Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_3absdxElAenGFRsIqv_sOImsl4.roa
File: _3absdxElAenGFRsIqv_sOImsl4.roa (raw, json)
Hash identifier: IVEoMLwBtaspILWAU/tmFaOueBCLAgukHCBnLqk7u8o=
Subject key identifier: FF:76:9B:B1:DC:44:94:07:A7:18:54:6C:22:AB:FF:B0:E2:26:B2:5E
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CACF690
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_3absdxElAenGFRsIqv_sOImsl4.roa
Signing time: Sat 01 Jan 2022 04:59:40 +0000
ROA not before: Sat 01 Jan 2022 04:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197431
IP address blocks: 85.232.225.0/24 maxlen: 24
85.232.246.0/24 maxlen: 24
213.189.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749532816 (0x2cacf690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff769bb1dc449407a718546c22abffb0e226b25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:7e:db:77:80:05:f9:31:df:f2:30:a7:c4:
7f:8b:a1:e2:a7:f5:26:26:e3:d4:b3:bb:f9:37:0d:
53:5e:6f:bd:b5:da:07:f6:0c:bd:27:c6:b0:9f:1e:
5e:25:0c:c4:cd:73:44:17:da:4d:c5:8b:6a:8f:10:
e3:2a:49:d9:e3:03:3d:4f:7a:16:09:55:23:2e:f5:
5c:50:70:81:d7:52:7c:42:2a:bf:52:3b:de:e6:cb:
b0:ba:42:9d:6d:30:a7:d1:ad:ec:34:e1:7c:2f:9c:
99:db:26:a6:8b:3a:c2:31:20:0a:1b:eb:e4:cf:14:
78:bb:46:33:64:e8:8f:01:be:35:73:f0:86:6f:d3:
71:44:44:95:68:41:cb:b0:0e:d6:9a:99:12:3e:aa:
0c:5f:a9:6b:57:bc:ef:11:d7:97:51:8b:e4:7b:e5:
a3:95:b9:7d:c6:0f:42:e7:71:c7:f9:4a:2a:be:32:
c4:da:29:00:71:e1:7d:2a:ad:a7:3f:63:2d:f9:5b:
00:35:1a:ed:ee:ed:31:a3:5f:01:be:1c:77:0f:3c:
b5:c1:ce:fa:46:30:7f:95:50:5f:29:b3:82:0f:7e:
ba:5c:58:16:97:42:e1:83:cc:ac:30:1d:e1:51:b4:
33:ac:e0:76:88:33:32:68:8a:9b:ff:b4:ab:a4:18:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:9B:B1:DC:44:94:07:A7:18:54:6C:22:AB:FF:B0:E2:26:B2:5E
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_3absdxElAenGFRsIqv_sOImsl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.225.0/24
85.232.246.0/24
213.189.48.0/24
Signature Algorithm: sha256WithRSAEncryption
56:73:08:dc:7a:6d:f8:b3:44:a6:34:ee:b3:a5:79:79:12:7d:
25:02:5f:05:0d:5b:67:57:36:5b:47:25:97:bc:7e:a9:e8:45:
b9:97:f3:27:5d:73:28:ee:07:01:3b:f5:e3:c9:06:67:26:aa:
e0:bd:16:50:e5:ac:09:27:5f:4a:0c:d7:eb:d9:04:01:c3:15:
c1:15:39:be:70:f2:07:e4:4b:d3:f2:6f:b0:8e:13:00:77:66:
82:88:96:66:28:18:07:d6:bc:17:c6:19:2e:c3:9a:f2:4c:a2:
03:84:db:3f:0a:f5:93:fb:c0:ea:52:18:ec:67:9f:a7:9c:55:
de:aa:fb:2d:32:fd:8c:91:72:92:92:e2:46:b2:43:a3:33:63:
4b:b2:b0:cf:fa:db:42:bb:27:06:95:a3:70:f0:d7:a2:3d:2f:
12:a1:28:8a:35:56:6f:55:05:0b:68:ad:fd:0f:aa:0c:04:e7:
fc:9b:ef:59:fe:7c:9e:80:0c:8d:39:d0:60:f6:96:3f:10:e9:
36:0a:6f:93:97:84:e4:43:19:ea:b2:6e:89:c7:40:8c:68:91:
57:d1:ed:b8:de:c0:0e:b4:2d:72:77:71:3a:3d:1d:d5:9c:1c:
6f:d6:3d:53:e2:01:b8:66:a1:0d:2a:3c:e5:ab:ee:d6:24:cb:
df:a8:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:43 2023 by rpki-client on console-fra.rpki-client.org