Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/5L3r0mKB6jbxJun9RK7WuQznu_g.roa
File: 5L3r0mKB6jbxJun9RK7WuQznu_g.roa (raw, json)
Hash identifier: SUKLxFfKJzE1c35iKXnfq+O4j5Jsn40NuFbD6Ai0yLQ=
Subject key identifier: E4:BD:EB:D2:62:81:EA:36:F1:26:E9:FD:44:AE:D6:B9:0C:E7:BB:F8
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0A2F8976
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/5L3r0mKB6jbxJun9RK7WuQznu_g.roa
Signing time: Sat 01 Jan 2022 06:58:21 +0000
ROA not before: Sat 01 Jan 2022 06:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34078
IP address blocks: 185.112.148.0/22 maxlen: 22
185.112.148.0/23 maxlen: 23
185.112.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170887542 (0xa2f8976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 06:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4bdebd26281ea36f126e9fd44aed6b90ce7bbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:4f:92:1c:87:16:6f:70:cc:2f:2a:13:8d:
14:1e:76:10:a8:9f:4a:fb:ec:d9:2c:9b:f0:df:cd:
b1:78:23:44:3d:07:f6:af:31:8b:ec:f1:32:6c:9d:
6a:c1:82:e5:7d:e6:1f:ba:d2:9f:e7:88:ba:ab:fb:
04:b9:61:f6:f9:d1:0d:99:01:74:62:c4:43:c1:0f:
50:d9:ed:04:f9:94:16:67:db:22:6d:21:b0:d3:e0:
c3:a3:8b:5b:49:8b:cc:3d:93:23:b1:64:28:ce:c9:
f2:6e:d3:8e:a0:1f:5a:6d:84:e9:61:d2:5e:ed:53:
4e:e8:f8:1d:a7:3a:5b:1e:18:bf:2e:e8:eb:17:b4:
29:2c:55:d2:0f:c3:2f:e8:a0:86:03:cd:e3:c9:bc:
a0:11:e4:cd:51:60:51:e1:18:b0:af:fb:a0:2e:87:
5f:08:69:af:87:f0:0c:9e:a0:94:cb:d7:8f:53:c3:
55:56:3b:7e:a6:9c:89:b6:16:4e:5a:4d:f8:18:21:
13:cb:79:ee:7e:e9:ff:3d:9b:26:81:44:af:56:bb:
1c:c9:6a:4a:ab:e1:a2:51:a5:9d:44:e9:76:eb:ba:
a9:05:78:72:fa:21:97:fb:6d:69:9b:06:46:4f:3f:
84:2a:cb:8e:63:9c:1f:26:d6:a5:4d:00:48:9f:59:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:EB:D2:62:81:EA:36:F1:26:E9:FD:44:AE:D6:B9:0C:E7:BB:F8
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/5L3r0mKB6jbxJun9RK7WuQznu_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.148.0/22
Signature Algorithm: sha256WithRSAEncryption
18:75:dc:08:c4:7d:5e:4a:9a:dd:22:1e:0a:d5:61:f2:aa:75:
aa:1c:7a:cc:77:b2:78:48:3e:9c:29:03:7d:6a:1e:a4:5a:87:
87:ba:74:16:f6:c7:22:ba:72:c2:ba:b6:7b:e7:4f:7f:6c:32:
74:6f:c8:49:3d:ef:47:98:22:91:f9:fa:76:38:b1:96:b4:fe:
24:64:06:eb:b1:2f:45:95:a7:df:1d:96:d3:fc:26:1c:f2:58:
b9:a4:80:93:88:f9:b3:0f:ec:bb:ca:61:f0:f9:d3:61:48:cb:
12:43:b3:c3:ab:6e:e1:2b:43:aa:ab:79:0d:91:7f:fe:a7:b3:
66:da:84:e2:48:fe:e2:12:74:9e:c0:6b:b7:47:86:a1:25:d1:
3b:62:e9:35:a1:3d:58:55:82:ff:79:b7:1e:75:9b:06:92:e9:
02:5c:45:5e:7e:ef:13:fc:9c:9d:0c:24:ad:07:59:8f:dd:ef:
23:bb:a5:c8:f8:ce:c3:22:50:88:06:72:26:2d:c2:ee:c8:48:
73:85:0a:7b:2e:27:c5:9f:5b:67:3a:99:e3:f5:6c:44:b0:5d:
79:ef:c5:8a:4b:8a:88:89:52:a1:ef:06:7f:c1:eb:a1:30:60:
24:0f:d9:91:a6:0f:e9:44:01:6d:43:65:c4:66:ef:0c:0d:99:
84:a5:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:58 2023 by rpki-client on console-fra.rpki-client.org