Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/jK86r2R8ISgSWVUaXd03tKba3KI.roa
File: jK86r2R8ISgSWVUaXd03tKba3KI.roa (raw, json)
Hash identifier: j6c92fwKYXwO4pL3zVH4i4Ny+hJr/owx0zxkEgdOI54=
Subject key identifier: 8C:AF:3A:AF:64:7C:21:28:12:59:55:1A:5D:DD:37:B4:A6:DA:DC:A2
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CAE2E53
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/jK86r2R8ISgSWVUaXd03tKba3KI.roa
Signing time: Sat 01 Jan 2022 04:59:41 +0000
ROA not before: Sat 01 Jan 2022 04:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198262
IP address blocks: 85.232.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749612627 (0x2cae2e53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8caf3aaf647c21281259551a5ddd37b4a6dadca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:69:42:75:44:8c:5e:ad:f5:19:4b:71:fc:
75:e4:e7:a0:82:b8:61:23:5a:26:f9:4a:35:70:a2:
63:4b:a4:e5:42:ec:58:c4:e1:6a:14:40:da:fa:17:
90:10:b6:f8:10:0a:48:f5:80:51:d7:04:b1:66:10:
b3:94:2e:87:ec:6a:3c:e0:55:6e:f9:e0:f3:4b:65:
ff:ea:c7:46:0a:cf:b9:21:d2:25:17:52:6d:f8:7e:
34:af:97:46:8e:a0:b8:69:ce:f1:3f:92:27:b5:e9:
78:00:4f:c0:fc:99:9c:82:11:f8:48:d6:31:04:50:
be:b1:e1:2d:c4:2b:75:d9:77:1c:8f:f5:c6:97:b7:
74:3a:7e:ed:69:5f:81:43:08:45:65:d1:25:98:cc:
e9:17:9b:e4:ab:e0:e0:43:1c:03:b8:05:18:5b:bc:
ea:35:51:b2:cf:54:07:34:9f:72:f2:a7:97:d0:5c:
bd:97:6d:86:21:66:b4:c6:88:09:3f:5e:04:c3:13:
33:a4:94:6b:c4:08:28:df:44:94:61:57:8e:04:52:
6b:ff:eb:f3:2f:fd:f5:5b:ac:b2:53:17:78:3b:56:
57:01:a4:98:84:8f:f5:dc:b3:72:8f:f2:8b:40:e9:
59:2b:27:64:88:a3:de:53:9c:d6:a5:9b:68:44:9e:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:3A:AF:64:7C:21:28:12:59:55:1A:5D:DD:37:B4:A6:DA:DC:A2
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/jK86r2R8ISgSWVUaXd03tKba3KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.227.0/24
Signature Algorithm: sha256WithRSAEncryption
39:14:05:9e:5c:6f:0c:73:c7:e2:92:4d:e7:4b:35:20:54:53:
e6:1e:5b:ea:2e:83:ac:0d:df:c4:ee:da:ff:f7:0d:13:27:60:
41:f5:aa:63:c7:f1:94:82:39:b4:dc:bb:0c:09:a7:1c:de:c9:
37:47:8a:f1:77:15:2f:7a:1f:d6:da:5f:29:42:3a:45:b6:da:
bb:10:31:59:01:75:c5:a4:ed:c4:d2:29:fa:83:0d:c4:37:06:
64:62:57:a8:7b:47:48:90:f2:40:7c:87:0a:29:77:ff:89:4f:
08:ac:66:d4:b8:19:0b:57:14:f4:62:9c:64:1a:01:01:d8:68:
97:90:6f:fb:cf:80:87:dd:19:e6:06:f8:dc:fa:d3:36:f6:8e:
7b:ee:6d:04:bf:1c:cc:0b:39:83:e3:8d:1e:21:fd:b8:5d:98:
d1:eb:98:37:ce:d3:f0:e3:78:31:23:03:09:cb:7f:e7:2c:4b:
15:b6:dd:27:b5:85:ac:46:85:58:39:6e:26:6b:5c:4f:30:43:
69:56:28:a3:22:7c:56:e5:97:17:3e:34:b0:49:a4:25:17:6c:
8d:78:e7:83:6f:e4:40:ef:14:4c:99:bf:2d:c7:9d:ee:a6:e8:
81:04:70:6f:eb:d6:b3:85:53:03:f3:f0:98:d1:e8:cb:72:76:
07:b5:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org