Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/bl8CvvCpLaaUXzng9PsRQEhLBh4.roa
File: bl8CvvCpLaaUXzng9PsRQEhLBh4.roa (raw, json)
Hash identifier: sxJ/juyKvif3q4iWyA44hI9RpzD88oR3QhvkeAjSvlk=
Subject key identifier: 6E:5F:02:BE:F0:A9:2D:A6:94:5F:39:E0:F4:FB:11:40:48:4B:06:1E
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 380F2C8C
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/bl8CvvCpLaaUXzng9PsRQEhLBh4.roa
Signing time: Sat 01 Jan 2022 02:57:31 +0000
ROA not before: Sat 01 Jan 2022 02:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15585
IP address blocks: 86.118.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940518540 (0x380f2c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 02:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e5f02bef0a92da6945f39e0f4fb1140484b061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:04:bb:17:6d:53:44:ee:9b:f5:50:fb:81:
06:f4:32:c0:78:c5:59:3e:5f:9c:5f:d4:81:c2:ee:
f1:e2:12:75:f3:d0:e1:c1:35:cb:3d:10:0a:32:49:
1a:5d:15:bc:77:44:20:21:c9:72:03:d7:2f:61:5b:
44:a1:97:dc:7b:21:61:f7:3d:cb:c6:76:bf:66:86:
85:1e:e0:03:8b:95:d1:f8:95:2f:2c:c1:c4:48:02:
f0:d6:6a:57:25:bd:83:e6:b1:cc:38:d3:19:56:5b:
4b:45:6d:89:33:39:35:2e:42:8e:bb:8a:8f:df:8b:
dd:b9:c7:45:bd:1f:b7:2a:b7:15:8d:78:c0:0a:68:
be:1d:17:50:fe:73:e0:b9:55:7b:08:87:8f:1c:bf:
99:7b:25:46:00:f2:fd:83:73:bf:65:ad:0f:45:96:
08:7c:6f:56:74:1b:11:e5:06:75:7a:61:f2:21:4c:
89:60:b9:ad:02:89:f2:4d:65:dc:d9:82:39:c6:ef:
5b:17:99:2f:5f:2b:01:f6:a3:7f:24:16:97:0c:e8:
ca:28:78:9c:a6:42:bc:2c:53:42:96:2a:88:67:0a:
8f:d1:d2:8b:f3:27:a9:20:7b:7c:da:30:48:1b:ff:
5f:92:66:a2:43:45:7a:d9:b4:9f:b0:90:ba:15:2c:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5F:02:BE:F0:A9:2D:A6:94:5F:39:E0:F4:FB:11:40:48:4B:06:1E
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/bl8CvvCpLaaUXzng9PsRQEhLBh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:7b:74:e9:b2:92:75:d9:03:63:05:a1:4c:74:ea:b1:ec:88:
3d:2c:09:28:c3:93:27:f6:1d:e2:7c:e9:17:84:13:1d:88:bb:
f7:4c:42:89:cb:18:64:c8:13:7b:cc:96:0e:fe:9b:78:a1:34:
a9:96:96:2b:41:6f:d7:9c:5f:9e:51:57:75:16:4b:db:00:90:
28:17:6a:00:7a:76:17:82:1a:47:ac:ce:5b:86:2c:d0:b0:b3:
15:81:5d:6a:99:08:5b:bd:fd:bf:05:16:f0:2e:e3:03:3a:08:
fe:19:89:f9:d1:ef:fa:b1:dc:51:06:13:e7:a0:51:78:6a:56:
de:18:99:62:32:30:f2:0f:5d:bd:0f:cd:ce:c0:13:90:fd:c2:
0b:1e:0c:79:5a:c0:90:10:a8:b8:b2:ef:8f:be:85:5b:7a:3d:
4f:a0:ba:6e:42:33:da:70:bd:b1:f1:77:43:39:65:38:8e:48:
a2:e0:6c:8b:24:82:0c:06:2d:5d:9b:4f:a0:ba:e5:44:98:8f:
d3:80:65:60:a6:97:c0:18:c0:f1:d2:cf:a4:57:b2:a9:38:47:
a9:40:b1:0b:0b:cb:d0:f5:db:8a:a3:c6:08:a5:4c:a8:10:e0:
f2:18:3b:5e:24:91:62:a5:f0:c8:31:c4:4c:83:6d:ae:35:a7:
43:34:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org