Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/4CQ0WXBi0PTs9vZGouypRQQh-Ec.roa
File: 4CQ0WXBi0PTs9vZGouypRQQh-Ec.roa (raw, json)
Hash identifier: KbYLwBwz93pLhgIY4Z5VVAXZYegQ2safljLYCMFiPLM=
Subject key identifier: E0:24:34:59:70:62:D0:F4:EC:F6:F6:46:A2:EC:A9:45:04:21:F8:47
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 079E6EE1
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/4CQ0WXBi0PTs9vZGouypRQQh-Ec.roa
Signing time: Sat 01 Jan 2022 09:03:05 +0000
ROA not before: Sat 01 Jan 2022 09:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10122
IP address blocks: 185.22.40.0/22 maxlen: 22
5.150.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127823585 (0x79e6ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 1 09:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e02434597062d0f4ecf6f646a2eca9450421f847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:0a:b5:03:b9:b9:07:f2:fa:a5:26:87:ed:
cd:73:55:b9:b1:fd:9f:e9:88:de:6d:4a:5c:9f:22:
11:bf:21:9a:73:7f:cf:ad:cd:06:97:81:02:d8:1d:
90:a3:b5:4f:32:1d:c7:e0:51:68:db:12:23:35:c7:
93:9e:01:8b:b4:15:ca:8c:77:f1:59:5f:42:9a:4f:
37:af:99:4d:ee:cf:d3:ea:7c:2a:37:7f:a8:08:e4:
b6:fc:0e:93:1b:f9:c3:fa:44:48:1d:37:db:66:0f:
33:3c:11:8e:17:c2:7f:39:6a:a3:35:d8:ca:c4:8c:
d1:e9:10:45:20:d1:05:71:bd:7b:8b:33:51:5d:28:
d6:6e:9c:7a:9a:fb:c6:9e:2b:ac:0d:2e:77:df:22:
10:6e:8b:a2:c7:28:3c:5e:23:52:7a:88:bb:e9:e2:
ac:0a:f0:01:ed:6b:e5:c4:38:c8:4a:14:dc:8e:5e:
0c:34:6b:cc:4e:44:06:70:d3:72:0b:f7:b9:50:64:
37:29:d3:64:53:81:ef:33:03:f5:3b:87:10:c1:b5:
53:b0:53:00:4f:82:e2:63:43:cc:60:48:45:98:07:
52:13:56:04:95:22:0f:8d:eb:a8:ff:c6:ed:28:8f:
2e:d1:7b:d9:e1:6c:18:78:23:b7:35:26:77:c0:bc:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:24:34:59:70:62:D0:F4:EC:F6:F6:46:A2:EC:A9:45:04:21:F8:47
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/4CQ0WXBi0PTs9vZGouypRQQh-Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.156.0/22
185.22.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:33:0d:54:26:a2:77:b4:db:ca:b3:ae:1b:d7:23:80:01:f2:
c6:63:8f:ec:69:72:4e:6a:08:61:94:85:88:18:5e:f6:13:f6:
f4:0b:93:b8:9a:7b:f5:f7:e2:ea:22:10:c5:9b:4f:cc:e8:f6:
19:f2:82:43:b5:49:de:f8:8a:f9:10:ae:90:2d:c0:e1:9b:1f:
81:f4:a0:5f:61:35:fb:fb:fd:b9:a2:cd:3b:65:fc:28:65:b7:
28:e7:c4:c5:3d:ba:bc:81:e3:e7:cf:a8:c7:07:c3:92:07:6f:
d4:ae:36:0a:a2:d1:e8:3f:cc:68:95:94:84:66:e3:57:98:b2:
87:6d:ff:6c:14:ca:43:1a:c8:1f:19:51:6c:6e:6e:b4:7c:0c:
5c:45:ac:b4:1d:84:98:6f:94:d3:ea:63:2c:fb:2c:09:69:26:
11:be:e6:14:b5:e9:fb:6a:ef:85:6e:13:d2:e8:b3:a3:af:1e:
98:51:73:72:6d:00:94:3b:93:b1:ff:75:6d:6a:fc:a9:cf:7b:
38:59:c9:58:2f:ef:3f:d6:41:67:21:57:6f:dd:d6:45:8d:3b:
3a:54:de:74:bd:08:24:cb:16:00:7e:c0:3c:f5:80:f4:87:e9:
40:cf:0f:b3:a9:9f:8a:b5:72:e7:74:db:60:02:fd:e7:6b:0b:
24:48:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:31 2024 by rpki-client on console-ams.rpki-client.org