Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/dZ1rX636KPHVAO86Ais9zMZkVZA.roa
File: dZ1rX636KPHVAO86Ais9zMZkVZA.roa (raw, json)
Hash identifier: Dm2kKHrTUvvMKmBN68Hku9rAKouGvVR3O5g4RM7qatY=
Subject key identifier: 75:9D:6B:5F:AD:FA:28:F1:D5:00:EF:3A:02:2B:3D:CC:C6:64:55:90
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 03A5DF46
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/dZ1rX636KPHVAO86Ais9zMZkVZA.roa
Signing time: Thu 17 Mar 2022 09:33:53 +0000
ROA not before: Thu 17 Mar 2022 09:33:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61202246 (0x3a5df46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Mar 17 09:33:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=759d6b5fadfa28f1d500ef3a022b3dccc6645590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:a6:76:54:24:1d:1f:05:47:22:fc:e0:06:
f8:97:a1:90:6e:7d:db:4c:12:52:1f:57:6e:9b:3c:
24:2d:8a:fd:a2:6f:fd:89:66:84:14:53:98:5b:01:
07:7a:9c:38:17:28:1b:0d:36:39:18:fc:07:c4:5a:
55:1c:35:c5:fc:98:75:e8:10:0c:57:d5:cd:6f:82:
32:a5:58:69:dc:e5:7a:78:aa:6d:0e:3f:ee:33:e4:
ce:aa:39:b1:a3:bb:fb:f3:74:01:b4:06:ad:4b:a3:
0b:c6:df:32:8f:92:6b:10:d7:c9:84:98:84:e8:56:
c8:96:42:c7:ef:fd:2f:cb:da:e7:dd:89:3a:62:96:
40:e6:ef:7c:ba:c0:b4:90:70:a5:4e:5a:4e:e4:32:
b3:f2:70:ad:24:b6:39:92:bf:df:be:87:c3:32:42:
c2:9c:6b:a3:ce:bf:03:cc:04:29:8c:4a:0f:bd:46:
f2:f1:7a:79:7e:a2:1c:b0:3c:ca:c3:43:72:9e:f7:
6c:ba:2c:3f:3d:9e:cd:bd:43:93:17:1d:d4:19:a5:
dc:1f:7d:c2:f5:1d:91:53:20:fe:3e:72:a3:d0:77:
fe:1c:fb:7c:9a:33:0c:a2:fa:6f:e3:31:bf:39:57:
61:9a:e2:8d:53:cb:e5:9d:4c:1f:d4:33:fb:7c:05:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:6B:5F:AD:FA:28:F1:D5:00:EF:3A:02:2B:3D:CC:C6:64:55:90
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/dZ1rX636KPHVAO86Ais9zMZkVZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1a:fa:47:a1:91:a6:54:a5:df:63:17:56:7b:1c:95:b1:99:
11:ab:53:c2:a6:7e:a8:8b:96:49:d3:1e:f9:c7:77:d1:f7:d5:
7a:cf:37:65:da:86:9c:0e:4d:15:d1:fc:53:75:9a:2c:dc:f2:
eb:19:e0:d7:f9:e0:a2:8b:e5:99:10:c2:00:23:12:bc:13:25:
50:c0:50:7d:e8:63:ac:e7:f7:3e:fa:15:11:83:63:72:34:db:
f5:81:c8:7c:fb:46:20:56:4f:43:1a:6b:dd:ff:21:e0:8a:3d:
2f:63:d3:23:81:68:96:72:db:8a:2f:8b:7c:63:f6:2e:12:cb:
fd:e6:1d:4a:a6:f8:8b:51:f3:11:1f:17:c6:84:bc:0f:e2:6a:
48:55:a2:f2:f7:63:2c:4c:6c:31:7c:21:95:36:1b:5e:cf:b0:
2e:90:1b:93:83:97:2f:f6:b1:b4:88:e3:a8:4c:71:8f:b5:8a:
37:c9:b8:e3:3e:67:1a:59:e7:b7:31:ec:17:ab:bd:02:22:85:
51:d8:58:e9:2b:b6:fd:c1:95:0a:7b:4d:b0:79:78:0d:05:da:
cf:03:e0:91:a4:4c:61:86:df:a3:15:13:55:1c:38:96:80:7d:
85:80:16:e0:9f:d6:5f:81:a1:e2:20:5d:cc:30:1e:53:3a:72:
7a:6c:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org