aa:
59:28:74:3a:58:8c:19:24:00:e7:44:2d:23:fe:c1:
23:90:0f:c2:3a:ce:c1:b3:d1:54:63:07:a3:26:83:
ac:7a:93:2f:72:08:d6:3e:ba:fe:ca:de:c0:30:eb:
53:33:ab:04:5a:f2:bf:af:00:08:01:57:41:ed:21:
d2:24:b5:76:78:9f:ac:7e:1e:75:8e:b7:98:77:5f:
1e:08:67:0c:b2:70:24:f5:56:77:16:78:77:60:fc:
83:d0:66:20:c3:dd:d8:ed:d0:64:39:5b:6b:77:bc:
54:5e:b5:d7:e8:6c:91:77:83:c5:8a:80:e0:6e:af:
99:c3:69:71:84:31:c8:53:34:5a:6c:0e:6b:83:40:
63:d9:f2:d3:c5:74:73:2a:17:9c:5a:55:f6:a8:69:
63:8f:93:6e:01:9a:a1:f9:ea:49:be:a2:43:53:d9:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:65:46:7F:48:3F:9F:F0:80:EE:04:6A:DF:23:AE:BE:78:C2:21:E6
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/52VGf0g_n_CA7gRq3yOuvnjCIeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.96.0/22
185.202.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:fa:a2:cf:8b:96:e4:12:b4:73:36:bb:14:19:18:72:de:e1:
6a:15:11:f1:20:f1:05:e9:88:d3:5c:19:4e:4e:e9:db:40:df:
51:a4:77:54:4e:f0:92:d9:c3:b3:a9:7d:0e:d9:fa:d3:e2:45:
77:d8:be:cb:b4:4d:04:4b:d1:1a:4a:33:ff:2f:f0:dd:9c:76:
17:0b:41:53:1a:80:02:89:3a:51:db:45:57:74:fa:e3:7a:ed:
40:55:60:25:5c:95:26:a5:31:b7:58:51:6a:90:72:ae:3c:14:
0a:9a:fb:39:4d:88:37:b0:04:f4:90:19:b3:5a:5c:26:50:06:
0c:96:bc:4f:75:d1:c3:b2:5f:4e:86:2a:fa:43:6c:a4:85:ca:
f2:27:d9:b8:f5:e7:e2:9b:8b:a0:73:20:9c:b9:ad:ff:30:a5:
8b:72:82:dc:3d:5a:95:b3:7f:59:b7:32:02:1e:45:6b:8d:c3:
dd:b9:a8:29:51:cb:1f:64:6a:b4:07:92:cc:23:4f:a0:0d:1b:
e7:21:43:73:f9:39:e7:d0:76:dd:fc:76:8e:b4:06:6e:23:49:
8a:d5:7a:9f:ed:01:a8:08:fa:88:7d:55:b8:fd:01:bf:16:01:
82:49:ac:d8:80:18:41:f5:3a:98:44:68:fc:44:79:d7:39:93:
e9:f0:4a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org