Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-9ngcnvPgMdzKo9u01ERd2hsn14.roa
File: 1-9ngcnvPgMdzKo9u01ERd2hsn14.roa (raw, json)
Hash identifier: 8qwFsoaC8NqAPXm/0BuJC8nNmQkHtQJn/emV/a5db/I=
Subject key identifier: FB:D9:E0:72:7B:CF:80:C7:73:2A:8F:6E:D3:51:11:77:68:6C:9F:5E
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 058FFA02
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-9ngcnvPgMdzKo9u01ERd2hsn14.roa
Signing time: Thu 16 Jun 2022 07:04:46 +0000
ROA not before: Thu 16 Jun 2022 07:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 85.239.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93321730 (0x58ffa02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jun 16 07:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbd9e0727bcf80c7732a8f6ed3511177686c9f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:17:49:ff:97:e2:3d:0b:a8:e4:bf:94:64:
84:1a:cf:05:a7:35:78:02:b1:8e:65:d3:80:e6:b9:
b0:78:80:83:8c:d3:e8:82:9f:ac:66:0a:59:6e:88:
66:43:f1:e7:1c:76:26:95:a8:d5:41:d8:e0:63:1a:
0c:e0:a1:bf:6e:9c:5b:a0:5d:54:e5:83:ff:e9:68:
82:2d:34:de:66:1e:4d:c2:73:3a:46:7d:63:8e:e3:
30:45:e5:05:99:5d:f4:d2:0c:72:18:59:11:5a:e6:
7c:34:9b:53:af:16:85:df:6f:a2:11:97:76:22:b5:
cf:34:84:00:25:c8:f3:44:e1:be:1d:d1:d1:19:90:
58:3b:2f:32:2b:3a:04:e7:e4:55:c7:68:1a:81:2e:
6e:cd:af:4c:3e:28:8d:02:65:ab:5b:26:95:fc:2e:
86:38:a4:c3:e6:76:d1:01:e4:3d:2b:74:0f:0b:6e:
7d:26:96:ee:d9:37:43:b9:7d:f2:87:e4:7e:7e:31:
57:fd:b0:9b:cc:05:04:99:12:69:e7:ac:91:84:24:
6b:6d:5e:e2:a6:f8:70:63:dd:a7:89:f1:c6:00:89:
17:89:49:cc:12:67:ac:ce:97:cc:75:db:8f:91:f5:
14:16:d3:5c:74:c4:b9:b6:72:62:49:34:29:93:00:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D9:E0:72:7B:CF:80:C7:73:2A:8F:6E:D3:51:11:77:68:6C:9F:5E
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-9ngcnvPgMdzKo9u01ERd2hsn14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:2b:98:b7:6a:29:6b:4f:fa:7e:2d:56:c6:27:4b:74:da:0d:
13:1b:84:65:95:42:11:36:1f:22:cf:88:77:9c:c0:24:61:6f:
cc:f8:b0:37:60:c9:67:5e:7b:a7:bb:06:ec:bf:ff:27:b2:ca:
33:21:15:3c:a7:ce:2d:c1:d4:5a:85:bc:87:b6:f7:40:83:82:
c2:cc:b3:c8:3c:98:a8:3c:14:d1:15:ee:43:6f:da:5b:32:42:
d9:78:7d:7f:45:6c:e7:16:40:1c:b8:bb:59:52:ee:0a:d4:40:
23:12:c7:af:2e:e0:6c:f0:ac:c0:57:1d:25:72:00:e9:4a:2d:
73:d7:b7:28:de:64:3d:4c:2b:68:43:23:87:2d:3f:62:45:68:
9b:91:8d:60:fe:25:1a:c0:29:1c:b9:c6:09:a5:21:5f:9e:e9:
7a:a4:ca:3a:d8:e0:4f:07:c4:57:db:ce:eb:45:71:6f:b9:bf:
57:c3:f3:4b:3a:42:05:33:9d:7d:45:bb:1e:c7:da:ff:64:80:
28:c7:6d:84:e8:72:50:7b:80:3a:f0:cf:e2:2b:66:36:71:53:
bf:a7:f1:a9:bb:13:2e:8b:1a:55:04:71:0b:c3:4b:a9:5e:7b:
c9:81:b4:6b:52:b7:fa:77:67:4d:e5:bd:4e:6b:2c:df:ca:26:
0e:ac:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org