Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/sp3JtFpjyKiU-p_0th8tBjYmH5o.roa
File: sp3JtFpjyKiU-p_0th8tBjYmH5o.roa (raw, json)
Hash identifier: /Jsl/eaiRVO5jo2mYTBmrq1YYPUppACbTZCt+2JvG6Y=
Subject key identifier: B2:9D:C9:B4:5A:63:C8:A8:94:FA:9F:F4:B6:1F:2D:06:36:26:1F:9A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B18356B
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/sp3JtFpjyKiU-p_0th8tBjYmH5o.roa
Signing time: Sat 01 Jan 2022 13:58:11 +0000
ROA not before: Sat 01 Jan 2022 13:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206632
IP address blocks: 85.202.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723006827 (0x2b18356b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b29dc9b45a63c8a894fa9ff4b61f2d0636261f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:17:8c:01:c4:32:63:93:de:ae:f7:14:41:
94:95:e9:16:58:df:de:cb:19:56:70:62:12:4e:5f:
c8:61:92:72:7f:8b:a0:ec:0b:7d:d1:c5:51:1a:03:
13:84:ff:35:a7:9e:f8:99:c1:8e:15:03:d9:5e:82:
e0:5e:91:0c:6d:50:dc:9f:a0:ce:9f:0f:31:f8:c0:
5f:42:26:f3:13:ac:31:9e:cb:d1:07:d0:b6:e4:3b:
21:7a:e2:65:1c:a7:3d:a7:8c:50:73:22:30:f1:8b:
94:f3:bf:bd:eb:ce:fe:10:a8:31:f6:da:50:60:6b:
51:86:b4:fd:42:2a:e8:6b:d9:ca:d0:91:5b:0d:0a:
45:3b:73:7e:63:45:b4:51:fb:99:cb:5c:0a:8a:71:
8a:f6:e4:35:25:7c:29:f9:8b:df:55:9d:63:c4:13:
14:9e:f6:8e:3d:0a:e0:1a:be:9f:39:c2:29:a2:e3:
ed:00:a8:06:d3:44:9d:77:df:c1:61:8b:1a:07:cf:
9f:f7:35:8d:48:ae:77:eb:bd:0a:38:74:6b:46:de:
c6:5f:26:04:fc:8b:f8:cb:a0:cf:37:fd:55:43:77:
e1:29:68:27:f9:ec:9f:cf:f1:19:04:dd:f2:4c:49:
48:e2:70:b9:2b:87:ef:2a:90:f7:1c:0e:46:53:f3:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9D:C9:B4:5A:63:C8:A8:94:FA:9F:F4:B6:1F:2D:06:36:26:1F:9A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/sp3JtFpjyKiU-p_0th8tBjYmH5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.50.0/24
Signature Algorithm: sha256WithRSAEncryption
92:cb:d9:66:bf:67:88:f5:07:f9:ac:fd:35:c1:51:57:5a:1b:
3e:d1:b4:96:8b:a1:3e:36:79:eb:3a:41:09:80:2f:c6:77:d7:
3b:0b:ba:75:62:7a:a1:14:40:ee:d5:65:1f:01:0a:ef:4f:9a:
11:e2:12:10:8b:5f:d5:ee:24:ec:c5:10:73:16:f7:dd:ec:f9:
48:25:d7:ca:2f:26:8c:c7:9a:11:dd:11:03:af:6e:47:da:67:
53:63:22:8d:2d:9f:68:21:bc:ce:bb:40:8b:e1:c1:b6:7f:e7:
ef:5c:46:4e:76:d7:3e:12:98:0d:43:78:aa:b9:18:80:64:9e:
78:9c:70:1b:2b:f3:0b:c0:79:21:51:4b:d5:e2:e5:6c:76:81:
84:bf:3f:e8:51:73:19:f8:70:c7:d4:8f:04:bf:77:56:12:dc:
87:e4:35:5b:5d:17:9e:ea:50:ed:c3:86:75:1e:e4:cb:24:13:
e7:74:30:13:82:6e:17:97:82:3f:50:14:ae:aa:9a:43:50:4b:
63:7e:c3:c6:37:01:ab:23:4a:9e:86:57:00:84:49:f2:74:58:
df:ac:59:a2:37:f9:54:b3:35:a3:c9:e6:4a:41:f6:89:07:01:
1a:0b:18:bc:5d:95:3b:c6:81:1c:ad:c1:76:83:ae:ab:27:cb:
28:e7:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org