Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/P3JJCOhz76XHXlpme9l6oFuubM8.roa
File: P3JJCOhz76XHXlpme9l6oFuubM8.roa (raw, json)
Hash identifier: MBywVC98zTuKH80j6A577NA9xjPJsMlnzMCmQyrgwVo=
Subject key identifier: 3F:72:49:08:E8:73:EF:A5:C7:5E:5A:66:7B:D9:7A:A0:5B:AE:6C:CF
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 32834474
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/P3JJCOhz76XHXlpme9l6oFuubM8.roa
Signing time: Sat 01 Jan 2022 16:06:45 +0000
ROA not before: Sat 01 Jan 2022 16:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44583
IP address blocks: 85.118.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847463540 (0x32834474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 1 16:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f724908e873efa5c75e5a667bd97aa05bae6ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:a5:88:fa:26:0e:04:fc:e1:70:46:c4:c8:
68:1c:2f:36:0c:74:08:50:25:53:98:bd:f9:22:ff:
9b:39:93:13:78:0e:53:17:83:1d:dc:c9:2e:6d:41:
20:a5:ab:f5:37:bf:43:8f:39:90:25:23:7a:15:f0:
1c:40:a9:5f:b2:ad:71:df:0e:e7:b3:4b:28:5e:f3:
a9:47:ee:78:13:ee:5b:8f:3f:af:5c:68:ea:9a:35:
d8:0c:f2:4a:25:23:01:88:a9:a2:ee:66:ee:54:41:
e7:22:3e:5d:5d:e1:41:fd:5b:d9:d7:cd:fe:55:85:
0a:8b:14:c2:70:ec:9e:9f:52:24:bf:1d:00:c7:d6:
ae:39:45:95:0c:d7:f7:f3:41:c3:2e:89:99:b0:56:
bb:1e:c4:91:92:a3:0c:95:6e:32:2b:09:88:28:c5:
39:17:d4:10:7c:0f:7a:fa:70:a9:1e:58:9c:0d:fb:
3e:d1:ac:27:56:6d:36:36:5f:11:99:6d:f8:00:70:
7e:cb:83:01:97:aa:68:cd:f4:4e:b0:34:09:9f:f4:
fc:3c:30:6d:85:25:35:8e:df:db:12:8d:12:f5:a2:
1a:9c:3a:79:d3:b3:38:9c:8c:67:06:fb:58:8a:ec:
c7:b7:02:9e:eb:15:87:10:e5:35:7c:19:eb:9f:91:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:49:08:E8:73:EF:A5:C7:5E:5A:66:7B:D9:7A:A0:5B:AE:6C:CF
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/P3JJCOhz76XHXlpme9l6oFuubM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.42.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b1:b1:4a:69:d2:c5:88:47:0a:28:fa:f1:6b:3b:e1:32:42:
ec:c3:38:70:20:b7:e1:98:d2:1e:86:7f:a9:5d:2e:c6:46:52:
b1:e3:f9:47:45:e1:75:4f:da:a4:81:d7:5e:83:44:a4:c0:fd:
52:2a:2a:7e:f9:b2:3d:a3:b5:0c:c5:a9:8f:6b:db:1f:a6:01:
68:ec:91:61:9d:7f:b3:bd:ba:88:16:be:10:61:16:4b:6d:85:
30:50:5b:01:2f:40:a1:a3:21:76:60:8d:b8:a3:5b:03:de:4d:
ff:58:f1:e2:ce:9e:e5:e5:06:63:22:f2:85:0c:0c:02:3e:24:
18:4b:ad:ae:10:58:60:52:07:be:35:c2:df:e2:70:c2:6e:67:
b7:b9:f4:d1:77:59:57:dc:56:83:c1:d1:29:b2:be:dd:ed:36:
c7:be:54:1f:cc:a2:8d:d0:cb:1b:0b:83:dc:54:c4:4d:ab:5a:
19:11:fe:cc:43:2d:00:93:0a:5c:d4:ab:2c:dc:51:83:7f:0a:
03:f1:0c:4c:40:9a:9c:da:02:63:87:6a:95:ec:9a:12:94:95:
77:0d:d7:1a:50:2b:b5:3f:30:60:fc:04:a3:25:54:0a:65:18:
ad:bf:27:9c:7b:61:54:ae:1a:31:06:6d:25:61:f5:b8:cf:cc:
1b:3a:f1:81
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMoNEdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NmRlMWQ5ZGNkYjI1YzFlNTMyYzVjOWI2OWRmYTc1N2UzMDYyMTBlMB4XDTIyMDEw
MTE2MDY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Y3MjQ5MDhlODcz
ZWZhNWM3NWU1YTY2N2JkOTdhYTA1YmFlNmNjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMqWpYj6Jg4E/OFwRsTIaBwvNgx0CFAlU5i9+SL/mzmTE3gO
UxeDHdzJLm1BIKWr9Te/Q485kCUjehXwHECpX7Ktcd8O57NLKF7zqUfueBPuW48/
r1xo6po12AzySiUjAYipou5m7lRB5yI+XV3hQf1b2dfN/lWFCosUwnDsnp9SJL8d
AMfWrjlFlQzX9/NBwy6JmbBWux7EkZKjDJVuMisJiCjFORfUEHwPevpwqR5YnA37
PtGsJ1ZtNjZfEZlt+ABwfsuDAZeqaM30TrA0CZ/0/DwwbYUlNY7f2xKNEvWiGpw6
edOzOJyMZwb7WIrsx7cCnusVhxDlNXwZ65+RAKUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/ckkI6HPvpcdeWmZ72XqgW65szzAfBgNVHSMEGDAWgBRm3h2dzbJcHlMs
XJtp36dX4wYhDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1p0NGRuYzJ5WEI1VExGeWJhZC1uVi1NR0lRNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvNjBmY2ZlLTdiMmMtNDY3Mi1iYzJmLTQwNDc5ODcwOTc2ZS8x
L1AzSkpDT2h6NzZYSFhscG1lOWw2b0Z1dWJNOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
NjBmY2ZlLTdiMmMtNDY3Mi1iYzJmLTQwNDc5ODcwOTc2ZS8xL1p0NGRuYzJ5WEI1
VExGeWJhZC1uVi1NR0lRNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFV2KjANBgkqhkiG9w0BAQsFAAOC
AQEAmLGxSmnSxYhHCij68Ws74TJC7MM4cCC34ZjSHoZ/qV0uxkZSseP5R0XhdU/a
pIHXXoNEpMD9UioqfvmyPaO1DMWpj2vbH6YBaOyRYZ1/s726iBa+EGEWS22FMFBb
AS9AoaMhdmCNuKNbA95N/1jx4s6e5eUGYyLyhQwMAj4kGEutrhBYYFIHvjXC3+Jw
wm5nt7n00XdZV9xWg8HRKbK+3e02x75UH8yijdDLGwuD3FTETataGRH+zEMtAJMK
XNSrLNxRg38KA/EMTECanNoCY4dqleyaEpSVdw3XGlArtT8wYPwEoyVUCmUYrb8n
nHthVK4aMQZtJWH1uM/MGzrxgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:48 2024 by rpki-client on console-fra.rpki-client.org