Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/r88bOyPfjNY5jb23u5CGfCVKHdY.roa
File: r88bOyPfjNY5jb23u5CGfCVKHdY.roa (raw, json)
Hash identifier: WigGLmRw3Db6FaHbe+PH8bCZ/3tswS5ag1kqvf2KskQ=
Subject key identifier: AF:CF:1B:3B:23:DF:8C:D6:39:8D:BD:B7:BB:90:86:7C:25:4A:1D:D6
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 0286F83B
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/r88bOyPfjNY5jb23u5CGfCVKHdY.roa
Signing time: Sun 19 Jun 2022 21:17:34 +0000
ROA not before: Sun 19 Jun 2022 21:17:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 85.237.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42399803 (0x286f83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jun 19 21:17:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afcf1b3b23df8cd6398dbdb7bb90867c254a1dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:d2:b1:47:9c:ca:32:c6:0a:50:93:7e:a7:
27:bf:36:63:51:78:31:71:50:e0:e8:52:63:6a:c0:
e2:e3:d4:51:8c:21:fb:46:73:7f:45:e6:0c:fc:a2:
00:f0:c0:73:29:55:96:e0:c3:b4:5a:17:90:51:14:
44:e8:58:bc:8d:90:06:fb:c5:24:e2:45:d1:e3:a3:
0c:8b:75:74:73:0a:1f:51:5d:ec:6f:f7:bc:fc:e1:
01:08:94:88:cc:30:6d:a3:37:10:12:96:31:62:03:
5a:37:49:ef:d2:cb:9b:f6:06:c6:7b:44:4d:ec:78:
1d:02:43:6c:1c:28:e6:29:a1:23:ee:7b:b6:4b:bb:
09:93:14:5d:af:36:da:c0:7f:7a:b8:f3:26:04:44:
52:df:42:bf:78:77:e9:72:44:e4:41:1e:a5:12:b4:
60:62:2f:61:a0:b6:ae:b9:64:c8:61:b2:0b:e2:39:
06:f7:5f:61:b8:cc:c9:12:cf:f0:5c:ee:4c:88:b9:
c1:40:8e:cc:45:42:30:f0:3a:5f:7d:52:cb:66:fb:
9f:7e:3d:61:15:1a:12:b5:59:aa:94:55:b5:67:38:
35:ff:06:8c:19:c9:fa:3e:64:10:74:d6:98:10:32:
c6:8a:9c:26:d7:c5:13:43:75:c3:16:fc:7b:33:0c:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:1B:3B:23:DF:8C:D6:39:8D:BD:B7:BB:90:86:7C:25:4A:1D:D6
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/r88bOyPfjNY5jb23u5CGfCVKHdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.90.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:eb:7c:fa:75:a2:ef:16:dc:c7:c1:c2:da:db:6b:88:68:89:
ee:7f:9d:e1:dd:22:47:fa:46:c3:04:c1:75:6c:dc:c9:9d:08:
91:92:ba:31:63:52:b9:67:3f:20:94:6e:4b:73:54:60:44:4f:
af:80:be:b4:73:0f:bb:2e:2f:d6:c0:94:51:1e:5d:ba:3c:43:
31:04:01:00:61:32:8f:79:4f:68:bb:6d:75:13:0d:32:f1:70:
2d:e7:9c:27:65:d3:0a:6a:cf:ac:f6:a8:1b:05:05:1e:72:06:
d6:35:42:c8:78:e1:17:da:99:b0:04:ae:4f:5b:51:56:87:2b:
3a:e7:3f:42:fc:f0:3e:df:62:4a:0e:86:f0:b6:37:b4:d1:bc:
01:75:ea:70:62:2c:3f:cb:f3:be:94:42:9d:55:cd:4a:20:07:
f2:ad:e5:5a:0d:a8:a0:50:23:21:10:0d:b4:c2:ba:1b:1c:44:
86:b6:3b:15:ba:e0:e5:d3:e8:4d:80:85:94:85:37:83:0f:bf:
48:91:00:91:58:4b:13:57:b9:76:cc:a5:80:69:56:77:6d:35:
a8:36:80:ad:55:e0:62:48:ef:b2:ba:b1:90:09:0a:e7:7b:6b:
ff:ae:15:15:bd:11:cc:66:cb:10:5f:95:bc:48:dd:56:c5:5c:
07:da:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org