Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/rIPue1NBQeFz5g6uFDbxw7oiQpk.roa
File: rIPue1NBQeFz5g6uFDbxw7oiQpk.roa (raw, json)
Hash identifier: fSwEH1ITu175I8Tf2F9axpQFrDimh64tfVYo4QLIB5o=
Subject key identifier: AC:83:EE:7B:53:41:41:E1:73:E6:0E:AE:14:36:F1:C3:BA:22:42:99
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 0B2E254B
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/rIPue1NBQeFz5g6uFDbxw7oiQpk.roa
Signing time: Sat 01 Jan 2022 12:54:36 +0000
ROA not before: Sat 01 Jan 2022 12:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57860
IP address blocks: 185.129.60.0/22 maxlen: 24
2a06:d380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187573579 (0xb2e254b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Jan 1 12:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac83ee7b534141e173e60eae1436f1c3ba224299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:90:b0:c8:6a:cb:76:64:d3:e8:c0:0f:58:
90:94:a0:86:32:8f:1b:59:d9:93:50:91:ec:9a:49:
d6:da:4c:b7:3f:e0:b1:0a:f6:4b:ed:d2:1d:4f:09:
61:95:5e:69:ea:d9:77:f8:6c:c1:56:bf:de:cd:c5:
ff:87:9b:5a:f3:69:a2:8e:18:4a:44:0c:c1:44:a1:
41:cd:ab:84:d2:42:53:f5:cd:55:3a:0c:55:cf:a4:
8f:9d:26:57:52:ba:1d:4d:69:51:d7:8e:26:4b:bc:
8c:0f:71:32:ad:cc:80:19:2f:78:02:13:09:03:1c:
e7:6b:90:8f:4d:ef:3c:33:cc:64:d3:e3:ce:e2:f6:
b0:85:e5:48:32:b4:9c:32:77:77:08:b4:33:64:08:
ca:99:18:dc:f7:13:55:7b:07:4c:c0:fa:72:2c:a5:
2c:f8:14:13:c0:93:a9:9b:62:4f:23:00:88:a9:b8:
ef:35:c6:8d:09:32:b0:a9:3e:04:5a:d7:7d:f9:21:
00:39:41:c3:6d:08:3c:f6:19:f0:34:9f:8d:55:25:
18:3c:72:3f:63:76:53:2e:f3:66:ad:2c:42:c5:e5:
6d:49:3d:c6:6e:d3:61:30:9b:5e:5a:12:86:d0:eb:
86:76:24:ed:2a:0b:c3:85:e8:fd:2c:75:67:0b:58:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:83:EE:7B:53:41:41:E1:73:E6:0E:AE:14:36:F1:C3:BA:22:42:99
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/rIPue1NBQeFz5g6uFDbxw7oiQpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.60.0/22
IPv6:
2a06:d380::/29
Signature Algorithm: sha256WithRSAEncryption
85:ab:6b:43:4c:04:1b:f2:ec:c1:c6:4b:58:c9:b6:c3:3a:55:
1c:96:03:28:29:ec:16:76:e9:7d:a0:0f:e2:f8:82:3f:fc:5e:
4a:d7:02:3a:f0:4b:24:67:13:e1:42:53:ce:dd:3a:cc:cf:3d:
22:e5:91:17:e2:f2:85:f0:c2:77:50:94:06:86:9c:fe:48:32:
58:f1:d9:4f:39:1d:bf:2f:c0:0b:94:e8:48:53:0f:b2:8d:80:
ca:63:3e:f4:5e:63:63:2a:c5:9a:fe:81:55:e8:f8:ac:88:ec:
6c:1a:84:ab:3f:54:3c:67:f8:fe:7f:e5:3a:82:37:b4:60:a3:
6f:3e:73:1e:96:7a:0b:d4:02:88:4f:d5:a8:7b:83:b0:04:20:
89:eb:1f:53:41:3e:b8:24:20:d5:71:8c:6d:0f:87:9b:7c:a5:
23:12:d6:f8:66:e0:fd:6f:de:7a:f3:9f:72:e7:96:43:a8:34:
60:7a:a4:74:fe:74:1f:e6:f0:52:ef:f8:36:e5:d7:e6:59:68:
39:3c:16:55:6e:31:bd:c1:5f:5d:4d:f2:4b:f5:2c:c9:f9:31:
d7:26:e9:ab:1b:bb:5e:9b:20:c6:e6:d0:7c:52:96:63:f1:9e:
60:d4:b3:3f:2b:3f:e3:f0:fc:a0:c6:d2:64:16:c3:2e:a9:4c:
df:99:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:31 2024 by rpki-client on console-ams.rpki-client.org