Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/FZumZQLGpfI6K6CgNxizk0c35Zc.roa
File: FZumZQLGpfI6K6CgNxizk0c35Zc.roa (raw, json)
Hash identifier: /PmFWTnTXAFX01yhh3rmIuHDAIWs45dSgte55ZQyiVU=
Subject key identifier: 15:9B:A6:65:02:C6:A5:F2:3A:2B:A0:A0:37:18:B3:93:47:37:E5:97
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 061F3B23
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/FZumZQLGpfI6K6CgNxizk0c35Zc.roa
Signing time: Sat 01 Jan 2022 08:06:11 +0000
ROA not before: Sat 01 Jan 2022 08:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51269
IP address blocks: 185.140.44.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102710051 (0x61f3b23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jan 1 08:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=159ba66502c6a5f23a2ba0a03718b3934737e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:ed:c2:34:00:f5:74:64:ca:63:17:dc:29:
4d:ea:dd:c0:f3:39:97:25:3f:66:15:8a:9a:84:b9:
9d:db:20:a7:bc:6a:a1:59:8d:d1:9d:87:8b:fe:05:
79:a5:18:ba:a0:18:25:ed:11:b6:5e:38:59:0a:f5:
df:3f:61:f6:76:44:eb:2d:1a:a3:55:4d:00:58:e4:
7f:17:08:57:0a:91:b3:a1:66:00:09:5d:1f:58:f6:
d9:fd:af:3e:1d:ee:9a:f1:d6:cc:b6:03:69:55:44:
0f:79:5d:9b:0c:fb:4e:90:60:dd:45:ac:1f:57:c1:
86:b4:a5:52:a0:fd:ee:94:35:19:b4:0d:ae:36:15:
11:b8:70:6a:1c:f1:7c:68:73:a5:f9:04:7b:aa:89:
83:c6:0d:b2:60:79:00:c6:82:b2:37:7c:40:45:e9:
03:a7:55:0e:91:7f:5b:92:8a:05:f4:03:4c:e7:d6:
27:f7:6c:84:6c:59:50:c4:1f:86:05:a0:d0:ee:f1:
03:d3:72:14:4c:57:4c:8d:b2:5b:8b:43:fc:00:23:
06:b6:c8:2e:1a:09:9e:0d:31:bc:0a:45:38:59:0c:
50:94:7d:0f:b9:7a:55:2d:c5:d3:cb:8c:3f:95:38:
69:23:f1:ce:98:9c:0b:97:dd:8d:ba:e8:7a:44:0c:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9B:A6:65:02:C6:A5:F2:3A:2B:A0:A0:37:18:B3:93:47:37:E5:97
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/FZumZQLGpfI6K6CgNxizk0c35Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.44.0/22
Signature Algorithm: sha256WithRSAEncryption
73:12:2b:b4:c1:1c:5d:3f:a8:47:48:72:be:c6:91:54:10:61:
7b:c8:03:ba:1b:31:00:73:ba:9f:0d:7e:c8:f2:db:3d:8c:e8:
76:7f:aa:a1:81:f4:46:21:f4:da:2d:36:52:dd:5c:94:ab:ee:
3f:b8:bf:f2:11:ed:e6:f2:ba:32:cf:d3:ea:54:45:4b:12:d2:
53:10:7a:fe:a1:06:f5:cb:cf:c2:c0:10:72:d6:52:d0:c7:9b:
47:35:82:00:42:73:f8:91:b1:dc:fc:4c:47:10:d6:af:20:5b:
33:56:98:91:62:2f:89:58:52:1d:c2:a3:69:b9:54:c1:4c:ce:
d7:68:16:f5:5e:4b:90:c9:2b:2c:e4:28:5c:57:5d:a6:8a:8b:
c6:17:69:4d:2e:62:b4:8b:1c:33:1a:9a:0e:a4:cf:dd:1f:9c:
35:43:e2:fe:86:5f:f6:20:12:74:05:c3:e2:58:65:6d:09:71:
63:26:db:7d:b6:e0:89:f5:b4:e2:23:4f:43:36:8c:d7:91:e1:
98:22:27:55:a3:9e:a5:c6:80:25:f1:b0:3e:c0:0a:d7:3e:f9:
81:17:63:7a:c9:01:53:a3:ff:ca:ca:ed:65:f1:b4:10:e1:c0:
88:6f:51:5d:5f:51:dc:fc:71:65:a0:85:34:76:a1:37:f9:6d:
b6:f6:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:28 2024 by rpki-client on console-ams.rpki-client.org