Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RVxcbPtjhhBUNv3yNOZxZncoxOU.roa
File: RVxcbPtjhhBUNv3yNOZxZncoxOU.roa (raw, json)
Hash identifier: KnSCezwgtyQsHwQ2GCCxY9JAI9w/VQIPtrY2L+cal2U=
Subject key identifier: 45:5C:5C:6C:FB:63:86:10:54:36:FD:F2:34:E6:71:66:77:28:C4:E5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17D01B7F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RVxcbPtjhhBUNv3yNOZxZncoxOU.roa
Signing time: Sat 01 Jan 2022 04:54:31 +0000
ROA not before: Sat 01 Jan 2022 04:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137882
IP address blocks: 185.255.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399514495 (0x17d01b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=455c5c6cfb6386105436fdf234e671667728c4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:4c:76:53:46:a9:05:81:10:7c:aa:a6:32:
54:78:99:62:ca:8d:f8:9a:67:85:0e:2c:2f:9a:cd:
aa:b5:9d:eb:e7:d5:40:10:6c:94:e0:d8:a3:ee:52:
2f:15:33:bf:51:8f:ee:79:92:a1:62:3c:14:d1:aa:
66:16:d0:d0:31:55:22:c0:04:84:d5:5e:d9:56:ee:
5b:37:c5:3c:c7:91:7c:23:fb:52:54:86:08:7d:33:
c2:28:f7:52:60:95:be:61:90:ba:43:c5:3e:15:a8:
c5:be:df:e1:1f:ed:e5:0c:a8:89:51:f2:10:29:5f:
b3:6a:db:36:66:0f:83:eb:2c:ba:98:d3:b3:7f:8c:
29:03:2a:64:3e:1b:12:3c:8c:6b:90:b0:91:df:11:
a8:71:3b:cf:44:21:a3:02:83:c1:eb:a4:16:e6:4c:
66:b4:c6:3e:06:69:e4:b9:b5:4c:50:dc:e2:d7:05:
d4:f0:07:78:1c:a8:6c:de:47:36:15:69:73:a5:e3:
43:b9:27:78:75:20:74:89:95:58:7b:72:32:7d:37:
78:bf:02:d4:e5:3b:25:af:96:a4:02:a1:aa:b1:5d:
c8:0d:00:05:a9:cd:2d:42:14:11:4f:58:ee:b7:f2:
4b:6c:ba:15:ed:dd:07:21:13:a0:47:cc:05:6e:3c:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5C:5C:6C:FB:63:86:10:54:36:FD:F2:34:E6:71:66:77:28:C4:E5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RVxcbPtjhhBUNv3yNOZxZncoxOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.152.0/24
Signature Algorithm: sha256WithRSAEncryption
69:43:71:96:3b:08:13:99:08:63:5f:62:4e:d6:13:7c:e9:21:
c7:b1:5a:a6:61:47:21:b4:ba:ee:8c:af:59:b2:03:ea:c7:e8:
1a:61:43:40:c9:ee:26:82:22:9e:b4:ca:56:48:3a:39:58:82:
ee:54:c7:1a:43:e1:34:90:49:19:2f:ae:1f:e2:06:8c:6c:5a:
17:95:d3:03:40:76:99:9a:24:e5:11:76:a8:d7:4b:c7:26:86:
91:c7:df:c0:84:69:da:7e:d8:9f:f0:58:3c:f0:71:d8:39:15:
05:ca:10:22:65:ea:1a:18:b3:67:fd:87:cd:ab:b7:db:9c:91:
89:67:12:84:f7:f9:e5:61:77:fc:64:53:71:86:b0:50:73:64:
32:37:39:d2:44:2c:29:bd:3b:1f:3d:12:1c:b1:91:b0:de:ea:
b6:71:d7:c7:08:f3:0d:45:e8:69:12:c9:cc:7e:af:5d:88:56:
87:cf:3a:ce:f5:e7:95:c0:bc:f4:75:2d:21:a4:fa:42:5c:d5:
48:79:0f:6a:ca:44:be:04:36:3a:72:8f:1d:aa:21:c4:d2:e1:
63:8e:f0:18:ad:d7:66:e0:b8:0b:db:50:94:fb:44:89:78:97:
a5:83:34:8b:d5:6f:57:18:6a:ab:64:d2:3b:14:cd:04:ed:39:
3a:2d:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org