Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/1-Arc8ViSl1m90XU6eJJU_eXnnNg.roa
File: 1-Arc8ViSl1m90XU6eJJU_eXnnNg.roa (raw, json)
Hash identifier: O351dyDnTl1ZTsjZz6n+CWSZuFNv4LTzMmNiUU+EedQ=
Subject key identifier: F8:0A:DC:F1:58:92:97:59:BD:D1:75:3A:78:92:54:FD:E5:E7:9C:D8
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0A2E71F2
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/1-Arc8ViSl1m90XU6eJJU_eXnnNg.roa
Signing time: Sat 01 Jan 2022 14:59:17 +0000
ROA not before: Sat 01 Jan 2022 14:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138968
IP address blocks: 85.239.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170815986 (0xa2e71f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 14:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f80adcf158929759bdd1753a789254fde5e79cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:9d:29:3b:e2:63:85:88:82:0d:2f:14:02:
6e:99:84:df:83:25:60:dc:ea:18:23:76:4b:bc:37:
5d:c0:f7:2d:6e:51:1a:83:1f:06:93:a6:00:7b:bf:
79:af:a2:c0:1f:77:08:6c:41:22:d4:9f:29:5c:19:
a4:d9:45:66:48:e0:e0:74:b3:e7:7b:27:4c:0a:ca:
bd:aa:67:c3:eb:c0:ef:50:7c:26:18:3d:d6:b1:e1:
93:dd:76:8c:27:db:ed:76:9f:ac:35:b6:12:4a:bf:
46:31:85:9a:d6:9d:93:23:4b:a7:db:26:af:b8:d1:
7f:a4:ac:0a:54:db:d0:96:f6:ac:ba:17:34:ac:70:
73:fc:da:95:b7:0c:ea:6e:0d:23:f3:94:3c:cf:d9:
9c:17:25:8b:52:99:71:8a:42:93:6e:cb:09:33:68:
ba:72:da:9d:c0:f3:a8:da:49:a2:f9:27:c8:f5:6d:
55:bf:6c:7c:1f:4f:c3:f5:da:0f:91:9b:78:41:e0:
6c:e7:a9:13:ea:aa:1c:d2:b7:69:85:db:40:53:2d:
d7:f5:8b:ba:93:b2:51:74:ce:2f:ad:2d:54:5a:10:
ff:95:ca:ea:58:0b:93:fd:bb:16:c9:c2:4f:d4:5d:
4a:01:0a:2d:39:cc:f3:05:02:f1:04:1f:3b:42:f6:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:DC:F1:58:92:97:59:BD:D1:75:3A:78:92:54:FD:E5:E7:9C:D8
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/1-Arc8ViSl1m90XU6eJJU_eXnnNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.48.0/20
Signature Algorithm: sha256WithRSAEncryption
28:d5:94:97:18:7a:99:b3:47:4b:20:07:e4:c6:f1:32:6d:16:
e5:32:ac:c2:db:ba:27:c3:8e:1e:65:bd:bb:5e:36:76:07:2f:
b6:af:3c:15:97:c6:ec:8e:ff:e4:9d:ce:aa:e7:e0:c7:45:fe:
18:1a:ac:a2:bc:76:8e:0a:c5:83:92:60:06:e3:8b:51:04:f6:
41:f9:b9:42:16:0b:ab:55:ea:15:6d:7c:f4:51:f3:f7:85:d1:
7f:7f:c0:42:ec:10:96:68:e0:32:16:f6:4a:b9:fc:fe:d1:71:
dc:21:b8:89:12:cf:bb:fa:3a:88:73:54:aa:aa:ec:55:74:5a:
8f:4f:93:2e:88:69:84:2a:65:75:c8:e8:42:da:ff:6b:47:f4:
d0:72:56:7c:66:e4:45:2d:4e:e8:e0:ed:90:62:33:59:4c:2e:
7c:ae:38:73:17:1f:ff:08:a8:4c:ea:db:9a:62:2b:62:6c:b2:
d5:65:95:f4:16:01:c9:6b:12:03:61:62:ee:84:43:ca:c4:e3:
c6:99:d1:0b:d3:70:d3:0c:01:c4:06:a2:d4:e1:1b:72:2f:5b:
95:a7:4a:04:fb:6d:37:45:12:ec:41:9e:0f:47:5a:b2:53:82:
06:c9:62:40:0a:7a:3b:5c:31:1d:57:ec:ef:9e:f0:5c:0f:34:
3a:d1:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org