Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0jLxtX7w8OdC9C7AyP8WhfO32lY.roa
File: 0jLxtX7w8OdC9C7AyP8WhfO32lY.roa (raw, json)
Hash identifier: Yooda4yuCELqr8VKo2c2BMeEPek6QaYvBvSvCvhI/3w=
Subject key identifier: D2:32:F1:B5:7E:F0:F0:E7:42:F4:2E:C0:C8:FF:16:85:F3:B7:DA:56
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B122C03
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0jLxtX7w8OdC9C7AyP8WhfO32lY.roa
Signing time: Sat 01 Jan 2022 13:58:09 +0000
ROA not before: Sat 01 Jan 2022 13:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204885
IP address blocks: 85.31.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722611203 (0x2b122c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d232f1b57ef0f0e742f42ec0c8ff1685f3b7da56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:2b:58:66:43:26:ad:3f:29:f2:7c:e2:e1:
5d:e0:88:db:50:37:df:a5:b1:3e:8e:05:c4:0e:95:
91:32:ec:12:8b:0d:05:e9:f1:38:7b:fd:d3:80:e0:
d3:05:ac:bf:0b:c4:e5:80:c2:a3:76:98:4b:05:0d:
a5:88:57:6a:39:96:ee:51:40:96:ca:d9:f8:47:c2:
ba:58:44:13:a7:5c:09:c6:24:f6:cc:18:9d:47:7e:
d4:0f:f2:cd:6f:e3:b2:c4:96:85:16:4c:48:90:88:
c8:90:2c:e0:32:98:02:43:e6:80:ba:f4:91:ee:0f:
43:73:a3:fe:b7:8f:d7:6a:7c:17:87:24:86:3a:c8:
62:46:5a:3a:45:60:cf:88:9f:b1:56:93:f5:19:2e:
22:f6:55:a5:12:c3:90:b8:83:b0:6b:de:f2:44:fb:
73:47:e3:82:0e:73:51:78:db:b8:aa:ef:ff:39:8d:
c8:d7:7a:2f:53:41:78:44:65:60:01:a4:ee:bc:5c:
bc:01:b6:62:b3:5e:14:6f:79:62:7b:3a:66:23:f4:
80:3c:c0:b3:71:d4:e0:a0:a6:ad:27:45:4b:e1:ad:
d0:6a:e5:4c:59:31:05:7d:30:02:ff:d2:9e:6e:48:
31:7a:00:16:1d:4e:9d:0c:8a:02:a5:4b:7d:e0:1f:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:F1:B5:7E:F0:F0:E7:42:F4:2E:C0:C8:FF:16:85:F3:B7:DA:56
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0jLxtX7w8OdC9C7AyP8WhfO32lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d3:de:f2:c6:99:e9:be:46:b6:50:e4:4b:55:c4:a8:ba:37:
16:ba:88:39:12:9d:7f:d1:22:43:4a:9f:18:59:16:bc:47:dc:
2f:f9:49:c3:92:71:c8:25:0f:56:56:6c:54:e0:79:8f:03:b7:
f7:6c:7d:da:fe:7b:b3:8a:f3:b7:f7:82:fe:44:4b:ce:59:5a:
46:df:db:a9:52:76:ea:e7:d0:1d:33:25:ed:b9:d2:39:d0:a7:
e6:7f:f7:33:eb:dd:16:85:ad:1e:de:47:0d:70:37:2c:57:d0:
31:4d:5f:19:b0:fc:d8:62:3b:bf:77:af:d1:08:af:0f:11:a6:
81:6e:17:96:39:ee:4f:f7:36:2d:ed:bc:bc:33:8b:9b:0c:ba:
b3:a3:bc:1d:a6:ce:29:d7:5f:b8:50:be:c8:78:1a:f4:89:f0:
e6:8b:07:17:e7:69:bd:d2:4e:eb:64:85:56:15:76:36:1c:f3:
e3:9d:4a:7d:c7:70:1c:d3:e1:f8:89:6f:86:75:db:01:4e:dd:
39:37:01:17:07:68:4c:80:0d:84:72:a6:ad:85:d1:a9:e0:39:
c8:58:2f:df:01:a9:b7:10:7e:1a:7d:8b:af:e7:4e:5f:0b:71:
8b:f9:a6:6e:00:3e:71:1c:46:a0:86:36:f7:7d:c2:39:42:18:
21:f8:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org