Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RQA6FZKIYisENwOn0ogWpJ_eh_g.roa
File: RQA6FZKIYisENwOn0ogWpJ_eh_g.roa (raw, json)
Hash identifier: zi5H18fBk9U7T5/PJsrK+i0vArcLbxmbyy1UuXlmbgk=
Subject key identifier: 45:00:3A:15:92:88:62:2B:04:37:03:A7:D2:88:16:A4:9F:DE:87:F8
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 08CB57A5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RQA6FZKIYisENwOn0ogWpJ_eh_g.roa
Signing time: Sat 01 Jan 2022 07:04:37 +0000
ROA not before: Sat 01 Jan 2022 07:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396881
IP address blocks: 185.255.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147543973 (0x8cb57a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 07:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45003a159288622b043703a7d28816a49fde87f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:4f:dd:e9:fa:3f:92:1f:74:ac:9d:61:9b:
da:40:c5:b0:16:ea:15:cd:53:65:cd:36:06:cf:48:
bd:d9:79:c8:48:f8:3f:3d:3d:24:f1:22:a3:95:7e:
bf:79:18:ea:fe:b9:7e:7e:f8:95:67:df:c7:f0:4b:
17:15:d1:e8:d3:6a:56:ed:fa:22:67:37:97:e6:31:
e0:30:f5:54:dc:bd:47:2f:87:d6:57:56:c7:d7:f5:
66:30:be:3e:d7:46:69:a8:6e:4a:f7:b4:6b:ae:1d:
c9:f3:72:4f:34:86:98:16:69:f2:c8:71:f1:0c:e0:
6f:2d:2b:75:5c:88:a2:c2:ff:0a:df:2b:37:b0:3d:
20:5a:14:7d:b3:a2:46:44:ae:57:7a:6e:7e:0e:43:
84:a6:cd:5b:c1:2b:49:dc:37:b0:6c:d2:08:a5:b3:
78:24:0b:23:60:f3:39:12:0a:4b:bc:98:ba:5d:e9:
85:51:1b:ed:ec:9a:4b:e3:17:2a:ce:ce:96:24:7e:
9c:23:85:ec:a2:21:fc:39:51:2d:7f:b3:71:a8:78:
1a:f4:92:af:3d:a3:8e:24:07:59:09:55:d6:fb:35:
88:64:b5:4e:7a:9e:e4:28:95:1b:ae:e0:d1:c0:8a:
61:2b:19:4b:b2:d8:3c:37:55:77:83:15:35:31:f6:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:3A:15:92:88:62:2B:04:37:03:A7:D2:88:16:A4:9F:DE:87:F8
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RQA6FZKIYisENwOn0ogWpJ_eh_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:53:55:7c:1c:1e:df:63:85:af:5c:c1:df:49:f7:3f:9f:b0:
7e:6a:f3:16:a5:de:fb:9c:8a:22:c7:15:ed:a5:d8:5f:86:12:
2c:e9:0f:16:81:60:58:32:a7:00:44:21:1c:dd:58:1a:e7:78:
6e:43:76:3d:b6:8a:24:50:5d:36:fa:d8:41:0b:91:e0:d3:1d:
bc:3c:aa:e0:d2:13:17:f6:d7:b1:c2:b0:1e:68:e1:c7:3d:ca:
b4:8d:4b:68:ce:fe:b0:ae:d2:cb:02:96:be:3d:d7:3c:47:cf:
3b:2e:d8:31:61:b3:ca:d8:21:2d:88:d9:81:0e:27:17:e3:ed:
15:23:dc:bb:56:5a:c6:46:48:6b:f8:26:9f:74:d7:40:39:00:
55:bc:4b:f5:b5:8f:74:70:48:ef:a9:46:8f:04:8c:ad:48:e1:
92:f2:65:3b:59:86:29:98:c4:36:c6:76:17:3c:6b:31:f8:4f:
17:a1:ca:05:24:c6:c9:f4:06:f0:1b:33:5c:5c:6f:02:3d:24:
b0:ee:18:fc:3e:ce:90:50:5f:98:ef:03:4e:ec:df:eb:50:45:
a1:70:7b:82:45:3a:f7:89:6d:69:9b:ae:a5:e2:63:71:f7:d1:
d5:44:86:de:c9:d0:9b:13:9b:b0:3f:9f:e3:33:ca:3f:63:d9:
b9:67:40:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-fra.rpki-client.org