Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/5OzsTXJeAT7pqh5EhxZ8yC0DhOo.roa
File: 5OzsTXJeAT7pqh5EhxZ8yC0DhOo.roa (raw, json)
Hash identifier: ub5Y+MobeHyv+ma4Oi6dTESLdOxgYuJeNYqeBiCYX7s=
Subject key identifier: E4:EC:EC:4D:72:5E:01:3E:E9:AA:1E:44:87:16:7C:C8:2D:03:84:EA
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 09437603
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/5OzsTXJeAT7pqh5EhxZ8yC0DhOo.roa
Signing time: Sat 11 Jun 2022 10:15:03 +0000
ROA not before: Sat 11 Jun 2022 10:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210643
IP address blocks: 185.98.24.0/24 maxlen: 24
185.98.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155416067 (0x9437603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Jun 11 10:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4ecec4d725e013ee9aa1e4487167cc82d0384ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:75:d6:fb:cf:21:8c:d9:0e:59:6c:8d:8c:
4a:e4:e2:9d:75:80:26:cf:88:f2:b1:34:c5:bb:15:
21:26:a3:7e:43:a6:72:2f:8c:02:70:02:80:ba:2b:
5c:5d:c8:3d:5c:71:8c:92:0d:4c:a3:1c:c4:ee:f9:
e6:35:01:7a:50:47:99:22:6f:a1:0c:10:58:4a:bf:
d7:04:6b:52:e2:e7:20:a1:dc:8b:fb:7e:d6:eb:92:
14:a5:89:f1:16:8e:ea:5f:e0:af:de:ab:3c:8d:bb:
78:f3:23:97:bd:4a:67:74:67:8d:59:a4:38:ec:59:
b7:d0:37:3b:e1:31:61:08:a4:b0:bf:82:47:65:7e:
87:9a:fc:5c:50:a0:de:e8:8b:93:89:6c:c8:a2:89:
d9:07:3b:77:e3:77:92:60:72:05:51:40:5e:69:25:
2b:c1:19:54:d3:92:d5:82:7e:5d:76:68:71:81:bf:
65:a0:ea:15:45:e7:df:af:46:7d:35:10:4e:ad:af:
fe:60:e5:b1:66:d7:c0:c8:e6:2e:c6:40:87:ed:16:
99:60:70:75:f6:66:e4:37:33:8a:0e:18:ed:a8:82:
ae:ea:98:e9:50:3d:27:e1:0a:5f:db:47:63:a7:dc:
6b:c1:c7:dc:ec:7a:65:e7:4e:f3:42:59:22:b0:8b:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:EC:4D:72:5E:01:3E:E9:AA:1E:44:87:16:7C:C8:2D:03:84:EA
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/5OzsTXJeAT7pqh5EhxZ8yC0DhOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.24.0/24
185.98.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5d:9c:f4:21:60:f8:9d:8f:28:98:fe:cd:2d:ba:f3:b9:db:
50:80:c2:ec:c3:75:15:da:15:04:17:8c:43:a3:71:54:14:f3:
41:fa:a4:eb:de:8d:fe:5a:18:d8:db:e9:68:4f:6a:7d:d6:ca:
4e:ef:28:0a:af:b6:67:a9:8b:1a:31:91:ad:b9:44:a5:cd:d4:
b4:4f:af:45:11:4d:06:26:08:64:3e:53:bb:bf:fc:71:a9:35:
6e:36:e1:57:62:71:ea:79:5e:e5:18:71:21:9d:99:00:58:2e:
90:95:ce:b8:b0:f2:23:87:b3:62:b5:dc:04:0f:da:5e:86:c1:
56:59:b7:81:ed:c7:7e:1c:54:26:f2:32:f9:5e:40:fa:06:04:
31:c8:78:80:e6:16:2c:11:53:a5:95:5f:6d:eb:a0:ec:a9:bc:
0c:67:1b:e6:89:5c:da:a8:c0:fb:11:d9:17:7c:bc:f8:f7:74:
e7:de:66:93:51:42:cb:26:fe:79:b3:d1:95:dc:77:ad:81:65:
3e:6f:ef:05:82:12:f6:18:36:ce:b6:f0:d5:e8:24:8f:30:33:
aa:d7:72:bb:bf:61:2f:09:f0:7a:38:d2:40:68:95:ee:d9:97:
57:a0:3d:81:fd:2e:a5:04:b7:90:17:af:2d:b2:cb:67:53:52:
df:78:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:00 2024 by rpki-client on console-fra.rpki-client.org