Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/s6tCQMQaVZ1SqURFFlfLY9vs7Kk.roa
File: s6tCQMQaVZ1SqURFFlfLY9vs7Kk.roa (raw, json)
Hash identifier: RWY8EUMN9DeEwk1EtxaAAo6U6zD4Mi2E88k7bJ9+iQo=
Subject key identifier: B3:AB:42:40:C4:1A:55:9D:52:A9:44:45:16:57:CB:63:DB:EC:EC:A9
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 09F46544
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/s6tCQMQaVZ1SqURFFlfLY9vs7Kk.roa
Signing time: Sat 01 Jan 2022 14:57:35 +0000
ROA not before: Sat 01 Jan 2022 14:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47745
IP address blocks: 85.187.1.0/24 maxlen: 24
185.255.59.0/24 maxlen: 24
151.237.61.0/24 maxlen: 24
151.237.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167011652 (0x9f46544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Jan 1 14:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3ab4240c41a559d52a944451657cb63dbececa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:f9:ee:99:7c:67:83:4b:9f:0b:29:92:b5:
b9:15:a1:a3:b3:82:c2:bf:e4:7d:6a:fd:3e:7a:bd:
d2:b1:65:af:40:29:f1:4a:ee:90:9b:e8:07:23:1d:
68:2b:ea:8b:df:34:10:30:50:16:d1:a5:91:34:25:
c3:c2:ee:5d:a2:0a:42:62:29:07:48:f7:2d:b4:45:
83:a7:42:6c:27:8b:1d:0c:52:88:48:47:58:81:b1:
c6:5a:d9:f0:48:61:cf:fb:e2:13:ca:62:3c:36:9a:
e4:a6:fb:33:ce:3a:a2:e5:2a:f5:53:9c:73:68:ba:
8b:65:4e:f1:e5:75:41:2d:da:2c:bc:25:e2:3b:9c:
cc:2c:05:ba:a0:bb:c1:ad:ec:69:2d:5d:0b:f1:56:
3c:d6:a0:18:1d:f3:ed:f4:ed:4d:71:71:ca:73:4c:
41:79:b6:75:62:ec:a6:02:a6:40:33:cb:cb:9d:eb:
75:11:db:09:31:59:2e:8d:5c:49:fd:91:92:9d:78:
66:b1:cf:57:00:cf:b1:31:65:98:92:d0:a6:d1:04:
0a:f6:5d:0c:07:d0:ec:b5:49:09:0f:a8:8f:cb:fd:
57:c6:53:d4:71:17:72:d9:75:b3:64:b6:e4:ef:32:
76:09:34:6e:17:fe:22:d6:a5:27:90:c8:ce:a0:b5:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:42:40:C4:1A:55:9D:52:A9:44:45:16:57:CB:63:DB:EC:EC:A9
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/s6tCQMQaVZ1SqURFFlfLY9vs7Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.1.0/24
151.237.60.0/23
185.255.59.0/24
Signature Algorithm: sha256WithRSAEncryption
67:46:c6:6a:d0:f7:c4:d7:90:42:61:22:a8:d8:49:73:86:dc:
e5:57:99:f1:7a:6f:d5:90:99:50:c3:49:aa:31:31:2d:73:5b:
66:61:f3:70:67:44:86:76:a1:da:91:fb:21:91:e0:70:09:d5:
00:0a:f7:ee:03:88:2f:e9:b0:45:7a:e3:a9:32:07:22:a7:32:
d5:c0:a9:6c:df:1d:d1:d6:ab:7e:5b:6e:ff:e9:c3:a3:7b:b2:
14:b5:a8:e3:a0:0b:e9:05:9d:8e:96:d3:c7:c8:72:de:fa:af:
21:5a:24:2d:e4:9c:ef:3e:16:5d:68:27:51:1a:46:6e:b4:9c:
49:f5:84:90:72:80:0a:56:5d:84:60:f8:8c:43:61:32:57:59:
b1:4e:89:db:6a:9d:04:93:0b:6e:5d:fb:a8:30:6b:24:8d:e2:
f6:69:1a:67:5d:06:db:04:64:fa:c6:dd:bf:80:6f:e9:26:05:
a4:af:e8:c7:f5:fc:9a:13:ac:24:64:44:af:f7:1d:b7:3b:c6:
22:bc:28:17:85:f6:9a:30:a7:17:fc:6e:2a:98:69:1a:87:5d:
2b:fa:3a:fc:46:5b:e6:cb:f2:64:e5:6a:cc:90:0c:a0:56:8f:
95:d8:82:bf:79:fc:00:79:66:e7:f1:c7:6c:73:e5:52:4b:68:
d2:15:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:07 2024 by rpki-client on console-fra.rpki-client.org