Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/oPzaxlYV1N2k0O6AfZsb7SgMrCc.roa
File: oPzaxlYV1N2k0O6AfZsb7SgMrCc.roa (raw, json)
Hash identifier: W8fxlMb7b//9SCQYXpqW20tXvH5XuHymIEpASv/YXJo=
Subject key identifier: A0:FC:DA:C6:56:15:D4:DD:A4:D0:EE:80:7D:9B:1B:ED:28:0C:AC:27
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0A2A364D
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/oPzaxlYV1N2k0O6AfZsb7SgMrCc.roa
Signing time: Sat 01 Jan 2022 14:59:15 +0000
ROA not before: Sat 01 Jan 2022 14:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 85.239.34.0/24 maxlen: 24
85.239.40.0/23 maxlen: 23
85.239.56.0/22 maxlen: 24
85.239.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170538573 (0xa2a364d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 14:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0fcdac65615d4dda4d0ee807d9b1bed280cac27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:ca:85:15:6d:35:5b:23:ca:f5:7d:f9:2c:
a0:f1:40:ad:82:26:49:f7:8b:9d:14:62:db:3a:6e:
d0:73:cc:36:03:3e:c6:d3:24:ac:72:67:67:65:9f:
61:b3:9a:cf:e5:e8:9f:97:b1:f9:cd:ce:6d:ec:f7:
f1:51:de:7d:64:1c:50:e0:f9:01:05:65:e2:a6:6f:
a1:0a:40:1e:a8:a4:58:48:0e:9e:de:79:29:a4:ab:
08:e4:cb:86:b4:94:e4:c2:2e:c4:87:e3:b5:3a:b9:
1a:e4:ba:e7:f6:f2:54:1b:bb:48:18:c4:f9:c3:ea:
b9:32:ac:11:e2:4a:fa:8f:40:22:ea:a8:33:e7:19:
15:44:17:7a:fe:1a:cc:e3:ec:c3:47:ff:78:f6:91:
16:22:b3:31:51:ea:e2:71:29:af:04:e5:59:87:c4:
ac:2f:5d:6d:87:ad:61:10:20:66:92:fc:b7:5d:0e:
20:d3:4a:ea:0d:67:18:c7:80:a7:1b:91:e8:01:46:
26:77:c7:70:90:10:5b:ac:ce:5f:c2:44:cd:0a:f6:
17:bf:4e:e7:d2:63:88:63:83:7e:d8:17:9d:b9:63:
59:04:62:96:9f:ef:9b:b6:75:ed:3c:d7:05:ee:7f:
08:28:f9:ef:da:2b:33:10:33:b6:a5:ec:2c:11:c6:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:DA:C6:56:15:D4:DD:A4:D0:EE:80:7D:9B:1B:ED:28:0C:AC:27
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/oPzaxlYV1N2k0O6AfZsb7SgMrCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.34.0/24
85.239.40.0/23
85.239.56.0/21
Signature Algorithm: sha256WithRSAEncryption
86:46:0f:b2:fb:09:81:e9:d9:2f:81:2f:cc:9a:8a:c9:a2:07:
82:3e:01:a2:ae:6b:89:9f:c1:6f:fa:c5:25:c0:7d:9e:c2:da:
25:17:6a:e0:6f:da:15:13:8a:8d:7c:65:f5:06:e1:96:59:45:
6c:e7:2f:a4:ba:bf:04:30:c2:b8:53:09:65:8c:6c:83:3b:94:
24:0f:0f:3d:80:12:48:00:e4:8d:de:49:27:78:46:65:4a:1b:
99:0b:5f:8c:60:26:9c:65:6a:49:e2:cb:27:52:e0:56:18:a3:
99:07:e2:c5:7f:66:4f:73:93:11:94:46:bf:01:1d:9f:b7:e1:
d3:83:d9:1b:33:99:fa:17:b0:2b:d4:9f:53:42:b2:0c:d1:e2:
fe:06:3b:5f:7b:50:2f:42:62:ef:1b:46:99:4c:9b:7d:b8:04:
14:76:74:c2:d4:b1:ef:c8:fa:7c:5c:7e:3e:5d:ad:e0:47:62:
ca:a3:2a:b0:b4:fd:45:f5:2e:6a:6e:03:54:b5:df:c5:a5:db:
91:3d:05:d0:24:fe:e5:5d:82:d4:b4:dd:8b:df:71:96:a6:e3:
ff:02:91:bb:32:7f:cb:06:04:6d:3c:d8:5a:1e:f8:76:1e:94:
56:ac:83:31:e7:3c:72:b0:c9:f4:ab:a3:37:cd:75:3b:30:b3:
09:af:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org