Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ohUuTLrvJicEMstz8xfsegorNEE.roa
File: ohUuTLrvJicEMstz8xfsegorNEE.roa (raw, json)
Hash identifier: wvMEByNjI1T8fCmX1ezcK5LqO+Pw6sZJtM8Y/RFKFPQ=
Subject key identifier: A2:15:2E:4C:BA:EF:26:27:04:32:CB:73:F3:17:EC:7A:0A:2B:34:41
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B7271D4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ohUuTLrvJicEMstz8xfsegorNEE.roa
Signing time: Thu 02 Jun 2022 10:23:20 +0000
ROA not before: Thu 02 Jun 2022 10:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43315
IP address blocks: 85.121.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460485076 (0x1b7271d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 2 10:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2152e4cbaef26270432cb73f317ec7a0a2b3441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:15:61:ce:80:50:64:87:71:b2:6a:25:da:
11:e7:82:6f:f6:9f:3e:7c:7e:fc:a8:85:63:e1:40:
20:ac:da:ac:20:02:9a:ae:49:c8:1a:29:d7:11:96:
fd:f5:27:c4:0b:60:ea:5d:da:50:95:bc:0d:da:44:
31:45:7f:1a:82:80:da:70:4d:88:ad:9d:47:69:89:
e8:3c:a9:d0:51:7c:ca:25:44:9a:35:fa:23:b4:6a:
7f:01:b6:4e:9f:cf:a4:27:3a:eb:30:6d:33:e4:94:
19:3b:4b:27:e9:cf:82:46:1e:52:de:2a:15:e4:a7:
99:23:80:6b:40:11:4d:56:04:af:ba:39:99:97:ec:
7c:76:80:1f:15:87:c6:bc:3f:25:36:2a:13:2a:0e:
86:5c:dd:0f:d4:b2:bb:14:c4:4e:3b:28:96:ed:95:
25:b0:7c:91:d8:e0:1e:63:45:22:15:d5:c0:9d:ee:
72:96:bd:0b:df:6f:1e:0c:77:8f:13:14:45:8f:d5:
f6:50:14:e6:76:a1:cc:f4:6d:6a:01:7e:6e:a2:56:
2e:90:d0:2b:12:6c:fb:ad:57:61:63:71:cf:12:04:
77:1f:3c:b8:f4:5c:7b:e2:e0:b4:21:dd:eb:62:67:
ba:6a:1b:f0:af:d6:89:3b:c4:ed:9b:69:e2:0c:db:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:2E:4C:BA:EF:26:27:04:32:CB:73:F3:17:EC:7A:0A:2B:34:41
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ohUuTLrvJicEMstz8xfsegorNEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.138.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6d:0a:a2:73:16:63:ea:3f:08:ce:b7:4b:25:da:2c:23:e2:
c0:af:4d:ca:ff:3c:2b:df:08:5f:b2:c9:0e:be:58:e0:28:8c:
a6:b4:a5:eb:9a:61:52:eb:c6:55:5b:8e:ba:1d:2a:0d:57:5a:
6c:4e:7f:4a:7f:48:14:2b:59:f5:7f:c0:74:f6:c6:fb:b4:95:
4e:80:ec:8f:e7:94:53:81:69:ac:a9:c6:dd:93:3b:81:0e:f7:
26:97:df:ee:8d:68:91:95:32:3f:10:e4:6d:ef:2e:98:f9:13:
c5:29:26:37:69:45:85:39:39:a1:42:8f:a9:f0:46:af:c6:f6:
b1:98:6c:27:bc:da:b7:84:9a:ef:c1:56:30:a6:a7:c6:2c:2a:
31:63:02:ab:7e:fd:9b:71:28:b3:da:35:82:bf:67:08:45:bf:
f0:60:63:82:01:e5:3c:f9:ab:f9:73:de:34:4a:fd:fc:3d:77:
e8:2e:d4:19:b3:1d:ca:e0:0a:d3:35:5c:b1:a0:d9:6b:10:84:
35:a9:4f:a3:be:30:0b:8f:9b:03:54:3f:d5:49:73:a1:43:c8:
20:a4:5b:cb:fd:db:aa:7d:a3:9f:88:80:00:6d:c8:ec:e0:5a:
9e:81:ef:31:e6:69:c7:8d:03:7c:dc:7f:bf:88:59:e0:7e:97:
1a:d4:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org