Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/IRh7XiwD8c41QqNN4jNemVY4yLU.roa
File: IRh7XiwD8c41QqNN4jNemVY4yLU.roa (raw, json)
Hash identifier: t6vmq8eCpgLYCBFoNLusS2LxfiSlxg48m5wtdV9P8Hs=
Subject key identifier: 21:18:7B:5E:2C:03:F1:CE:35:42:A3:4D:E2:33:5E:99:56:38:C8:B5
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 055EC662
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/IRh7XiwD8c41QqNN4jNemVY4yLU.roa
Signing time: Fri 27 May 2022 14:15:15 +0000
ROA not before: Fri 27 May 2022 14:15:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 85.239.149.0/24 maxlen: 24
85.239.151.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90097250 (0x55ec662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 27 14:15:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21187b5e2c03f1ce3542a34de2335e995638c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:62:d5:d3:cd:98:8f:f2:48:3f:98:b6:c2:
62:7b:c1:42:6e:06:c0:9d:f6:d6:ea:22:3f:58:11:
95:11:14:d7:93:c1:52:64:fe:71:f8:aa:c0:65:46:
0f:f3:54:0c:1e:45:ea:5c:49:99:e7:2d:25:8a:8e:
d8:e5:5a:1f:ce:05:b0:eb:3e:5f:d2:61:5b:3b:67:
a0:b0:f7:ce:57:ca:a5:7b:b3:d3:16:b7:7d:aa:de:
a4:bd:7c:14:ad:f1:07:01:5a:f1:56:7d:5e:e6:e2:
ae:28:a0:ee:d3:9d:de:53:f1:24:a9:35:d3:03:1e:
b7:07:34:6f:8b:61:d4:d6:5a:05:3c:f5:17:85:9d:
77:4b:b7:89:c1:72:e1:db:15:a8:d1:70:1a:13:bc:
65:33:2e:b8:29:61:18:c5:4f:5d:bf:a6:38:70:b1:
ef:ce:b0:75:ac:1c:5c:ab:60:98:f5:39:a9:08:fb:
ec:8e:c4:7c:54:df:dd:8f:20:da:44:70:53:f4:9a:
ab:41:3f:2d:76:0a:d9:7a:2e:08:6b:e1:42:e5:83:
98:ce:70:4a:21:0e:ff:29:72:92:c5:4a:e4:c2:f7:
08:77:bb:ed:6c:3c:3b:b2:21:30:ab:40:3a:84:bd:
67:b7:9e:09:7a:c1:42:c9:fd:41:09:67:f9:13:2c:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:7B:5E:2C:03:F1:CE:35:42:A3:4D:E2:33:5E:99:56:38:C8:B5
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/IRh7XiwD8c41QqNN4jNemVY4yLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.149.0/24
85.239.151.0/24
185.95.157.0/24
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
98:84:42:b6:49:54:36:6a:e7:19:82:38:0e:ff:eb:94:a2:b8:
fe:ef:c2:a3:fb:ca:04:f8:b1:d4:8c:47:63:8c:11:79:5b:9e:
43:c7:7a:95:be:0b:17:76:0f:6d:2d:61:a8:d8:85:96:85:d2:
b2:e1:6e:d6:f2:87:1d:c7:53:f4:82:d1:fb:a8:9c:e2:52:18:
a4:8e:e7:b8:b0:eb:40:b0:32:23:e4:b3:a7:4e:58:86:f1:73:
3d:8a:a3:2b:2d:98:b4:2d:fe:87:d4:c0:6f:74:de:71:13:a9:
a7:dd:92:7e:f8:fd:09:66:9d:a0:30:c7:5f:e6:6c:ac:bf:f5:
81:2b:f4:b7:24:59:62:5f:fc:71:60:2d:80:14:a7:23:09:21:
1c:e6:71:ff:97:ce:94:f9:bb:2d:25:06:30:6b:82:cb:28:84:
6e:59:79:f6:0f:a8:a3:9a:af:0b:59:47:1f:15:ee:f7:e0:48:
74:93:71:56:29:89:b0:b2:3d:55:8c:b2:9b:93:00:97:4e:e8:
d2:38:f7:e5:f4:fc:79:a3:f1:37:6d:38:7e:ca:7c:ce:52:3b:
d6:7d:ce:59:54:2f:4d:5b:fc:77:f3:76:fe:79:1c:e4:0d:ed:
e0:5b:cf:66:e4:f7:ca:9f:91:86:12:d8:19:96:79:36:cf:2a:
20:64:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org