Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/J8_-z1WH4fO1puKrxyNQ-O8FU7Q.roa
File: J8_-z1WH4fO1puKrxyNQ-O8FU7Q.roa (raw, json)
Hash identifier: sk0A9SpPztB6xDN/V8NY+Cps/OJD3GZZoSvC/67XPb8=
Subject key identifier: 27:CF:FE:CF:55:87:E1:F3:B5:A6:E2:AB:C7:23:50:F8:EF:05:53:B4
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01838E12ED35CE7308FB2115808590714D9C
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/J8_-z1WH4fO1puKrxyNQ-O8FU7Q.roa
Signing time: Fri 30 Sep 2022 11:05:48 +0000
ROA not before: Fri 30 Sep 2022 11:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 85.239.147.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:12:ed:35:ce:73:08:fb:21:15:80:85:90:71:4d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 30 11:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27cffecf5587e1f3b5a6e2abc72350f8ef0553b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:6a:16:30:8f:4d:c8:f5:e1:9f:54:71:b3:
7d:61:01:bf:5d:8e:45:dc:8a:33:9e:86:bb:2c:bd:
eb:7b:99:5e:8b:44:fa:2f:0d:bd:b7:a0:c9:93:96:
a7:55:26:9f:17:31:f3:b9:ab:20:82:56:be:b1:2c:
bc:5b:e0:24:f9:76:5a:a3:5a:c5:73:c5:e4:75:07:
d5:9f:44:34:e4:8f:9b:37:f1:b0:c6:a6:f7:3e:4c:
5d:6c:8f:1a:f6:0f:9d:ef:82:15:db:75:3c:a0:66:
69:3d:70:ab:1b:99:60:16:73:9c:a1:a9:a6:27:dc:
49:02:7e:aa:8c:fb:f9:a2:ec:65:18:a6:59:6c:d0:
c5:59:17:dc:53:79:e7:14:84:df:31:dd:2a:3e:95:
b4:e0:d6:2a:20:8b:59:ac:f2:e0:15:ba:c5:29:77:
5b:db:88:c3:32:0c:07:15:de:ff:10:52:6f:1e:87:
fa:68:ed:2e:78:46:bb:33:65:0b:10:0b:8d:e7:65:
cc:5c:75:bb:8c:fc:aa:d2:6d:90:6a:32:38:41:97:
5e:62:04:2c:1d:ca:56:02:d1:22:e5:da:95:f1:fb:
85:cb:5d:58:f7:d9:d7:17:48:d3:9a:f9:7e:23:7f:
ce:80:d1:e4:00:30:66:5d:69:7e:f5:21:03:00:73:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:FE:CF:55:87:E1:F3:B5:A6:E2:AB:C7:23:50:F8:EF:05:53:B4
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/J8_-z1WH4fO1puKrxyNQ-O8FU7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.147.0/24
85.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a6:23:f3:a2:93:75:9f:e6:a8:af:c8:84:10:f8:3e:eb:dc:
c5:39:32:d1:05:ca:92:e4:e4:94:6a:0d:c8:76:9a:6f:21:f9:
5d:a4:aa:95:02:f7:3b:9d:10:5b:c3:5e:8c:49:37:20:9a:27:
9f:a7:cc:85:fd:b9:e4:0e:58:e8:24:cc:0f:1f:84:cf:7d:17:
6a:8d:f3:df:6e:17:e0:8c:40:13:2f:c9:d1:92:ad:58:84:61:
33:e2:6d:e0:ce:89:45:fb:3e:9e:c4:da:9d:82:04:ed:b2:3b:
2c:b0:10:3d:1b:07:17:72:b8:c8:44:b1:30:a4:86:88:38:96:
5a:ee:81:3e:a6:ab:4a:94:9d:f8:72:b1:a8:79:8a:de:70:c6:
9b:ce:25:5a:54:76:fa:24:d3:ce:7b:f2:b2:8e:a9:fa:1e:e0:
3a:27:3d:fd:86:1e:0a:eb:1e:5b:f4:4f:fe:1b:93:3f:75:34:
95:dc:e2:51:88:62:eb:80:8b:37:06:db:cb:fc:7c:96:3e:80:
28:44:25:2d:e6:1d:ac:3a:ce:40:c5:42:70:a4:b8:0d:f5:37:
49:7f:fb:29:a4:58:aa:98:2b:31:39:93:46:e3:7e:32:84:8f:
ec:ce:de:22:9e:97:60:f7:06:e8:c5:21:30:cc:c8:38:d2:cc:
d5:d3:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org