Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/1-_SH5L9L0fFJqluzOtcVBEQqGUs.roa
File: 1-_SH5L9L0fFJqluzOtcVBEQqGUs.roa (raw, json)
Hash identifier: /qCl6ZZgTfuXAQt3oUmYfKBRLcYIXV1m/dnfPXlLghg=
Subject key identifier: FB:F4:87:E4:BF:4B:D1:F1:49:AA:5B:B3:3A:D7:15:04:44:2A:19:4B
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 05EFA3F1
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/1-_SH5L9L0fFJqluzOtcVBEQqGUs.roa
Signing time: Sat 01 Jan 2022 07:53:33 +0000
ROA not before: Sat 01 Jan 2022 07:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35157
IP address blocks: 85.119.136.0/23 maxlen: 23
85.119.138.0/24 maxlen: 24
85.119.142.0/24 maxlen: 24
85.119.141.0/24 maxlen: 24
85.119.140.0/24 maxlen: 24
2a01:8d80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99591153 (0x5efa3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Jan 1 07:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbf487e4bf4bd1f149aa5bb33ad71504442a194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:93:44:a5:e0:61:2b:84:ca:b8:be:c1:07:
f4:2f:db:04:8e:a5:4c:b4:db:ae:4f:93:af:17:c8:
a0:0c:68:8a:69:50:67:25:9f:11:7b:47:63:6f:16:
18:01:b4:0c:81:28:95:13:44:eb:d2:2e:9b:e6:3f:
ea:e0:43:c9:56:63:1b:87:76:e6:1b:e1:ae:dd:10:
75:83:07:1c:1b:78:7b:75:34:ce:8f:be:0d:8e:26:
14:7e:92:71:eb:62:5e:d6:94:5c:c9:d6:95:2e:88:
3c:e6:f3:2a:af:5f:47:03:8f:02:54:f0:f6:00:2b:
b6:db:4a:94:9c:12:3f:c9:48:09:b2:e2:ff:fb:8e:
42:fa:14:c9:4a:65:56:c1:22:66:ac:a8:ef:13:1e:
9b:40:b9:78:07:c6:a3:27:29:26:a1:4c:02:70:74:
25:e6:6b:5d:3f:c5:a7:ba:fe:c9:64:bd:a1:7b:81:
0a:9e:80:48:8e:b1:d0:4f:2b:4e:e1:47:5a:b0:bc:
1a:01:01:81:73:d2:30:f7:45:91:f4:0b:88:fb:a1:
6c:cd:a7:8c:2b:b3:b7:26:79:7b:0f:1a:5a:df:ed:
7f:60:15:c2:e9:8c:4c:ac:33:1c:fb:dc:00:af:f7:
78:4b:fb:d6:0e:64:6c:91:0e:be:4a:88:72:f2:56:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F4:87:E4:BF:4B:D1:F1:49:AA:5B:B3:3A:D7:15:04:44:2A:19:4B
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/1-_SH5L9L0fFJqluzOtcVBEQqGUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.136.0-85.119.138.255
85.119.140.0-85.119.142.255
IPv6:
2a01:8d80::/48
Signature Algorithm: sha256WithRSAEncryption
a1:2e:5c:cf:30:ac:67:4a:89:6e:61:00:3d:3f:72:dc:d8:8f:
61:65:3b:fd:6a:9a:85:9a:33:29:9c:49:3a:f9:c5:de:42:12:
1f:83:ad:4f:b0:be:03:4a:75:d0:a6:2c:37:45:9e:e6:a9:ac:
5e:03:6f:c9:3e:06:ec:40:48:9e:cf:ba:a4:cd:47:5b:7c:82:
69:9f:ba:02:6f:5e:7f:06:23:a7:60:1f:28:68:00:f9:58:87:
0c:1c:33:11:a7:4e:b0:2a:a2:73:a3:ad:cf:e8:af:27:6d:11:
87:6d:37:b0:c2:37:ff:ec:ff:da:02:90:ae:aa:28:04:42:b0:
77:8b:12:18:b4:23:54:c1:15:f1:ef:dd:9f:4f:9b:50:e2:67:
6b:fe:70:71:21:23:e4:76:81:5e:b5:09:43:3e:b1:cf:c6:9c:
89:ef:95:5e:cd:4f:57:b5:61:d4:08:6b:59:7d:0f:86:07:2a:
91:6f:ad:59:aa:39:50:e7:8b:97:d2:d2:90:50:c4:c2:56:92:
0d:e8:19:dc:a1:2b:3b:95:96:5b:df:f1:d9:7d:9e:a4:cf:48:
4d:31:65:c5:0c:62:4e:9b:e4:af:0c:e8:9c:f5:5f:fc:55:6b:
86:c4:de:d6:61:cc:d3:5d:b4:f8:71:b8:28:b9:35:c3:df:a2:
7b:c0:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:32 2024 by rpki-client on console-fra.rpki-client.org