Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/_O5ldXOtFBN4KfqT-FPLASARh2Q.roa
File: _O5ldXOtFBN4KfqT-FPLASARh2Q.roa (raw, json)
Hash identifier: JM2d6X1UCCDugE12fZDwzlDn0M8yAiN78OcUgi9v86k=
Subject key identifier: FC:EE:65:75:73:AD:14:13:78:29:FA:93:F8:53:CB:01:20:11:87:64
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 0909C7D8
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/_O5ldXOtFBN4KfqT-FPLASARh2Q.roa
Signing time: Sat 01 Jan 2022 09:53:42 +0000
ROA not before: Sat 01 Jan 2022 09:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197690
IP address blocks: 85.208.180.0/22 maxlen: 22
2a09:8b40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151635928 (0x909c7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Jan 1 09:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcee657573ad14137829fa93f853cb0120118764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:fc:70:9b:58:0c:b8:32:a3:f7:fb:a3:83:
81:df:cd:3a:fe:66:30:95:bf:7b:8d:c4:ea:0b:6c:
99:46:b4:55:67:bd:48:2f:f8:d1:98:92:d6:5b:c6:
2a:2f:31:0a:5b:fa:40:eb:5c:92:fc:60:4c:76:41:
55:c0:3c:ba:7c:51:7c:c2:d8:74:45:d7:f8:57:45:
9a:2c:03:b9:bd:a2:67:3e:29:e2:98:c7:26:8a:ac:
6c:0a:21:fc:de:d8:22:ea:18:1e:e4:c2:3e:52:3c:
a6:da:25:a1:18:ca:b6:fd:98:65:2f:50:61:ba:0a:
60:55:c5:24:2c:e9:4e:d4:1f:eb:2c:6e:42:8b:c5:
fd:46:f6:6d:22:82:87:0e:10:0e:98:8c:9e:59:2d:
bc:b8:70:48:6e:b6:e0:c5:c9:7a:8e:1a:93:42:5a:
d5:ed:51:97:54:85:ef:ca:e5:b2:8e:6d:a3:1f:60:
4e:c0:03:f5:bd:73:5f:29:97:63:ea:9e:75:fa:2e:
5b:e6:95:e1:e4:2a:75:71:1a:fc:c1:c5:62:7a:21:
64:6e:96:99:40:2f:4b:53:36:f3:c7:09:5d:33:b2:
db:04:55:ce:9d:57:97:85:7d:64:63:64:80:f0:fc:
52:4b:76:8a:2d:f6:5a:0d:54:60:c7:88:c1:64:4e:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EE:65:75:73:AD:14:13:78:29:FA:93:F8:53:CB:01:20:11:87:64
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/_O5ldXOtFBN4KfqT-FPLASARh2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.180.0/22
IPv6:
2a09:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
31:5e:5f:76:b5:0b:39:18:90:46:5d:c3:9b:7b:c5:94:18:3e:
05:db:8c:3c:ca:36:59:1a:9e:7c:9f:28:cd:b8:ee:8c:d5:d0:
ee:f5:36:28:87:fa:59:f1:f2:c5:cb:49:d6:6c:ac:39:40:0b:
d2:ab:5e:2f:4c:61:fa:07:67:94:d4:9e:13:04:53:fa:46:ef:
f3:68:a5:bb:40:80:29:e0:04:52:58:b8:f9:71:6b:1a:45:1b:
6c:44:84:ef:02:ac:21:2d:2e:e1:f3:18:73:b4:02:fa:b5:e2:
1f:8a:2e:80:ff:38:69:0e:90:cb:cd:5d:b1:de:5d:9e:0a:b7:
cb:e2:93:bd:58:c5:48:d8:62:9c:30:0e:c7:74:3a:35:f0:8f:
53:84:e5:f8:65:6d:f1:e2:e5:63:bb:94:49:c6:83:17:22:60:
c5:d2:12:02:b7:a2:1c:ac:c3:8e:02:f5:4f:4d:68:2a:97:2a:
ad:06:4a:f9:80:a7:94:ae:18:62:b0:84:50:ba:a2:d4:5e:4c:
86:03:2f:c3:99:29:c2:98:71:5e:8f:ba:db:2a:48:ac:7a:bc:
59:a9:11:a0:2d:54:1a:7f:02:80:fe:77:a1:f9:99:21:d1:e9:
39:88:ce:b3:b7:f3:02:40:a0:e4:a5:08:6b:9c:f9:9e:54:ca:
83:cf:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:34 2024 by rpki-client on console-ams.rpki-client.org