Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/wVx0ZX5I9gy23XOallmp1ecFwM8.roa
File: wVx0ZX5I9gy23XOallmp1ecFwM8.roa (raw, json)
Hash identifier: vfCiFM0el8kCZ2HuPBpOpMuIIyFmY8eu6IKaja0COlA=
Subject key identifier: C1:5C:74:65:7E:48:F6:0C:B6:DD:73:9A:96:59:A9:D5:E7:05:C0:CF
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0AAC3089
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/wVx0ZX5I9gy23XOallmp1ecFwM8.roa
Signing time: Sat 01 Jan 2022 12:00:22 +0000
ROA not before: Sat 01 Jan 2022 12:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50889
IP address blocks: 85.29.14.0/24 maxlen: 24
85.29.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179056777 (0xaac3089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 12:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c15c74657e48f60cb6dd739a9659a9d5e705c0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:3b:18:f3:09:55:25:01:d5:a7:55:ba:90:
f9:f0:ce:10:ec:c0:67:26:8f:dd:5e:8b:db:a3:cb:
3b:c2:4a:2e:16:8f:87:62:dd:de:a6:4d:dc:fe:91:
ad:15:b5:39:4b:c6:54:ba:52:ff:bc:cf:72:bc:40:
e4:84:cf:22:66:1f:c1:1b:5f:2b:a8:d4:6a:aa:56:
e9:32:a8:36:58:5e:30:20:ec:80:4e:b3:2f:62:d5:
a9:dd:e0:09:8e:24:94:2b:e4:63:df:e7:ab:0d:c3:
32:d6:04:40:5f:55:9f:2c:af:3f:37:3a:4c:8e:ec:
e7:b5:79:cb:fa:99:94:af:87:f8:7f:2b:7f:d7:aa:
ad:7f:d8:d5:cc:f7:5e:91:43:e1:d8:a9:20:f4:e2:
87:64:b5:3d:6a:f6:01:2d:5e:28:e8:55:f8:6c:9d:
5b:73:7a:a1:50:f2:5c:4f:d0:71:51:85:8b:be:d7:
73:9c:fa:9e:56:24:8f:ab:34:ef:70:6f:ff:7e:17:
8d:51:9e:c2:c7:54:92:1f:8c:16:82:ae:1f:50:c4:
a7:c1:90:d1:1d:45:79:0a:ca:44:2a:9a:4e:e9:e0:
09:84:6b:83:0e:a8:a1:1e:36:ee:1d:cc:c7:2c:95:
ed:7d:94:78:55:f3:44:71:d0:1f:73:ba:c7:77:46:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5C:74:65:7E:48:F6:0C:B6:DD:73:9A:96:59:A9:D5:E7:05:C0:CF
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/wVx0ZX5I9gy23XOallmp1ecFwM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.29.14.0/24
85.29.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:43:d8:b5:06:0c:d5:d7:a5:a7:d8:9f:f4:45:97:a4:94:ba:
72:70:e5:f7:87:36:61:6a:f0:ea:b6:70:a8:70:54:44:10:20:
13:75:d0:fd:2f:9e:9a:93:1a:fd:d4:09:0b:ef:4d:0a:e9:c2:
54:76:12:2c:cf:80:05:20:fe:3c:ec:b0:e4:9d:b6:59:df:ea:
ac:30:30:2e:ef:89:76:68:cf:c3:4e:b7:08:19:1f:c9:d1:36:
6c:c6:f0:48:1e:fe:63:41:4e:51:3e:13:18:f4:09:9b:f8:e3:
2b:c6:ff:b6:fc:69:78:db:e1:13:24:e3:2e:e5:01:0b:8a:49:
e9:9a:4f:01:be:e4:d0:e2:b6:4b:35:d5:df:bb:09:bd:8c:4f:
ad:71:2c:f0:62:82:6d:42:ce:0d:c1:64:f1:ec:6e:f2:a9:e3:
80:6f:d3:87:5d:4c:37:b0:24:db:2c:75:9e:58:8d:be:36:73:
a2:31:3d:10:dd:9f:4a:7c:9c:f9:b2:4d:7a:4b:fb:0d:c9:80:
12:0b:1f:50:4a:7b:22:23:e0:80:14:a9:95:c0:7c:29:17:b9:
f6:ff:e6:9d:d7:d7:78:b1:39:00:b1:e7:58:8b:6c:c7:71:e1:
73:37:09:cf:68:2e:05:40:3a:46:01:f0:8e:5b:26:fa:ed:fb:
d6:ba:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org