Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/8XcP_3Nc4F8ueiOZmE7GcuFAYcU.roa
File: 8XcP_3Nc4F8ueiOZmE7GcuFAYcU.roa (raw, json)
Hash identifier: OQPotryMcjfC57XChrR1314MRbvGXtxvB1g2Ue2IFqM=
Subject key identifier: F1:77:0F:FF:73:5C:E0:5F:2E:7A:23:99:98:4E:C6:72:E1:40:61:C5
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0183EF3FF4AFA0697592753461CA8E0ED002
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/8XcP_3Nc4F8ueiOZmE7GcuFAYcU.roa
Signing time: Wed 19 Oct 2022 07:58:09 +0000
ROA not before: Wed 19 Oct 2022 07:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 85.203.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:3f:f4:af:a0:69:75:92:75:34:61:ca:8e:0e:d0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Oct 19 07:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1770fff735ce05f2e7a2399984ec672e14061c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:55:25:d3:ab:7d:6e:5f:c0:5a:07:78:af:
3b:a5:a8:fd:86:64:19:f5:42:0c:42:5a:b3:62:28:
c2:66:2e:dd:fc:ac:56:94:bb:17:7c:a8:eb:8b:fa:
a6:36:6e:d0:61:d4:db:16:b3:af:b8:06:01:56:91:
63:a5:69:07:37:b6:72:78:bd:5c:4b:79:72:8f:3e:
7a:e6:8c:2e:f0:5c:47:d9:f9:d8:84:1d:91:02:2a:
52:a3:69:d4:ce:f5:00:e4:79:35:60:eb:ad:da:b4:
e0:4a:e5:ee:74:b5:f5:7d:07:f4:fc:32:54:9c:3c:
7e:90:d3:21:3e:b4:c6:88:5c:71:03:65:7b:38:68:
04:8d:d5:bf:a7:ef:f5:ed:84:15:83:e2:2f:a7:f4:
07:d3:3b:66:4d:99:28:e8:0e:dc:66:55:25:ee:a7:
52:7b:d8:38:08:d3:3f:f9:c8:e0:83:e9:98:e9:f5:
ca:ee:d0:74:fe:34:02:8b:e6:20:fb:a3:f6:73:24:
3e:e2:3a:67:22:4a:7f:b9:12:34:ab:69:fc:7e:7d:
c0:cc:f7:e9:78:3e:fa:13:ef:53:dc:f3:fb:22:72:
39:24:7a:88:3a:20:7d:ba:80:a1:89:b6:54:60:49:
cb:62:84:d2:c0:f5:df:48:03:e9:3f:b6:7e:cc:3e:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:77:0F:FF:73:5C:E0:5F:2E:7A:23:99:98:4E:C6:72:E1:40:61:C5
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/8XcP_3Nc4F8ueiOZmE7GcuFAYcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.39.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ad:d8:5e:75:a4:4d:b3:5b:f5:81:08:c2:e4:c6:3c:d8:c7:
51:39:12:73:6c:e0:66:a0:f2:9c:5d:13:89:39:4a:da:3b:61:
1a:4f:bb:cc:f7:1d:04:16:f3:39:1a:e3:53:f6:ef:eb:de:2a:
f1:61:80:a0:83:c1:31:9e:1a:fa:d1:b3:4d:06:50:e3:f4:79:
f7:ba:38:13:35:cb:c0:1e:c3:b0:61:39:99:30:c8:6e:ac:82:
9e:66:e1:d9:49:07:87:41:df:d3:24:3a:21:39:3f:97:52:4c:
75:0b:f8:22:66:da:f6:e5:52:7b:bd:7d:c7:cd:9a:fb:e1:3a:
2d:53:9e:db:16:38:9c:06:72:76:73:19:0b:af:63:81:48:fb:
f0:3e:bc:b4:4c:d9:4b:0e:16:71:45:4c:68:e5:15:34:ee:9f:
f6:04:77:b4:46:a6:ea:4b:2a:58:5b:6b:89:f0:da:06:43:df:
2b:58:89:49:90:70:13:92:ba:23:88:ed:65:45:4d:02:10:94:
0c:52:dc:99:5e:b8:64:53:aa:2b:60:a9:14:95:9b:40:a0:75:
50:f1:13:3d:56:a5:62:4b:a6:c6:a7:ff:6a:d2:a5:00:4f:67:
a0:08:6c:20:d8:89:ca:47:8e:d4:7e:cd:ff:f0:84:40:c3:ab:
30:5b:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:50 2023 by rpki-client on console-ams.rpki-client.org