Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/DX3vV6e_uKRAkzWOwilNGtOfV_0.roa
File: DX3vV6e_uKRAkzWOwilNGtOfV_0.roa (raw, json)
Hash identifier: 0Z0AWvqGpB0wPi6N0g7gedo12O6E/2UMjvTsRhC84js=
Subject key identifier: 0D:7D:EF:57:A7:BF:B8:A4:40:93:35:8E:C2:29:4D:1A:D3:9F:57:FD
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 1B59F08D
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/DX3vV6e_uKRAkzWOwilNGtOfV_0.roa
Signing time: Sat 01 Jan 2022 10:55:59 +0000
ROA not before: Sat 01 Jan 2022 10:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35334
IP address blocks: 85.31.210.0/24 maxlen: 24
85.31.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458879117 (0x1b59f08d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 10:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d7def57a7bfb8a44093358ec2294d1ad39f57fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:ee:65:ec:c8:07:95:98:be:73:70:9a:d9:
03:2b:00:48:34:97:a7:31:b9:a1:fa:dd:b2:5a:bc:
70:63:88:86:75:9e:15:e5:3e:c3:c1:a7:ed:76:65:
8f:a5:8f:f1:1b:a5:0b:4a:2b:f7:df:72:9f:de:8b:
6c:f5:c2:05:43:d2:c3:a9:bf:77:3f:25:be:16:cc:
0f:6f:72:e2:7e:d3:54:d0:cd:da:3e:41:97:e5:e5:
0f:e3:75:67:4a:f0:4b:b4:21:ef:07:e7:f0:be:46:
15:25:3e:fe:99:b3:f0:f5:e0:15:8c:9d:25:0f:14:
1a:57:3d:9b:eb:18:f8:21:72:45:09:27:12:82:0b:
b7:a2:49:b5:86:44:39:df:07:87:2a:c1:a7:48:52:
e4:67:19:58:3e:d2:9d:5a:62:12:ae:f9:e8:43:f1:
ea:a2:35:07:cb:a0:4e:e6:ad:42:40:63:29:21:a7:
3f:5b:64:52:74:f6:85:52:cf:fb:b4:ea:03:36:e6:
69:e0:6e:0c:df:7f:c5:8c:e1:ba:c7:78:6d:42:04:
e1:31:7a:37:6f:d1:18:c9:0c:ba:07:45:08:82:13:
c2:5a:10:51:f6:3d:a4:c1:96:65:bb:8f:7d:9c:a0:
bd:20:c3:e2:e9:ae:43:c5:f1:7c:ae:73:c9:d0:e1:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:EF:57:A7:BF:B8:A4:40:93:35:8E:C2:29:4D:1A:D3:9F:57:FD
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/DX3vV6e_uKRAkzWOwilNGtOfV_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.210.0/24
85.31.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:83:0d:fa:73:f5:9c:49:7e:ed:14:3c:e6:6c:be:3e:2f:c0:
05:31:1f:06:e8:ab:f3:e0:39:1a:fd:78:29:5b:72:19:24:d2:
97:5b:6b:e8:85:4c:0e:19:82:f2:9d:42:d8:c0:ca:c5:6b:cd:
e6:b3:05:ea:b5:e7:cb:4b:3b:b7:8b:71:5b:1e:1b:07:01:e7:
09:1c:14:c6:15:f6:b5:e3:a0:6e:eb:95:a2:1b:9c:1a:9e:e0:
16:bd:63:16:1c:75:b7:1c:83:20:f0:21:e8:9d:1c:85:cb:40:
bc:d3:e6:f3:f6:21:ee:0a:59:35:77:83:26:30:82:0c:f2:31:
f4:16:75:73:c2:c7:b2:1d:c7:ea:2c:e3:fb:d3:37:9e:15:03:
c7:1d:1b:47:36:98:12:5b:a8:5d:3e:41:8c:8d:5e:3d:f6:fe:
6c:e1:34:c4:57:c9:01:a0:15:05:fe:74:d3:22:f2:3e:aa:9b:
66:f4:e4:4b:04:dd:63:4e:d3:a0:a5:2d:93:03:64:2a:a3:b8:
9e:0c:d6:c1:c5:60:3a:a8:ed:0e:76:61:b1:6a:37:06:e6:8a:
8c:8f:55:88:b2:7d:ea:7e:64:da:96:77:a8:30:61:11:20:18:
0c:ba:c8:79:76:59:99:18:03:66:07:09:2d:87:d3:e3:62:26:
a9:64:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:17 2024 by rpki-client on console-ams.rpki-client.org