Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/HF0jblkrYjDd55iBCth2suAj4AM.roa
File: HF0jblkrYjDd55iBCth2suAj4AM.roa (raw, json)
Hash identifier: cq9vyk+S+wV0OktFkjN1oogp24peZg4D81k3aW/wwcQ=
Subject key identifier: 1C:5D:23:6E:59:2B:62:30:DD:E7:98:81:0A:D8:76:B2:E0:23:E0:03
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 06DC4B62
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/HF0jblkrYjDd55iBCth2suAj4AM.roa
Signing time: Sat 01 Jan 2022 07:52:41 +0000
ROA not before: Sat 01 Jan 2022 07:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.195.228.0/24 maxlen: 24
185.195.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115100514 (0x6dc4b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jan 1 07:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c5d236e592b6230dde798810ad876b2e023e003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:ad:37:25:83:ba:8a:66:fc:91:c0:05:2d:
95:37:10:8b:86:6d:20:f9:89:06:9b:b1:c0:36:ec:
3f:f2:66:9d:ba:fa:b0:47:e1:ce:d1:ab:06:68:72:
c5:79:15:b0:29:d3:c1:c1:00:b1:45:3c:62:15:ae:
ef:f8:6b:9b:ac:10:c5:15:76:bb:2b:58:cd:2e:c0:
b3:c7:8c:ce:1f:c0:47:5e:af:d1:29:b7:a2:55:c7:
52:d2:b2:e1:6e:1e:b8:51:55:31:20:b3:f7:92:66:
5c:f0:53:07:86:93:ee:be:44:e4:0c:9e:d3:96:b8:
4a:3e:00:ca:7d:e5:d1:cc:2b:fd:86:8d:c3:c9:94:
00:0a:55:45:f7:31:54:b3:21:0b:0c:40:5b:70:66:
ff:ef:9c:c3:67:d1:c0:cc:1a:2f:47:7c:52:fe:7b:
34:21:55:5b:98:65:5a:5d:12:0d:91:ae:e2:cd:fa:
c6:83:fc:99:dd:fd:ae:93:93:b4:66:56:72:83:20:
71:15:a4:7f:74:a2:47:e5:0a:b9:6a:34:8b:f3:16:
27:61:03:bc:07:1a:e7:e3:7f:54:fc:a4:a0:01:f2:
5e:f0:63:28:c8:29:e8:24:ec:1f:92:7d:f5:a5:20:
f9:94:00:58:b2:63:1a:3d:d1:86:eb:9c:7c:c0:e9:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:23:6E:59:2B:62:30:DD:E7:98:81:0A:D8:76:B2:E0:23:E0:03
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/HF0jblkrYjDd55iBCth2suAj4AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.228.0/23
Signature Algorithm: sha256WithRSAEncryption
17:1a:0b:f8:59:63:a5:73:d3:90:ff:73:ee:0f:32:b3:26:dd:
f5:26:11:10:b3:77:c7:40:82:eb:b9:e3:84:c0:8b:e5:12:09:
3c:7f:87:c9:36:48:9e:8a:e1:1e:b5:19:f7:20:ea:06:46:96:
c6:3d:45:f4:b0:cc:86:b1:d2:29:0c:e6:09:b8:d6:ba:02:94:
a0:04:21:79:46:8f:89:88:bf:8b:9f:35:38:ff:e7:bf:97:d7:
aa:df:fb:79:b0:3d:b1:52:56:a4:eb:ea:67:e9:00:a1:e9:a2:
98:da:4f:b9:45:0a:11:15:d0:30:d3:71:5e:4b:91:35:f8:88:
6d:9a:cd:4b:f3:98:db:f3:ee:59:c6:d9:82:c5:e0:28:cc:ca:
38:56:a5:85:c3:ba:b7:4c:9c:15:8e:92:2a:a7:bf:7f:92:cd:
64:42:f3:72:19:0e:89:13:f0:cc:14:f6:8e:c5:3e:92:36:3b:
2e:89:b3:3c:be:28:d5:66:21:72:27:28:0a:65:a1:fb:3c:03:
86:44:22:45:d4:83:ed:cc:69:77:d4:9b:be:0f:4a:b3:ba:39:
f6:44:33:02:bd:b3:d3:0b:3c:a2:92:bb:24:0a:38:30:a2:dc:
cd:b5:c7:e9:b6:b2:0a:10:4d:ce:dc:43:44:7c:35:20:f1:d3:
2d:83:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:48 2024 by rpki-client on console-fra.rpki-client.org