Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/kG3U3BRubgGrKqYXcZpcC02LXUg.roa
File: kG3U3BRubgGrKqYXcZpcC02LXUg.roa (raw, json)
Hash identifier: dAJzdhStCYUZMhWNMV0cuYCWmjSyNU68EhwW/Ny4rbM=
Subject key identifier: 90:6D:D4:DC:14:6E:6E:01:AB:2A:A6:17:71:9A:5C:0B:4D:8B:5D:48
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 02A72862
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/kG3U3BRubgGrKqYXcZpcC02LXUg.roa
Signing time: Sat 01 Jan 2022 06:53:03 +0000
ROA not before: Sat 01 Jan 2022 06:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211814
IP address blocks: 185.225.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44509282 (0x2a72862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Jan 1 06:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=906dd4dc146e6e01ab2aa617719a5c0b4d8b5d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:e9:a3:c2:f1:10:24:43:74:81:03:11:8b:
a7:4e:d9:6c:19:18:fc:d3:29:28:c0:8d:d1:71:44:
21:9a:2d:04:83:84:99:d5:ca:18:88:d9:67:6a:ef:
be:a6:55:00:af:ee:f7:4c:08:52:68:64:f4:93:bb:
64:45:91:39:59:d4:c1:2b:91:53:8c:cd:4b:f9:15:
72:38:fe:46:31:38:58:98:66:5c:a6:d7:31:e9:ed:
95:c1:0a:17:97:4a:f1:d0:88:64:15:3d:4c:6d:e3:
dd:6e:e5:0a:d7:ab:11:1b:3d:b4:d0:b3:85:d2:83:
17:ae:7d:c3:dc:80:bd:40:cd:8d:f7:bc:45:ca:83:
0a:9d:b4:e7:75:49:88:9f:c0:64:88:5c:0a:82:3d:
46:eb:07:37:17:dc:ac:0c:59:83:f3:6a:14:08:72:
8a:de:35:a7:f0:d8:65:c1:1a:39:4e:2d:f9:de:f2:
9b:e0:07:22:4f:49:ba:1e:d9:49:84:3f:42:74:dc:
21:23:d1:85:48:da:f7:91:91:7d:78:71:9a:ac:9a:
3a:f9:33:78:57:0f:2f:dd:97:25:92:4c:b6:3e:7c:
bb:2b:9b:27:2e:1f:6c:55:68:6d:8a:05:f0:36:3c:
6d:36:28:29:59:48:bc:99:46:70:53:2b:e1:05:a9:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:D4:DC:14:6E:6E:01:AB:2A:A6:17:71:9A:5C:0B:4D:8B:5D:48
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/kG3U3BRubgGrKqYXcZpcC02LXUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.199.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6d:0d:93:82:9d:eb:44:db:b9:eb:91:0a:77:42:27:e9:63:
8e:8c:47:01:c2:93:7d:84:aa:81:cd:06:be:4e:35:9b:09:d4:
76:3c:5a:a8:19:68:c4:ec:ea:e0:94:f2:7d:4a:13:62:60:9e:
2f:8b:a3:76:b7:09:a6:e1:74:b4:b5:3e:d0:82:bc:91:9c:6e:
ac:dc:be:18:8d:20:cb:a8:5e:3e:77:9d:d7:b5:e4:8d:9e:c5:
0e:8a:1a:57:2b:9a:1a:6b:59:2d:20:4c:1c:3f:30:02:6f:0f:
59:fb:d9:3e:fc:32:bd:72:fc:23:89:1d:61:50:06:9e:d1:6a:
a1:ed:31:56:92:88:a9:b5:9b:98:09:65:55:78:a6:9b:82:ad:
47:00:8b:bb:45:86:a5:56:2e:c6:f3:ce:17:64:24:df:4c:05:
3e:1f:a7:98:4a:8a:d0:13:4a:e0:91:91:0b:07:1e:1a:cf:17:
e4:c4:bb:4e:5f:d3:f0:96:79:ac:ee:9c:d4:e4:2c:72:00:e3:
6b:71:32:2b:21:0a:87:fc:6b:4f:f2:6b:17:9f:f7:83:89:f9:
b6:a3:25:8b:0e:09:80:a3:b0:91:f1:63:63:18:74:1d:e3:51:
e7:c8:2e:59:bc:9b:9f:3b:76:b2:65:d8:1d:d6:70:5b:85:b5:
b9:56:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org