Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/6eD_Oc4HQD5SwIUR_QtosiwAlTI.roa
File: 6eD_Oc4HQD5SwIUR_QtosiwAlTI.roa (raw, json)
Hash identifier: zSuavWZwaUI6599nAihrQTz/uV7m6PJsUmGd0bPJZwo=
Subject key identifier: E9:E0:FF:39:CE:07:40:3E:52:C0:85:11:FD:0B:68:B2:2C:00:95:32
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 363F922A
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/6eD_Oc4HQD5SwIUR_QtosiwAlTI.roa
Signing time: Fri 29 Apr 2022 09:44:35 +0000
ROA not before: Fri 29 Apr 2022 09:44:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34469
IP address blocks: 85.158.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910135850 (0x363f922a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Apr 29 09:44:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9e0ff39ce07403e52c08511fd0b68b22c009532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:02:2d:4e:53:74:53:6c:a9:fa:96:ec:69:
80:0a:e5:55:84:1a:09:f7:65:d9:f0:b8:6a:d9:80:
ec:cb:e2:2b:4b:99:05:b9:0c:bc:c3:fd:22:23:de:
59:60:f8:1e:7a:b6:98:84:da:49:99:00:b0:b3:c1:
33:a6:5f:29:07:a4:31:02:47:20:f3:54:c6:5e:ad:
bf:cd:bb:4b:e3:ef:06:be:aa:05:d7:70:6d:4e:3c:
76:3f:fb:5b:3b:44:ea:88:31:89:3b:89:09:77:86:
99:df:23:a3:16:71:dd:86:d2:ac:12:54:16:8b:40:
ac:9d:b0:00:79:b4:8e:a8:32:fc:33:3c:3f:b5:83:
54:3f:f9:29:df:a0:d5:e2:c8:a5:0f:18:c2:db:81:
80:50:8f:88:16:08:3a:88:49:0b:11:36:76:82:5c:
11:4a:37:d1:d5:2d:24:3c:c3:54:eb:a0:a4:6b:1c:
55:3f:4d:b5:f1:6b:ff:fd:e1:98:cf:2a:c5:57:83:
90:9d:4a:90:fd:89:82:d7:a7:83:2e:ec:df:5a:cb:
fa:39:21:79:8c:d7:25:12:21:65:1e:cf:1b:fa:af:
17:31:86:c8:29:5d:95:0a:6d:1c:01:0d:ac:fe:a6:
45:1f:bf:ba:ee:d1:4a:a0:01:64:67:5c:98:0e:42:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:FF:39:CE:07:40:3E:52:C0:85:11:FD:0B:68:B2:2C:00:95:32
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/6eD_Oc4HQD5SwIUR_QtosiwAlTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.222.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:20:16:a1:ca:b4:c6:24:48:1b:eb:d8:73:4a:c9:3c:9b:90:
c3:08:ab:3b:a6:e6:87:06:43:a5:7b:86:20:f3:79:dd:54:e8:
9e:f7:11:b6:eb:c0:4f:15:16:74:64:98:f6:d1:3e:7f:b6:8b:
54:42:2c:47:f2:b6:e8:28:18:e1:55:92:80:a1:7c:46:a8:72:
fb:90:99:64:5d:2e:64:cf:7a:ee:96:ee:2d:4f:d3:f9:b2:50:
52:6f:e0:e5:c3:70:2f:50:b3:8b:e2:67:69:b8:e3:0d:fc:f3:
5b:04:50:b9:37:ec:14:d2:9b:06:99:ab:0b:d1:20:0c:d6:a8:
c6:58:8f:22:f6:07:74:82:27:dd:27:d0:0c:94:f3:ab:b7:c8:
fc:83:da:46:c5:fd:38:e6:11:08:2b:27:cf:7b:d9:1b:32:70:
0b:c4:9d:53:36:44:56:89:46:3f:03:80:18:7c:a4:ab:4a:d4:
d8:6f:4e:a3:e1:a7:11:85:b4:7e:06:92:71:e0:9f:77:91:a1:
c0:d9:cc:be:d0:59:34:3a:01:b8:9c:f2:35:06:c3:55:9a:75:
e3:a7:09:e0:89:68:6e:0a:87:c1:84:fe:01:1c:45:34:45:d0:
7d:c9:88:80:d9:6b:28:ec:39:1d:63:91:e8:f6:e6:15:27:3d:
95:fc:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:25 2024 by rpki-client on console-ams.rpki-client.org