Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/mhEsLTj5dKXAsfz07cFZtXXl7dU.roa
File: mhEsLTj5dKXAsfz07cFZtXXl7dU.roa (raw, json)
Hash identifier: IQcQYc5kVFtVWYUfP13Hesmvn+XNHuhBhQp8XJpT/Mw=
Subject key identifier: 9A:11:2C:2D:38:F9:74:A5:C0:B1:FC:F4:ED:C1:59:B5:75:E5:ED:D5
Certificate issuer: /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
Certificate serial: 16512609
Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/mhEsLTj5dKXAsfz07cFZtXXl7dU.roa
Signing time: Sat 01 Jan 2022 07:55:23 +0000
ROA not before: Sat 01 Jan 2022 07:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201393
IP address blocks: 185.76.112.0/24 maxlen: 24
185.76.112.0/22 maxlen: 22
185.76.113.0/24 maxlen: 24
185.76.114.0/24 maxlen: 24
185.76.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374416905 (0x16512609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
Validity
Not Before: Jan 1 07:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a112c2d38f974a5c0b1fcf4edc159b575e5edd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:47:a0:76:f8:ca:87:b4:34:d3:ad:2e:28:
cb:21:68:4d:48:e2:be:fd:d7:5f:1f:b1:e6:27:ae:
00:fe:bc:f0:9c:1c:ec:01:c6:0d:d6:ff:7c:24:35:
69:e8:15:0e:7e:ed:ea:aa:cb:18:12:45:de:46:c9:
e0:d9:d6:22:58:bf:cc:4e:b2:2d:4a:87:79:cf:e4:
fc:48:3a:e2:5b:e7:bc:51:52:5e:0a:6f:08:40:ec:
75:da:03:99:7d:83:81:8b:af:14:27:d0:30:03:9e:
d8:6b:06:31:24:38:49:21:e6:aa:8c:ff:27:d6:a2:
ef:a9:6c:0f:f7:f2:c8:6e:04:11:c4:a3:fe:1e:fc:
ba:fd:ac:00:cd:46:a0:5d:df:e6:bf:ca:71:ba:5c:
a2:87:c2:80:c2:d1:c0:16:db:01:d7:a0:b2:7e:d3:
34:11:c9:23:2a:8a:31:68:b4:e8:41:55:35:72:2d:
57:a5:88:e9:be:5c:ed:b9:cf:61:8a:05:f5:27:69:
e4:1c:b6:e7:f5:08:4a:e3:97:35:2b:cf:bd:14:55:
07:da:73:29:5d:4a:90:d8:9f:90:b4:64:51:0f:c2:
ad:b6:d0:4e:75:25:d0:22:bb:28:28:8e:10:fb:24:
9d:02:93:87:95:4a:6a:6d:44:a0:38:59:62:2b:5b:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:11:2C:2D:38:F9:74:A5:C0:B1:FC:F4:ED:C1:59:B5:75:E5:ED:D5
X509v3 Authority Key Identifier:
keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/mhEsLTj5dKXAsfz07cFZtXXl7dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.112.0/22
Signature Algorithm: sha256WithRSAEncryption
27:a5:6d:b1:e5:b0:c3:d7:81:28:fd:96:0b:ba:b8:4d:f1:5e:
0a:11:46:75:0e:4c:96:b4:8b:cd:79:18:ad:84:cc:99:97:c2:
7e:70:b3:b5:1e:93:4d:4d:cc:6d:27:80:b0:7e:f2:dc:43:1a:
d5:ab:22:54:02:b0:9a:50:87:c8:c0:c0:05:27:f3:72:1b:d7:
dd:86:58:0a:d7:76:1a:ad:a6:4a:a4:36:a9:0f:d3:6e:0c:3d:
ee:af:13:c5:13:2a:18:29:8b:68:b7:97:43:b0:aa:e2:48:1b:
11:e4:49:f1:31:36:f0:71:7a:5b:01:52:7b:37:c1:dd:24:6b:
b1:15:7a:e7:fd:db:33:0e:1f:ae:63:94:2d:8b:3d:9e:be:b9:
1d:4c:18:1d:12:f4:44:9c:f2:85:53:9c:36:3e:b7:2d:25:13:
06:10:9a:4b:a5:26:ea:aa:04:09:4e:00:ea:cb:3f:dc:13:0f:
8d:70:db:af:0c:2d:59:65:bf:ff:0a:a3:c5:2c:18:ed:5b:54:
42:a1:45:72:23:e8:35:cf:be:77:cf:99:06:fa:49:c4:5f:87:
e3:57:3a:0f:54:4c:c9:83:c5:4b:24:33:f2:37:f0:da:ec:95:
d5:aa:81:62:48:77:a9:a0:b4:82:67:82:3f:f1:9d:53:e7:aa:
64:bc:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org