Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/5Zb_SrQg0ulmOShvm3SWSQ9Ih3g.roa
File: 5Zb_SrQg0ulmOShvm3SWSQ9Ih3g.roa (raw, json)
Hash identifier: H+ruroRuZtK01c4aSMPxKAVwZaWwx79m8CrsMwmLUIo=
Subject key identifier: E5:96:FF:4A:B4:20:D2:E9:66:39:28:6F:9B:74:96:49:0F:48:87:78
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 192AB125
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/5Zb_SrQg0ulmOShvm3SWSQ9Ih3g.roa
Signing time: Sat 01 Jan 2022 05:03:01 +0000
ROA not before: Sat 01 Jan 2022 05:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205235
IP address blocks: 185.38.175.0/24 maxlen: 24
2a01:4262:1ab::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422228261 (0x192ab125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Jan 1 05:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e596ff4ab420d2e96639286f9b7496490f488778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:35:6c:aa:0e:d8:12:de:d8:91:cd:5b:c2:
a3:9a:fd:1f:a8:6a:3d:dc:cf:c8:65:07:8e:8d:fa:
90:bd:21:fb:25:8a:22:88:23:f2:dd:74:ad:d2:e3:
0b:66:c0:2c:c8:71:b1:73:95:81:90:b9:f7:3e:d9:
db:13:a1:b6:9d:67:d9:2a:41:9a:de:17:38:5b:d8:
e5:b2:b6:69:cf:cc:63:1b:96:67:8f:a8:47:12:ab:
03:f6:93:3e:0a:d3:90:23:9f:22:1e:a1:4e:5e:8f:
19:85:6c:08:b9:0d:54:c1:47:8d:30:02:16:0b:71:
de:ac:73:fe:4e:6b:75:56:92:19:de:db:6f:88:c4:
85:29:d0:e7:6f:f7:15:9f:15:7f:b4:37:3c:ed:f3:
21:94:a1:72:e4:d6:2e:e6:97:92:5f:2d:09:84:6e:
eb:25:56:6a:c4:99:9e:8f:47:8d:3f:d1:66:dd:bb:
1c:a1:16:6b:9c:a7:64:af:17:72:95:1f:2d:b4:6a:
fc:50:f2:18:cc:10:bd:f1:b9:1b:59:32:90:96:98:
10:28:07:ee:27:81:5b:43:21:c5:93:2f:1c:db:88:
e1:dd:45:94:80:b2:fa:46:5d:5c:bd:ec:84:4b:d0:
8e:1b:34:2e:85:86:2f:d7:9f:ac:86:18:03:72:d8:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:FF:4A:B4:20:D2:E9:66:39:28:6F:9B:74:96:49:0F:48:87:78
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/5Zb_SrQg0ulmOShvm3SWSQ9Ih3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.175.0/24
IPv6:
2a01:4262:1ab::/48
Signature Algorithm: sha256WithRSAEncryption
26:fb:a2:3a:9f:48:4a:5d:c3:6b:d9:fa:9d:dc:ac:1d:2d:6f:
65:aa:03:f9:00:d5:c4:3b:37:55:be:b2:2f:e6:f5:15:c1:b7:
ee:dc:0b:5b:32:53:46:90:59:00:48:84:b8:8a:67:45:6c:bd:
04:8c:ac:73:56:96:4f:bb:7d:d8:24:bf:e2:bf:c0:71:53:62:
55:b1:e1:c6:90:c0:c0:4c:80:cd:73:20:2a:40:73:fe:83:12:
10:f0:33:4f:d4:e9:67:44:a4:a3:cc:8a:e7:9f:02:ab:b9:ce:
f8:4d:64:62:d1:f8:ac:cc:9d:f2:a4:8d:5d:4d:bc:dd:f0:1a:
82:6a:38:ee:61:29:89:16:ea:94:ba:65:e5:81:a7:bc:50:46:
ec:bb:8a:2a:ba:55:8d:b1:29:0b:48:ce:e3:8b:f5:d4:6f:08:
52:a0:be:00:01:d1:58:fa:73:79:5d:a5:28:90:8a:d0:59:d6:
df:55:6c:9f:2a:1d:45:ce:c7:6b:fa:5e:84:08:14:60:10:2a:
95:78:d9:c3:25:5c:29:5f:59:de:d4:6f:67:5d:4c:c9:d0:f4:
a0:21:2b:3f:d3:3b:da:33:1b:f9:6d:84:8b:e0:e5:b9:22:dc:
1c:fc:7a:2e:91:d3:20:41:13:21:0f:77:46:59:ca:7f:77:56:
bc:ef:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org