Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ozdfxvu8X3ZrMLsLd8-qnN1dSQs.roa
File: ozdfxvu8X3ZrMLsLd8-qnN1dSQs.roa (raw, json)
Hash identifier: JSp8ZW1sFNl5PfvXAwhzxmATXpnAVJu7RDw5WsTUZuU=
Subject key identifier: A3:37:5F:C6:FB:BC:5F:76:6B:30:BB:0B:77:CF:AA:9C:DD:5D:49:0B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 43061C98
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ozdfxvu8X3ZrMLsLd8-qnN1dSQs.roa
Signing time: Wed 18 May 2022 09:00:18 +0000
ROA not before: Wed 18 May 2022 09:00:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49410
IP address blocks: 86.105.231.0/24 maxlen: 24
93.115.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124474008 (0x43061c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 18 09:00:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3375fc6fbbc5f766b30bb0b77cfaa9cdd5d490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:4b:87:9c:fa:5c:97:ff:db:6c:10:ee:4e:
37:4a:85:10:55:50:18:02:a6:07:4e:69:7c:2e:04:
b5:4b:db:33:04:00:aa:51:87:2c:7a:aa:30:3a:17:
4d:2f:de:48:ff:71:f7:0f:93:fe:c0:fc:02:e0:f6:
86:20:01:61:a2:4f:2c:9f:c8:d4:c2:ac:20:61:05:
ab:b2:07:f6:e1:02:d8:4c:68:d2:58:7d:f2:34:99:
28:a2:1e:e0:d7:81:6c:2c:51:8b:dc:4a:16:b7:9e:
d3:0f:47:de:7e:13:33:38:de:ee:c5:12:c6:9c:7e:
fc:28:c9:e6:ba:69:69:fe:9f:7a:8a:d2:d4:21:bd:
f6:e7:59:1b:ed:93:0a:1b:c1:19:fd:9d:0d:f8:f9:
22:bb:b9:37:98:80:9f:0b:54:21:bb:fc:9b:5a:64:
54:97:d2:a9:9d:90:0a:b2:fe:f0:92:0e:ed:76:9c:
3b:28:08:69:89:88:aa:5e:34:6f:d8:b1:d7:67:39:
a5:5d:00:8f:6b:09:76:e8:be:7c:d5:81:c0:f5:fb:
59:6c:8a:f7:0c:62:e4:7d:21:53:9e:7f:b3:dc:0a:
20:3b:86:e7:e9:85:e8:ae:a8:2b:99:2a:96:41:5a:
19:4e:9d:43:d8:bb:a8:68:5d:9b:d7:f3:4d:5a:40:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:5F:C6:FB:BC:5F:76:6B:30:BB:0B:77:CF:AA:9C:DD:5D:49:0B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ozdfxvu8X3ZrMLsLd8-qnN1dSQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.231.0/24
93.115.1.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0f:05:58:ec:48:81:72:43:35:44:4a:08:0a:bb:1d:15:99:
1c:60:1d:f6:73:a9:4b:5a:1b:19:a6:6c:c6:79:0f:74:30:12:
8e:39:dd:f8:e1:cb:7b:82:f0:0d:ce:1d:c4:03:4e:1d:d2:63:
77:b3:80:50:b8:9d:7b:51:a0:3f:3d:1e:18:2f:51:6d:6b:fe:
51:51:58:97:92:e6:18:00:a8:07:b2:06:f1:b8:6c:89:6b:16:
3a:e1:1d:6c:9b:90:1f:77:b8:af:c6:cb:d3:bb:5d:29:d3:4c:
fc:51:92:79:ca:03:25:f8:d1:1e:6c:4a:78:f3:3b:bc:92:9c:
d4:0f:b9:5f:e1:58:6e:13:6e:7d:14:6f:aa:c1:67:df:2b:69:
8e:a6:fc:05:c2:3b:6e:16:f9:ae:81:bf:ae:ea:83:62:07:ee:
c7:d8:40:f4:c0:57:6e:ba:b6:9f:32:f3:d7:8f:80:c6:fd:86:
ff:70:8e:b6:98:05:87:c9:32:7e:40:54:0d:57:83:fd:e8:a8:
8c:70:05:fb:f1:60:36:ad:bd:aa:76:8d:67:20:62:c3:f6:38:
09:20:28:5a:9c:b0:4e:6b:91:a2:66:a0:ca:48:78:49:44:38:
76:07:88:77:ac:c4:72:e7:49:8d:93:1c:69:02:af:41:3a:1b:
33:a9:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org