Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/h_qI0zhEefKM5OeJgD88nTTCQ0Y.roa
File: h_qI0zhEefKM5OeJgD88nTTCQ0Y.roa (raw, json)
Hash identifier: Vq6vZqBxzvaQw72NNfDXmwsbhtJI/p33yRs3XmAWgo8=
Subject key identifier: 87:FA:88:D3:38:44:79:F2:8C:E4:E7:89:80:3F:3C:9D:34:C2:43:46
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1885172C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/h_qI0zhEefKM5OeJgD88nTTCQ0Y.roa
Signing time: Mon 31 Jan 2022 23:02:34 +0000
ROA not before: Mon 31 Jan 2022 23:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51559
IP address blocks: 185.137.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411375404 (0x1885172c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 31 23:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87fa88d3384479f28ce4e789803f3c9d34c24346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:9b:c1:c3:e9:a2:b3:1c:db:f3:58:50:2f:
37:00:ae:b6:6b:4a:8d:f4:09:58:cf:ad:4b:c7:fa:
86:a5:ea:ba:6c:ac:1e:63:45:c2:e6:b9:38:c3:df:
35:63:1b:f3:98:34:8c:fc:05:b0:d9:ae:83:4c:1c:
34:f4:94:26:69:f5:c8:38:3e:5a:da:15:2d:42:a9:
f4:d3:8d:59:a3:80:9e:fa:ab:d3:83:77:bd:1d:34:
2c:af:e0:24:9b:81:60:a8:bf:47:c4:6c:34:a5:bd:
8b:8c:1a:16:d5:ca:84:bf:05:20:3e:54:80:57:9c:
c5:48:75:c4:f0:95:1c:69:75:40:dd:7e:26:55:a3:
62:eb:cc:6b:92:7e:dd:e5:a2:b5:7b:e3:41:b2:50:
91:14:12:50:ca:f5:64:b4:76:83:84:0f:30:bf:78:
ff:eb:08:b8:8a:b0:93:b9:71:74:a8:e1:67:13:39:
6f:11:9c:61:44:72:dd:a4:4a:7b:c6:46:ec:e8:c3:
c5:fd:0f:0c:67:ae:91:29:b7:85:fe:03:ec:2c:45:
36:c9:c9:7a:75:e9:1f:ce:c5:98:6d:48:2e:69:f5:
5d:84:1b:5e:d3:1c:3e:e5:be:18:dc:f2:78:9f:fc:
dc:a8:56:72:17:e6:44:e2:96:56:10:59:10:49:88:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:88:D3:38:44:79:F2:8C:E4:E7:89:80:3F:3C:9D:34:C2:43:46
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/h_qI0zhEefKM5OeJgD88nTTCQ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ca:21:76:dc:dd:b1:2a:4e:b4:bb:26:10:05:27:a6:70:2a:
5c:3a:23:ab:55:47:86:ba:15:33:b0:88:7d:7a:96:a5:63:87:
26:c3:8f:93:f9:58:dc:b4:ba:cf:73:1c:0f:74:5c:32:3f:7b:
66:1c:88:4a:a7:d5:4f:64:4f:fa:c9:66:72:ad:1c:2c:8e:b0:
de:2a:88:09:93:e9:e3:9d:b0:ec:e1:cb:a1:d8:df:35:37:52:
be:6b:f4:0c:ee:73:73:66:38:a4:fe:d9:39:65:7f:ac:49:1a:
48:05:43:90:25:90:75:e9:94:fb:6f:0d:80:35:ed:e8:7f:94:
37:26:ee:8d:68:ff:62:47:d9:35:27:1c:b5:78:ce:da:17:1f:
53:4c:03:96:3a:a4:c6:07:80:84:37:c2:3e:3f:b4:e9:7a:5d:
69:b9:62:5d:27:0f:c5:1a:ca:40:c7:94:e4:25:ca:1b:d6:16:
d9:c2:ed:e1:a6:67:c6:43:12:95:e8:19:a7:84:84:c6:7e:55:
c6:a6:cd:f9:f2:f5:90:c0:74:b4:f2:1d:e0:b1:87:18:38:35:
ed:53:ad:f5:9f:23:84:08:d7:17:14:ef:8d:bc:db:59:de:99:
ae:29:91:5d:57:93:cc:7c:55:d5:ee:24:3e:cb:eb:69:43:a6:
d3:6b:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org