Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/k0LutpWa5mq9EJTBESRzkX-V81Y.roa
File: k0LutpWa5mq9EJTBESRzkX-V81Y.roa (raw, json)
Hash identifier: eYgobuv/rTgXc67/c1JS/ip9YdSGtU++gZmdzDSD/6I=
Subject key identifier: 93:42:EE:B6:95:9A:E6:6A:BD:10:94:C1:11:24:73:91:7F:95:F3:56
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 0C67F1DE
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/k0LutpWa5mq9EJTBESRzkX-V81Y.roa
Signing time: Sat 01 Jan 2022 14:58:07 +0000
ROA not before: Sat 01 Jan 2022 14:58:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50597
IP address blocks: 85.194.250.0/24 maxlen: 24
85.194.248.0/22 maxlen: 22
85.194.249.0/24 maxlen: 24
85.194.251.0/24 maxlen: 24
85.194.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208138718 (0xc67f1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Jan 1 14:58:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9342eeb6959ae66abd1094c1112473917f95f356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:81:17:ec:36:0d:a3:7c:31:35:91:91:3c:
29:e1:fd:a7:3e:0f:67:ca:f1:70:50:16:10:ea:82:
4a:c2:45:f5:b7:06:bc:fa:d6:90:5a:59:e6:0e:19:
69:17:b9:c4:79:ea:6c:91:87:63:79:c7:52:25:b9:
36:65:82:65:79:e6:ae:92:87:83:72:45:c6:50:cb:
c4:93:16:f3:52:d0:a0:01:98:bb:b1:86:b0:a5:92:
dc:32:e1:20:b9:82:51:ac:27:b3:1b:0e:51:3c:cc:
76:10:7e:e3:86:6e:05:cc:f9:a2:b5:b5:f0:6f:61:
fd:fe:0a:54:7a:38:8d:12:db:dc:43:e6:a3:54:62:
02:11:f9:b4:ab:38:ad:be:d1:0a:37:c4:7e:f8:69:
80:14:dd:89:f1:cb:fc:f8:b8:77:32:f5:59:9a:81:
ec:97:50:b6:f7:00:f1:97:6c:9a:19:55:72:30:a0:
0b:5c:38:c7:3d:25:cb:0b:33:d5:ea:5f:05:58:4d:
d8:8f:99:e9:de:c8:52:69:75:b4:f8:86:4e:83:c7:
db:7e:22:60:23:45:49:c5:a4:c9:1c:eb:95:94:c9:
de:8c:e8:b2:d3:5a:15:d4:99:73:f7:3a:c6:85:af:
fc:be:32:b8:42:f4:eb:93:11:81:6c:cb:7e:fd:28:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:EE:B6:95:9A:E6:6A:BD:10:94:C1:11:24:73:91:7F:95:F3:56
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/k0LutpWa5mq9EJTBESRzkX-V81Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.248.0/22
Signature Algorithm: sha256WithRSAEncryption
09:08:24:5a:70:dc:74:0c:d6:9e:a9:07:48:54:e7:2b:43:b1:
f0:ea:57:0e:64:1f:5e:0d:7f:c4:af:ca:2b:98:a2:1a:c7:19:
f5:e5:79:00:9e:32:90:76:5f:0d:cc:a3:b9:f3:af:5e:2b:5f:
bc:ce:73:6d:20:ac:00:12:f0:22:f7:4e:fb:86:c8:92:e8:20:
a4:c9:6c:22:50:87:b6:79:ab:a8:80:b4:de:7a:75:7f:29:78:
27:02:b2:d9:67:b5:d9:8c:b0:7c:b3:3d:b0:f1:80:cb:44:4f:
8b:c1:96:98:47:9d:18:15:fe:c0:18:f2:5a:e6:50:4d:a9:c9:
2e:fd:d3:a4:89:94:46:69:22:63:5c:78:81:43:48:77:cd:11:
45:77:39:fa:1b:00:ba:9f:f2:d0:4b:be:5c:2d:ba:a5:e5:f7:
f5:43:57:7c:13:f3:3c:67:6c:e4:57:bd:0a:21:ea:b6:d3:92:
87:af:09:bc:ed:59:c3:50:64:bb:ce:2c:d5:04:b2:ca:25:07:
f8:71:b9:db:9d:28:ff:72:58:6f:0f:18:e7:d0:99:2a:23:04:
c8:ed:8c:83:93:e5:f1:72:91:94:d2:74:43:42:9e:e9:a7:6e:
be:72:02:da:f4:80:28:1b:5e:9d:c1:43:a8:d2:87:5c:0b:3c:
3f:75:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:42 2024 by rpki-client on console-ams.rpki-client.org