Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/H7jx9EVcOuM5k_L4WilqUCk_ZRs.roa
File: H7jx9EVcOuM5k_L4WilqUCk_ZRs.roa (raw, json)
Hash identifier: BjfiSYvtMx5+B0kS6jPaE4nB348q/mruLRid6u2xjWM=
Subject key identifier: 1F:B8:F1:F4:45:5C:3A:E3:39:93:F2:F8:5A:29:6A:50:29:3F:65:1B
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 04580CCC
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/H7jx9EVcOuM5k_L4WilqUCk_ZRs.roa
Signing time: Mon 07 Mar 2022 21:29:21 +0000
ROA not before: Mon 07 Mar 2022 21:29:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201486
IP address blocks: 84.47.185.0/24 maxlen: 24
84.47.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72879308 (0x4580ccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Mar 7 21:29:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fb8f1f4455c3ae33993f2f85a296a50293f651b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:32:b9:d8:cc:75:70:c0:cf:2b:2e:f0:82:
9a:fc:1a:7f:d5:f3:cc:48:0d:f6:12:81:4a:cc:c2:
aa:15:4c:97:54:74:ec:6f:0a:e5:2c:95:f8:f1:b1:
c5:ad:84:b3:72:9e:f9:6d:f9:9d:3f:5a:d3:ec:a6:
11:e2:30:ea:a6:7f:dd:2f:9a:44:ea:aa:08:d2:b5:
c4:03:9e:8b:22:5b:37:28:7a:ec:79:05:8f:da:6a:
0b:e0:e9:d0:47:f2:5b:6d:ef:79:cd:a7:1d:f3:27:
38:bd:bd:7e:20:75:25:7f:a0:02:d6:44:dd:4b:ac:
8d:97:e2:23:e4:28:c0:74:34:cd:24:00:47:fe:f5:
7d:69:f3:db:23:47:54:6d:10:b4:f0:47:84:ef:85:
2a:81:cc:1c:9d:2f:94:05:4b:d0:a4:e1:23:f0:d2:
22:05:ff:42:c2:3f:93:13:bb:e0:27:cf:e8:27:8f:
6d:05:80:cd:b0:84:04:7f:2b:98:03:e2:f0:a7:4d:
2b:2c:f5:fa:88:5a:a2:d2:6d:c7:f6:5c:f0:9e:4a:
c9:29:73:e6:ae:74:71:6c:f6:f1:16:32:f3:dd:17:
4c:4e:48:30:9a:67:10:5b:2d:3b:c9:12:12:ba:1a:
9c:f0:76:01:7f:d6:93:16:a9:ce:63:ce:65:d2:a8:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:F1:F4:45:5C:3A:E3:39:93:F2:F8:5A:29:6A:50:29:3F:65:1B
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/H7jx9EVcOuM5k_L4WilqUCk_ZRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.185.0/24
84.47.189.0/24
Signature Algorithm: sha256WithRSAEncryption
08:87:f3:b8:80:d5:e9:ff:ab:f3:e9:bd:af:b1:85:b3:54:70:
57:23:75:17:64:ba:2f:cc:eb:43:d8:73:c7:e4:d4:70:5e:9d:
75:79:de:12:a4:07:01:91:7d:2f:1d:66:ed:26:03:a1:9a:06:
6a:30:05:22:ba:44:f2:8a:7e:48:a0:1f:33:ee:3f:4e:ce:4c:
69:0d:4b:3b:d1:bd:07:e3:03:bd:72:fd:d1:05:36:bd:f1:0e:
42:30:f6:4c:0a:4d:98:2b:f2:8c:43:2c:81:4b:d4:b5:e7:93:
09:d0:32:cb:a0:8d:84:e3:8f:b6:d5:07:ce:4f:5e:99:f7:2e:
c0:ce:e1:69:92:45:77:bb:b3:3b:9c:cd:fa:4f:bc:b0:31:5d:
a4:99:7e:62:bd:61:8d:5a:77:f5:46:80:63:d8:e9:ba:06:05:
1f:4d:db:da:ff:de:80:23:77:69:d8:fa:b5:6b:c4:c2:00:45:
5a:36:3f:1b:de:a4:ae:8e:40:7d:08:1b:1c:2a:49:70:49:e9:
2a:74:e4:a8:21:b4:36:80:b1:75:fd:fe:93:1d:e2:a2:d9:3f:
14:1d:72:e2:8b:d8:55:57:c3:a8:9b:e3:39:05:e5:99:b3:05:
b1:34:7d:8c:f7:c2:5e:95:2b:8c:62:e2:6d:49:52:23:6d:a0:
e6:42:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:33 2024 by rpki-client on console-fra.rpki-client.org