Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/j2t69sQ6zrHPd9O50VJ_RsR_544.roa
File: j2t69sQ6zrHPd9O50VJ_RsR_544.roa (raw, json)
Hash identifier: zuTQFhDCQr9+Oo1MpYAo0nBb4uuY3Bu5Sx5ym7MQlgQ=
Subject key identifier: 8F:6B:7A:F6:C4:3A:CE:B1:CF:77:D3:B9:D1:52:7F:46:C4:7F:E7:8E
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01853FF0C38974EB747FF1C333BA84AFC5AE
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/j2t69sQ6zrHPd9O50VJ_RsR_544.roa
Signing time: Fri 23 Dec 2022 17:03:41 +0000
ROA not before: Fri 23 Dec 2022 17:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 85.239.48.0/22 maxlen: 24
85.239.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:f0:c3:89:74:eb:74:7f:f1:c3:33:ba:84:af:c5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Dec 23 17:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f6b7af6c43aceb1cf77d3b9d1527f46c47fe78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:0e:d7:ad:cf:2e:87:8a:ab:7a:19:e5:37:
e0:20:fb:e9:68:68:5f:b4:f9:a3:c9:b1:3c:b0:2a:
2a:b2:23:d1:3d:4a:29:79:68:db:9d:25:31:33:7c:
b5:01:3e:13:06:db:5d:94:da:4e:69:d1:4b:7e:81:
34:ec:a6:fc:ff:6e:28:cc:a8:eb:4d:61:4c:6a:4c:
e5:c1:1b:74:6e:89:cc:d0:ca:0b:5c:8b:9a:0c:ce:
b6:88:aa:17:74:56:c1:41:bf:cc:7c:5c:1d:3c:0e:
12:32:5f:af:0e:f5:5a:a3:3d:ea:c9:12:66:c7:b8:
90:12:ef:eb:8d:8e:4a:25:62:f2:36:b4:02:6f:60:
67:05:7d:4a:9a:1a:d1:88:94:99:16:8c:7f:63:42:
f8:b7:7f:a5:0c:3f:f9:0c:71:a3:4f:80:1e:27:7c:
04:99:7c:09:e2:a3:f7:7e:4d:dc:0d:30:c2:7b:0b:
95:a1:77:7b:e2:c0:a8:e8:4f:80:20:3b:49:27:5d:
33:c2:cb:0e:c9:60:c9:4e:75:93:75:71:a8:05:0f:
62:73:e6:ed:4d:35:df:20:88:42:06:76:15:58:29:
df:ba:8e:5d:26:ff:19:50:fc:13:7d:65:2e:17:c2:
86:38:3f:cc:1c:51:b9:f2:51:77:85:b7:b4:73:fd:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6B:7A:F6:C4:3A:CE:B1:CF:77:D3:B9:D1:52:7F:46:C4:7F:E7:8E
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/j2t69sQ6zrHPd9O50VJ_RsR_544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.48.0/22
85.239.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:52:5f:de:6c:91:5f:eb:e9:8d:93:32:de:1b:59:9e:f9:d8:
2e:3d:a9:25:e3:9b:b2:65:62:8c:df:4c:61:50:30:d6:8f:fc:
68:c7:17:83:16:15:cc:3b:aa:dd:eb:82:3e:32:7f:73:98:8a:
2a:60:b4:61:a7:08:84:89:40:1f:ee:96:2b:f3:20:19:49:ed:
1f:a7:46:a5:bb:aa:74:c8:49:9d:82:bd:84:21:9f:8a:54:c3:
b5:3a:17:c8:ac:7d:8b:2b:67:83:19:68:44:e4:51:ec:37:2d:
dc:45:37:12:52:df:9c:37:10:e0:3a:b3:9d:8d:1c:df:99:d9:
f9:74:16:77:aa:52:ea:74:8c:20:1d:82:b4:f6:2e:d6:2c:bd:
ba:e0:ce:0a:db:e5:cd:36:a6:5c:72:03:c4:28:2a:c8:34:85:
60:bf:b4:46:05:87:4d:7b:aa:1b:df:bf:f0:70:3f:90:4e:5e:
ae:ba:ae:1c:25:cf:3c:57:70:a5:10:ab:53:74:7e:11:a7:bc:
b0:09:32:04:95:7a:8e:d6:ce:7e:82:32:43:07:d5:e2:f5:4e:
70:0b:a6:dc:ae:a0:4b:82:51:7f:5d:10:bd:3d:ca:ff:09:1c:
ef:b4:c0:1f:59:26:48:ff:64:a0:50:45:1c:5f:7c:83:fd:76:
d5:c6:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org