Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/AovXowHTowCJS-oAoqPKDHC4MvA.roa
File: AovXowHTowCJS-oAoqPKDHC4MvA.roa (raw, json)
Hash identifier: cTJ4T04zMWctzn7cFeucWrC9ya7fNZeXoEInm/qdpDo=
Subject key identifier: 02:8B:D7:A3:01:D3:A3:00:89:4B:EA:00:A2:A3:CA:0C:70:B8:32:F0
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0182586AB006DCBC3482E54D441580D911A2
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/AovXowHTowCJS-oAoqPKDHC4MvA.roa
Signing time: Mon 01 Aug 2022 07:59:23 +0000
ROA not before: Mon 01 Aug 2022 07:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 85.153.127.0/24 maxlen: 24
85.153.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:6a:b0:06:dc:bc:34:82:e5:4d:44:15:80:d9:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Aug 1 07:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=028bd7a301d3a300894bea00a2a3ca0c70b832f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:19:5d:02:e3:fa:ca:1f:69:15:ba:1f:25:
fe:28:28:bd:5e:44:01:5b:ed:64:1c:0a:e9:38:6d:
ba:28:c9:a7:ae:ea:43:fb:bd:8e:2a:3d:f0:de:7a:
4b:2a:96:d7:3a:e9:de:a6:cf:a1:48:97:00:44:1e:
ca:14:b3:fd:96:57:ef:0b:fe:7b:ca:d9:32:e4:3c:
3f:87:bf:70:85:a1:6f:cf:c4:47:64:be:e8:81:61:
ac:d0:fc:6f:58:30:1d:cd:ad:cf:6f:ef:68:8e:12:
17:74:01:a5:19:4e:40:e0:64:83:4c:41:a5:0f:f5:
3e:d4:20:27:a6:3f:f2:52:c0:bb:71:2d:e8:73:17:
e9:35:01:d5:df:a9:b6:29:9a:ac:30:42:e5:9d:92:
4c:50:6c:3a:de:45:a1:0a:d3:82:bf:d4:10:6e:fc:
66:e0:d6:3a:e8:0d:62:77:c6:0a:b5:c1:6b:92:fd:
07:02:8c:50:eb:98:f8:29:75:16:3d:ea:c7:dd:8a:
f5:0a:f9:56:f5:d0:34:d5:aa:bb:6f:d3:e3:cf:ca:
c2:67:c2:36:47:21:22:03:88:a5:a4:5f:22:1b:8d:
ed:7d:c1:16:d8:c6:89:49:c7:c4:df:df:15:3f:fc:
c2:a5:da:e9:ab:02:b9:91:37:17:89:0a:0b:98:45:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:D7:A3:01:D3:A3:00:89:4B:EA:00:A2:A3:CA:0C:70:B8:32:F0
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/AovXowHTowCJS-oAoqPKDHC4MvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.9.0/24
85.153.127.0/24
Signature Algorithm: sha256WithRSAEncryption
42:26:82:9e:b8:fa:81:dd:77:38:fa:8b:1c:1f:af:ae:7c:0e:
96:3d:0f:46:4e:8f:23:b8:10:38:73:47:b0:e6:69:cd:48:ba:
e0:9b:b5:75:7b:91:f5:9c:c3:2e:84:4a:96:9a:ba:02:b6:83:
07:a4:99:ab:9b:71:10:d0:2f:0b:1b:02:1e:9d:20:0a:bb:9f:
e4:c4:16:06:f8:5f:b7:7e:75:e9:bd:ed:ca:d9:f9:c4:55:fb:
79:ee:ab:1e:88:88:be:c0:a9:76:57:72:a2:05:74:18:ae:72:
6d:1a:df:c1:85:ba:23:76:2c:d0:40:46:5c:94:76:12:76:f3:
fb:9c:c3:06:af:eb:60:b8:44:92:fc:55:16:f8:91:a7:be:65:
0f:a9:22:88:da:8f:d2:b6:e7:4d:e8:75:42:85:29:84:20:47:
2a:8f:96:4e:8b:fb:1a:d9:1a:48:68:e9:58:8d:3b:9d:1b:58:
ed:9b:da:43:f2:29:0d:d2:4f:b8:75:88:2c:de:01:04:98:3f:
aa:c9:19:fd:d8:a7:58:ca:f6:92:29:83:dd:af:bb:ac:3d:2e:
97:06:18:f3:af:25:5f:98:43:95:a1:76:53:7f:b0:01:55:6e:
54:b0:ef:3b:04:bf:0a:ab:56:f2:b0:94:a8:5d:cf:c7:2d:47:
ef:a1:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org