Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/0_l22teA0bmaGBWrkoxofQugFC0.roa
File: 0_l22teA0bmaGBWrkoxofQugFC0.roa (raw, json)
Hash identifier: nsiEjeXS+ChO42wK5ZbyehPxjodIIYoxesKckpQcY9o=
Subject key identifier: D3:F9:76:DA:D7:80:D1:B9:9A:18:15:AB:92:8C:68:7D:0B:A0:14:2D
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 0183C23D8BEA6ECF87ADAC77294F695FF3BC
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/0_l22teA0bmaGBWrkoxofQugFC0.roa
Signing time: Mon 10 Oct 2022 14:12:36 +0000
ROA not before: Mon 10 Oct 2022 14:12:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60320
IP address blocks: 185.242.184.0/24 maxlen: 24
2a13:6000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:3d:8b:ea:6e:cf:87:ad:ac:77:29:4f:69:5f:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Oct 10 14:12:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3f976dad780d1b99a1815ab928c687d0ba0142d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:38:49:e7:c0:a9:f7:c1:ed:5b:8a:fa:4f:
3c:79:1c:37:4d:a8:d8:46:d1:00:e0:18:a6:4f:ea:
40:16:c6:38:2d:81:86:07:d2:da:df:c4:0c:bf:ee:
13:a5:e0:9e:6a:07:6d:48:92:9c:07:0f:6d:e4:0d:
da:68:0a:6f:87:64:c1:7f:58:bb:ed:45:dd:21:6e:
e6:b2:a5:b6:e5:c3:9a:24:43:46:09:ad:ef:4e:5a:
3f:45:e9:08:fe:ac:fd:77:bf:99:46:bc:86:f6:c6:
b8:54:c4:da:66:59:96:35:a1:e7:b1:1b:7f:84:0e:
f5:e2:54:34:1b:6e:f1:a7:aa:ce:66:26:8a:3f:ce:
97:2f:26:1f:70:45:41:66:1b:cc:1c:f9:6d:be:78:
c3:be:fa:23:38:6b:f4:d3:18:9a:be:e6:32:8a:c0:
92:00:d6:b8:1b:03:9a:18:3a:f3:a9:da:ed:c5:20:
72:92:05:aa:a0:13:71:b3:cc:c9:1a:16:35:02:c7:
1b:b8:42:3b:c8:5b:a6:96:b3:78:1b:a7:0e:5f:eb:
00:82:10:0d:84:c0:cb:b7:87:4d:bc:75:29:3b:a3:
25:0f:55:15:0c:e2:64:09:77:9b:89:df:22:96:6d:
da:74:38:df:6e:b1:2e:05:a3:44:b3:07:28:56:8c:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:76:DA:D7:80:D1:B9:9A:18:15:AB:92:8C:68:7D:0B:A0:14:2D
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/0_l22teA0bmaGBWrkoxofQugFC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.184.0/24
IPv6:
2a13:6000::/29
Signature Algorithm: sha256WithRSAEncryption
49:07:91:15:db:50:be:2a:84:45:3e:4f:60:66:8e:d0:5e:79:
fc:ab:8b:fc:cf:5e:be:47:7d:0c:ae:2f:af:3d:98:78:3d:88:
88:a9:5e:b9:3f:ff:dd:5c:46:dd:95:e2:87:93:cf:b8:1d:ac:
9d:92:39:82:3b:de:0e:07:1e:e6:47:89:ab:96:c0:a5:d4:ae:
0d:b9:80:25:3e:d3:fc:dc:f4:39:9f:11:a1:03:f2:e0:1f:cf:
50:c0:37:e7:00:a4:da:30:68:70:93:82:ad:2b:4b:dd:61:45:
64:55:01:bd:df:ab:d7:14:0a:02:6f:67:25:06:65:bc:35:18:
6c:a1:4c:3c:05:54:43:06:ed:eb:30:c3:7d:ad:28:b6:f9:46:
20:38:31:22:76:27:2b:50:72:e9:58:77:9a:ac:b4:43:2c:ee:
0e:e8:dc:9d:82:82:7b:ec:66:36:00:90:25:ff:99:39:d6:71:
57:18:f7:b7:81:48:29:b2:ac:0b:de:4e:96:df:29:de:b8:be:
29:c2:73:da:69:16:bd:99:81:e1:e2:97:86:f5:56:cd:5c:d0:
a6:70:c9:a4:42:42:a9:86:eb:bd:10:e8:b4:f1:36:ca:1d:9d:
59:56:4e:f4:27:01:b2:e7:5b:38:82:a5:0a:12:16:93:0b:df:
8a:94:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org