Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/1-X5Ujq8ToFWZN9qkoksUEO1EX-s.roa
File: 1-X5Ujq8ToFWZN9qkoksUEO1EX-s.roa (raw, json)
Hash identifier: U5mB1PxWiSBAAHyMnZIJMPy/3I/UerymbiNutK1kJ9U=
Subject key identifier: F9:7E:54:8E:AF:13:A0:55:99:37:DA:A4:A2:4B:14:10:ED:44:5F:EB
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01FE16C8
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/1-X5Ujq8ToFWZN9qkoksUEO1EX-s.roa
Signing time: Sat 01 Jan 2022 06:03:00 +0000
ROA not before: Sat 01 Jan 2022 06:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 185.228.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33429192 (0x1fe16c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 1 06:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f97e548eaf13a0559937daa4a24b1410ed445feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:dd:b3:c8:37:3e:d4:35:7b:33:f3:09:ce:
09:cf:b2:bc:5a:d9:65:14:ec:e1:18:39:be:9b:12:
c3:f8:c0:7f:02:33:84:c5:4b:06:68:fa:24:95:4d:
6c:0f:51:04:14:80:3d:78:ec:a0:e5:65:e0:8f:34:
dd:ee:6e:78:f4:13:15:c7:d0:7b:7f:ce:dc:51:0d:
9b:ca:a0:dc:f8:73:d5:f5:65:94:64:f3:cf:61:c5:
5d:c2:08:58:2d:36:85:4b:81:7a:0d:9f:17:9c:ae:
bf:b5:f1:64:74:99:1f:91:a0:1e:f2:65:05:dc:de:
92:a8:1c:9c:9e:45:43:f8:97:f1:ea:e8:0c:05:5f:
de:99:e0:19:bf:93:a4:70:34:ea:17:11:2d:f9:8d:
63:a0:dc:9b:ed:73:60:11:ba:a0:12:2c:d7:9d:de:
98:f6:b3:a7:5c:07:67:95:fa:ca:f0:d9:dc:9f:35:
8c:45:c5:d9:ba:34:49:64:4a:86:e6:d6:e8:14:f8:
a9:08:74:1f:0b:7d:f4:be:3c:24:49:5c:e8:d6:66:
ec:1c:9a:6d:36:8a:08:7d:67:d4:06:f2:ff:ac:fd:
e1:75:a3:bb:2a:d3:1b:b8:f6:ff:9b:d8:7f:ea:87:
59:f9:7d:e8:c3:2c:d4:a7:37:31:8d:e6:ad:b5:74:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7E:54:8E:AF:13:A0:55:99:37:DA:A4:A2:4B:14:10:ED:44:5F:EB
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/1-X5Ujq8ToFWZN9qkoksUEO1EX-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.0.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c3:ed:57:72:e6:9f:5b:da:69:24:2e:1f:83:86:b8:32:51:
d5:d9:d5:72:e2:8f:e6:2d:57:f8:73:f9:29:7a:90:eb:4d:81:
58:8e:f4:93:83:50:22:6d:2a:25:0e:80:49:7e:8c:6a:01:c0:
39:59:46:bd:11:97:3e:03:e3:a4:46:28:8d:1f:47:30:b7:33:
45:6a:05:a5:d8:60:2a:70:1e:56:b1:0f:7e:e6:0d:5a:ba:47:
f9:17:e7:ea:55:a3:5d:8a:a2:1f:17:dd:e2:95:65:30:7e:61:
f5:e2:71:3a:c1:6e:54:28:e9:75:8b:e5:d3:6f:6f:81:28:c2:
1b:d3:35:0a:ab:62:a8:1c:2b:94:2b:35:37:05:54:dd:4f:a0:
cd:6f:e9:5d:a9:0e:f6:d5:c1:fb:f3:7d:27:2d:82:b0:d1:35:
30:81:74:8a:49:23:9a:12:75:22:ef:57:36:f1:b6:9e:19:b0:
9d:13:6f:0d:23:7a:9b:2f:f1:16:7f:c0:42:3b:4b:c5:8c:bb:
93:21:01:24:34:34:2a:be:8b:ab:b8:01:c6:c9:d1:b5:e3:20:
56:8f:05:b5:76:2c:20:19:bc:6c:14:27:b0:e6:7b:da:bf:42:
21:a2:56:cc:f5:42:82:91:f9:86:c8:a7:09:9b:d1:02:e8:ce:
52:86:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:14 2024 by rpki-client on console-fra.rpki-client.org