Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dE2xqy5O9e2NC3MmBMC1lhJAaVA.roa
File: dE2xqy5O9e2NC3MmBMC1lhJAaVA.roa (raw, json)
Hash identifier: IwsD6WWLVNEywAMqYG+7TVjKkFL6wzeDOppm9q6zRcI=
Subject key identifier: 74:4D:B1:AB:2E:4E:F5:ED:8D:0B:73:26:04:C0:B5:96:12:40:69:50
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1B464619
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dE2xqy5O9e2NC3MmBMC1lhJAaVA.roa
Signing time: Tue 22 Feb 2022 12:24:43 +0000
ROA not before: Tue 22 Feb 2022 12:24:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209466
IP address blocks: 85.153.156.0/24 maxlen: 24
176.88.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457590297 (0x1b464619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Feb 22 12:24:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=744db1ab2e4ef5ed8d0b732604c0b59612406950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:88:44:58:47:10:74:47:85:ed:32:ab:37:
44:fc:71:1d:45:2a:09:ca:b5:b7:b4:98:8f:4d:23:
59:de:dd:2a:3e:04:e0:e5:cc:e7:d6:ae:05:98:0f:
af:c5:aa:98:12:08:48:c8:a1:c5:32:d1:33:04:18:
b0:55:82:53:e8:ba:4a:bd:3e:7f:ed:9a:6f:04:56:
7f:cf:a1:bf:01:fb:50:da:0a:05:cb:ae:5f:f9:53:
0c:b7:4c:30:6d:8f:cf:93:5a:79:55:47:c0:8d:58:
a9:ca:00:ad:c2:e8:c2:94:92:65:f6:35:53:c3:1e:
b1:02:e5:ad:e2:3f:2a:79:fd:ac:76:80:b0:de:27:
94:8e:42:41:34:6e:4e:5f:a3:58:59:f1:a8:d8:3d:
41:ce:c4:1d:0a:e5:c4:d6:65:b2:60:ba:f3:48:7d:
e2:ee:19:8f:a8:da:76:98:7f:8c:e8:80:05:a4:03:
5b:d5:66:c5:50:72:0b:29:aa:74:f1:a5:57:56:f2:
22:a9:18:3f:b6:6f:22:42:6c:37:8d:3a:f1:a3:b1:
51:d4:1e:c5:88:de:6f:0a:b2:77:ac:72:dc:91:1d:
23:aa:3e:26:73:38:4d:99:e8:d3:bf:5a:ed:52:24:
b7:5c:c9:96:00:f7:94:f0:32:4c:6b:24:d6:74:db:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4D:B1:AB:2E:4E:F5:ED:8D:0B:73:26:04:C0:B5:96:12:40:69:50
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dE2xqy5O9e2NC3MmBMC1lhJAaVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.156.0/24
176.88.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f0:7c:36:3a:db:79:e6:ea:12:ae:14:9d:7f:fa:96:70:11:
08:ba:06:82:1a:3f:04:91:36:42:af:33:9e:1e:ec:b3:95:e3:
7e:ba:ae:07:74:27:d2:9d:eb:6a:fc:45:b1:70:0c:cc:a7:52:
4b:84:51:1e:53:60:c0:6f:e6:5c:6b:ea:f3:c6:97:14:60:91:
e9:07:ef:3b:24:04:8e:b2:11:98:27:2f:d3:4e:5b:dc:b1:23:
04:e7:a7:65:fb:af:0a:f3:c0:24:c4:80:2b:76:db:e9:9e:db:
62:de:7b:2c:52:4f:d1:43:46:94:a6:ae:19:65:13:6c:61:c9:
d1:43:98:cc:d1:de:b0:b8:90:ab:8c:38:47:4c:11:23:eb:a0:
75:18:b5:ff:4e:19:d2:a9:3f:63:d8:f1:33:b9:08:49:47:4e:
bc:1f:71:0d:55:d7:68:a6:91:5a:f1:19:c7:18:3b:48:3e:47:
95:94:de:42:b7:1b:4b:13:ab:6a:c2:ad:7b:4a:87:bc:16:94:
2d:c1:91:c4:cf:11:62:ca:5b:af:e5:6a:49:0f:e7:ef:ef:48:
e5:a0:be:53:9a:28:77:4a:d3:6f:b7:95:74:5a:c0:b9:ac:01:
e3:47:f9:f4:8f:ef:95:fa:6c:ac:e2:d4:74:f6:a0:f3:e6:aa:
bf:5e:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org