Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/v-QIBpyx5vqCFqOx2fMXmIxXF5A.roa
File: v-QIBpyx5vqCFqOx2fMXmIxXF5A.roa (raw, json)
Hash identifier: zQfthVEBs7VcWJZcmhxoR05vX7CAVbJW2ZTLae2Xi/s=
Subject key identifier: BF:E4:08:06:9C:B1:E6:FA:82:16:A3:B1:D9:F3:17:98:8C:57:17:90
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0181E95F2DB74E1E0D2F9C4AB63CD37474C3
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/v-QIBpyx5vqCFqOx2fMXmIxXF5A.roa
Signing time: Sun 10 Jul 2022 18:28:57 +0000
ROA not before: Sun 10 Jul 2022 18:28:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 85.239.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e9:5f:2d:b7:4e:1e:0d:2f:9c:4a:b6:3c:d3:74:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jul 10 18:28:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe408069cb1e6fa8216a3b1d9f317988c571790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:65:6e:c0:b2:8d:75:59:e9:c5:e8:3d:43:
83:1b:b9:3c:dd:e0:76:f0:e4:8d:65:c6:27:2a:0c:
a7:49:cd:97:97:ee:63:ea:e6:6d:1a:42:92:6a:a0:
a3:bc:3a:4e:eb:37:a2:0b:6a:a3:50:e5:2b:73:62:
1f:eb:3a:75:2f:e2:4d:37:07:2e:90:82:95:9e:3c:
61:ac:92:b3:c4:b0:5b:79:57:70:c6:d0:36:e1:60:
de:11:1a:b3:ef:e1:54:2f:40:48:09:de:01:49:d2:
06:f3:a9:c8:3d:b4:62:b3:ad:ba:6f:c2:ad:9e:cd:
14:b3:16:87:69:bd:05:a2:f0:11:fb:78:b9:7e:53:
01:71:47:13:e6:c3:de:5c:2f:01:1b:52:62:f9:d4:
5d:16:7b:e9:7f:a2:54:34:5b:d4:a4:52:81:03:e6:
49:7d:e2:82:f5:43:2c:96:39:0f:f7:40:c9:40:1d:
54:0e:c6:45:a4:f0:56:b3:83:a3:b6:33:b6:32:53:
d1:1c:64:8d:7e:aa:82:9f:26:ea:54:b9:5f:37:b5:
23:d5:e0:b7:ad:bd:47:19:15:10:16:54:ab:5d:be:
c6:88:d6:fc:e1:18:a9:e9:34:5a:be:be:77:f8:64:
56:19:11:9b:3a:3a:0c:e5:7d:ac:97:42:24:4c:5f:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:08:06:9C:B1:E6:FA:82:16:A3:B1:D9:F3:17:98:8C:57:17:90
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/v-QIBpyx5vqCFqOx2fMXmIxXF5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:c1:f2:90:64:19:75:71:ea:c8:f3:b8:83:ac:39:bd:1f:53:
ad:1b:8d:ad:cd:9c:92:8b:20:71:84:1c:b0:d8:67:0a:d2:0e:
dd:1b:cd:bd:0e:ba:c9:de:c3:e0:7a:48:e2:06:a8:0e:e6:e7:
7c:9c:ae:76:18:f7:60:22:8d:57:4f:71:3a:87:7a:97:be:5b:
10:69:a0:9a:c4:0d:a4:7f:70:92:b6:97:22:65:ee:84:bf:d0:
67:e6:9a:17:3c:f9:b5:81:1c:25:8b:e5:57:25:e0:e8:94:ba:
8c:af:b6:8b:d5:31:f9:ac:45:d3:4a:b0:16:02:f1:b2:d0:b9:
7e:44:8d:e0:07:91:1a:90:37:ca:5f:35:19:32:dd:b0:86:d5:
cd:29:c5:23:da:c9:27:f7:f5:c4:f4:1b:5c:c7:dc:a6:01:b2:
17:e3:12:39:3d:82:4c:6e:61:2a:0b:60:97:19:5f:6e:5d:6e:
35:5d:19:7e:40:af:8e:ce:98:02:8f:14:80:c8:1d:e2:fe:f8:
30:00:68:69:e3:3e:0f:aa:a9:55:25:92:63:40:b3:10:df:27:
f6:6e:a7:00:39:bb:f1:53:56:63:fc:a5:b9:9e:3d:01:78:11:
d9:1e:c8:c4:a7:49:d4:0e:c2:7b:f7:2e:27:48:0c:58:83:1d:
aa:93:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org