Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/O_P-7I1yysJPbhWJLncWnMcB6jw.roa
File: O_P-7I1yysJPbhWJLncWnMcB6jw.roa (raw, json)
Hash identifier: PHyRlwrKOG7lqcCTiDUrcqXRRwPg/LrRei2x9qy/Wh8=
Subject key identifier: 3B:F3:FE:EC:8D:72:CA:C2:4F:6E:15:89:2E:77:16:9C:C7:01:EA:3C
Certificate issuer: /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial: 02E0B651
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/O_P-7I1yysJPbhWJLncWnMcB6jw.roa
Signing time: Sat 01 Jan 2022 02:58:00 +0000
ROA not before: Sat 01 Jan 2022 02:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197451
IP address blocks: 185.135.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48281169 (0x2e0b651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Validity
Not Before: Jan 1 02:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bf3feec8d72cac24f6e15892e77169cc701ea3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:13:7f:df:18:3b:ae:c9:8f:01:f1:b6:c6:
fe:c0:01:1d:b9:10:d7:b1:a2:a9:06:78:d5:b6:11:
3e:db:5b:37:02:ff:64:35:f0:6d:d4:79:ee:87:76:
ad:b1:45:cb:81:cc:22:7a:6d:df:c2:c7:4e:e8:9e:
c8:4c:f8:e7:d9:64:4c:e3:e5:91:e9:2e:40:a8:ba:
9f:8c:81:e7:f6:04:e9:9d:9d:d0:89:62:a6:bb:c4:
58:81:42:c7:ed:67:b1:49:c9:6c:b3:72:ce:40:f2:
92:6f:dd:50:e3:8c:73:80:9a:55:32:9e:83:ae:d2:
4e:0d:91:f2:7b:75:d5:74:f8:93:bb:a1:11:19:cd:
30:ae:aa:f5:3d:a1:b1:5f:44:2f:f6:ee:66:53:47:
e3:84:78:0e:de:a2:76:b5:02:f5:86:4f:fb:de:59:
80:08:ac:64:79:9e:a8:f1:87:9a:06:2f:28:82:8e:
31:cf:35:a6:03:10:73:46:df:96:59:fa:27:82:b5:
a0:aa:43:12:65:c3:4e:62:31:23:49:f8:b6:6f:1f:
44:3e:b4:51:f7:17:07:16:99:e7:15:37:63:93:8f:
c0:d1:65:c3:23:17:d1:3d:fb:de:4d:8a:59:5a:75:
f9:a4:f4:e8:7d:44:96:b9:9b:a3:82:d6:f3:70:6f:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F3:FE:EC:8D:72:CA:C2:4F:6E:15:89:2E:77:16:9C:C7:01:EA:3C
X509v3 Authority Key Identifier:
keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/O_P-7I1yysJPbhWJLncWnMcB6jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.23.0/24
Signature Algorithm: sha256WithRSAEncryption
53:46:64:d8:b3:1e:e2:00:9f:d7:92:e4:f2:f3:df:7a:84:d7:
b2:be:ec:20:34:47:6a:2c:6f:d3:f7:1a:41:f1:8b:67:d5:c9:
06:fd:a5:e1:bc:19:66:75:7f:07:0e:2f:c9:10:a7:49:7d:7f:
4b:9f:ff:d5:30:58:63:b9:45:ab:3e:fc:9e:d6:83:27:8f:8a:
49:30:c2:35:ee:5f:91:4a:30:b5:f5:bf:de:3c:e4:be:5c:7c:
14:b2:ba:58:7b:91:bc:5c:35:01:ff:25:22:b9:5b:db:f3:1d:
8c:cb:04:da:76:f6:22:ab:60:f5:a1:cc:f2:4a:ba:9d:78:05:
59:7c:19:75:bc:8c:27:d3:ae:6c:ad:bd:f1:7d:7a:74:3e:d2:
36:bd:21:c3:c6:fd:d1:fa:f7:3b:19:c6:fb:16:ab:11:fc:6c:
68:74:9b:13:89:a4:86:87:99:69:95:c5:e8:2e:c0:91:96:79:
65:13:c4:05:f6:d5:2b:e4:5d:65:01:ff:b4:e2:d2:8b:b9:70:
89:d6:e5:6c:c7:08:16:84:b7:0c:9f:d7:b3:43:3b:b0:a7:46:
d4:38:29:d0:07:37:79:2b:0d:9e:fd:07:ac:81:ac:4c:21:e8:
a8:90:8e:65:73:1f:11:20:d9:6a:f0:fd:cc:e3:00:73:06:17:
b0:f6:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:51 2024 by rpki-client on console-fra.rpki-client.org