Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/0Gwby_y1xJG4YNRlmC7rPbrTmjE.roa
File: 0Gwby_y1xJG4YNRlmC7rPbrTmjE.roa (raw, json)
Hash identifier: t4vdVsIXyUDngQMdHJ2C0lPbHuTBXJai9qASJ9qEHkE=
Subject key identifier: D0:6C:1B:CB:FC:B5:C4:91:B8:60:D4:65:98:2E:EB:3D:BA:D3:9A:31
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0B44126A
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/0Gwby_y1xJG4YNRlmC7rPbrTmjE.roa
Signing time: Thu 21 Apr 2022 18:55:56 +0000
ROA not before: Thu 21 Apr 2022 18:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62005
IP address blocks: 85.239.52.0/24 maxlen: 24
85.239.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189010538 (0xb44126a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Apr 21 18:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d06c1bcbfcb5c491b860d465982eeb3dbad39a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:04:59:a4:6b:31:4f:7d:98:52:69:8f:a3:
df:0b:75:ff:84:8f:6a:99:86:3f:f3:45:d8:68:d9:
d0:52:3c:dc:ec:33:b6:e7:64:36:42:b1:7a:d0:8f:
34:da:54:1a:c9:95:f8:75:4b:e7:6f:78:d2:a1:25:
03:5f:2a:8a:8d:c9:d3:03:d6:7f:65:e5:b9:a8:0f:
90:37:2c:03:84:ae:f7:a3:80:4f:d2:73:cc:db:a6:
36:c9:a0:e2:90:12:92:c6:b2:da:d2:bc:92:c8:2a:
c1:85:2e:c3:eb:7d:69:12:1b:8a:d1:87:c8:fc:d5:
3a:e7:12:ce:72:26:28:8b:1d:7e:e9:f9:3e:6b:2a:
4a:f3:95:90:ee:22:82:31:7c:58:5d:87:26:d2:8e:
5e:90:aa:d7:4d:41:93:4b:4d:5c:e4:1c:7f:4d:5c:
fb:54:4f:9d:e7:89:4e:51:06:07:3e:6d:cb:63:70:
8f:92:e2:73:8d:59:6b:f1:9e:a8:14:b1:7d:5e:c5:
1f:2f:97:9a:49:1f:01:de:b6:0a:d2:77:8a:6b:e2:
53:8e:56:bf:8e:5d:32:a8:81:6c:b7:35:8c:26:53:
09:24:8e:5d:c4:9e:5f:1b:f1:23:a4:4f:24:11:9c:
8c:47:cb:d5:49:65:82:85:ef:68:a0:5a:a4:b5:4b:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:1B:CB:FC:B5:C4:91:B8:60:D4:65:98:2E:EB:3D:BA:D3:9A:31
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/0Gwby_y1xJG4YNRlmC7rPbrTmjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ab:89:19:21:af:11:3a:89:58:eb:47:84:bf:d6:10:57:b6:
8c:c7:09:ce:11:59:a7:1d:cc:c2:87:88:5f:47:32:5b:14:5b:
be:71:d9:c9:4b:af:a1:7a:0a:49:8f:87:d7:67:fa:34:df:54:
99:04:77:21:5f:0e:c9:ca:45:17:0a:e3:23:93:64:78:9b:25:
cb:e6:ec:34:81:ac:5b:7d:a0:16:85:ce:37:9e:e2:bd:c3:9e:
b7:6a:94:a0:36:48:76:a3:f2:30:60:a8:62:fe:02:75:eb:b9:
d6:60:98:f8:9e:a6:5a:87:8a:15:2e:cc:c4:78:16:2a:8e:90:
d1:d6:b1:c7:4d:50:f6:ec:ca:a5:be:b2:2b:e7:69:96:34:ac:
8f:b8:1d:2f:4c:7f:26:dc:1c:f1:d6:b8:8d:ec:69:00:29:55:
f9:18:ab:97:ee:40:4e:5d:ef:8e:65:8f:16:2a:97:12:94:22:
6a:30:7d:51:e2:1a:c8:f4:9d:d8:6a:58:85:64:22:9b:67:e0:
59:14:26:2b:4c:7e:07:91:c0:fc:1d:2b:f7:0e:6e:9b:c1:5b:
88:05:57:b3:4c:ef:fa:69:29:4c:ac:74:11:48:57:ff:a4:23:
93:dd:6d:1d:dd:b3:c5:7e:d9:e0:88:36:73:df:b1:20:d5:a0:
90:98:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org