Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/rP0dZlJG31M3bUXthBdyzZTC4V0.roa
File: rP0dZlJG31M3bUXthBdyzZTC4V0.roa (raw, json)
Hash identifier: vL5GBv19UkPezmWg0I/SyvnKM/v78YVxVhTfYA1lEtc=
Subject key identifier: AC:FD:1D:66:52:46:DF:53:37:6D:45:ED:84:17:72:CD:94:C2:E1:5D
Certificate issuer: /CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Certificate serial: 1948BC71
Authority key identifier: 12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/rP0dZlJG31M3bUXthBdyzZTC4V0.roa
Signing time: Sat 01 Jan 2022 08:56:50 +0000
ROA not before: Sat 01 Jan 2022 08:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199644
IP address blocks: 185.5.14.0/24 maxlen: 24
185.5.15.0/24 maxlen: 24
185.5.12.0/22 maxlen: 24
2a02:c740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424197233 (0x1948bc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Validity
Not Before: Jan 1 08:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acfd1d665246df53376d45ed841772cd94c2e15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:14:d0:f4:12:24:b2:27:4a:71:9e:58:2c:
9b:8f:ff:bd:2e:8d:96:8b:cb:e9:66:6b:41:35:4c:
f7:8a:72:17:07:d2:3d:82:b7:c2:12:d4:c9:45:12:
23:53:a7:df:f2:41:49:5e:de:b7:e0:15:d3:4b:d0:
96:62:cf:37:f5:5d:e6:46:12:ac:34:30:10:25:69:
04:3c:51:6a:15:77:48:17:e6:80:be:93:a5:c9:08:
7e:cb:5d:48:a4:01:05:fb:08:3f:25:26:c3:6e:60:
a2:20:34:3f:ad:77:71:bb:ef:ce:4c:a9:52:1a:48:
1c:11:9b:86:40:4f:da:40:7a:f9:04:c1:37:d6:1d:
f8:28:bf:47:24:c9:89:ae:58:29:7c:28:88:0b:33:
a2:2d:14:af:0a:1d:20:5e:7f:1b:01:86:dd:4d:8a:
04:0b:0e:f5:a2:cc:63:24:f5:94:40:76:ea:bd:05:
ea:34:dd:21:8f:b1:c8:d3:a7:06:1a:e9:20:60:33:
24:9a:6c:be:3a:df:8a:d1:62:63:e0:73:1a:95:22:
4c:09:66:f1:10:73:c4:50:2b:67:5f:90:3d:b2:ea:
bc:e6:f1:7e:94:40:cd:33:52:7e:bc:bc:92:bc:89:
24:fe:25:70:7c:47:60:ae:6b:31:b0:86:35:92:16:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:1D:66:52:46:DF:53:37:6D:45:ED:84:17:72:CD:94:C2:E1:5D
X509v3 Authority Key Identifier:
keyid:12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/rP0dZlJG31M3bUXthBdyzZTC4V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.12.0/22
IPv6:
2a02:c740::/29
Signature Algorithm: sha256WithRSAEncryption
34:b1:4a:4f:f4:c1:b1:73:00:bd:f8:b8:22:4a:7e:47:76:1d:
b6:6f:b5:3b:71:8f:c8:76:4d:8f:6d:03:bb:6b:08:2d:5c:69:
14:1f:ef:ac:c6:45:9f:44:bd:e5:1e:5e:4f:ae:60:c5:27:cb:
8a:77:55:48:cc:11:1b:7a:1a:7d:f2:f2:44:1d:cb:11:47:5c:
2a:de:9b:f2:42:c3:1a:a1:94:ce:6e:55:c6:1c:c2:f9:9b:c8:
55:18:b3:6a:00:5b:83:6b:44:22:64:00:35:d3:a4:74:ab:4b:
13:e4:ae:f4:f6:62:d2:aa:b4:90:fe:0a:94:09:94:b9:72:2d:
a2:00:85:70:7b:35:a6:ef:e4:f7:d8:57:2c:e7:70:8a:9d:e1:
be:83:c2:1b:24:04:e2:17:b9:bc:0b:6f:64:55:e7:ae:8b:1c:
2f:ab:84:76:90:18:ff:71:76:77:7e:98:43:c6:3f:4b:bf:f2:
50:03:50:23:23:a2:1c:3e:ee:cf:0f:40:d4:4e:9c:68:80:f4:
69:d0:13:fa:c8:7d:d7:01:ec:a7:19:f4:8b:20:bd:1c:41:cd:
82:c8:9c:8c:4c:f2:37:fb:2d:0e:a0:80:08:3d:73:67:5c:3c:
45:c6:b1:a6:6d:9e:8a:0a:19:c3:5c:a0:63:a3:8f:4c:db:29:
3d:cc:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org