Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/mOOBleBatk7WFZNpRVBoQe0pgCA.roa
File: mOOBleBatk7WFZNpRVBoQe0pgCA.roa (raw, json)
Hash identifier: powylmxtEUs3IhS1eNOkaCngAz7UGokohZmcF2a1Ibg=
Subject key identifier: 98:E3:81:95:E0:5A:B6:4E:D6:15:93:69:45:50:68:41:ED:29:80:20
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 09A120C6
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/mOOBleBatk7WFZNpRVBoQe0pgCA.roa
Signing time: Sat 01 Jan 2022 01:51:57 +0000
ROA not before: Sat 01 Jan 2022 01:51:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 85.153.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161554630 (0x9a120c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 1 01:51:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98e38195e05ab64ed615936945506841ed298020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:76:21:2a:07:00:b7:45:f6:3a:0c:55:a9:
27:66:06:b1:7e:7e:50:19:92:ec:5a:9d:bb:12:06:
62:79:2a:d8:a5:ca:db:89:06:a7:a1:a9:11:4c:38:
20:b1:85:47:49:fa:54:52:1b:7c:30:75:0f:bd:51:
c9:ad:11:d7:00:b7:f3:88:1f:cb:09:18:9c:6a:2d:
b7:17:48:dd:a8:7d:86:4e:4b:4f:5e:6e:99:e8:05:
7b:84:9a:b9:57:90:b3:e8:f2:95:e3:a3:4b:f4:ba:
82:5b:53:01:61:2c:06:36:a1:cc:4b:f5:91:28:64:
37:ce:0c:be:34:68:fd:0d:1d:eb:e9:ee:a9:da:eb:
97:c3:88:22:91:09:96:2a:61:88:67:a0:06:90:e5:
af:ae:d0:5f:67:0f:34:41:31:16:56:c2:08:fe:e1:
2d:a8:34:1b:33:80:3d:1b:0c:70:c8:5f:29:f8:3a:
b1:b4:7e:ae:de:97:d6:e5:93:eb:bf:d1:19:b1:a0:
aa:98:f5:24:93:1e:96:83:b9:51:a2:38:a3:3b:51:
65:7a:bb:b6:39:d8:51:00:12:cb:60:92:4b:3d:0a:
ba:ab:54:77:31:f4:bb:8b:d5:e2:62:1d:d4:e4:3f:
74:a1:78:10:ed:a6:93:4c:72:8b:f4:db:f6:e3:46:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E3:81:95:E0:5A:B6:4E:D6:15:93:69:45:50:68:41:ED:29:80:20
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/mOOBleBatk7WFZNpRVBoQe0pgCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9b:da:9e:6a:f7:c8:59:59:77:d9:18:55:28:94:31:5d:16:
10:e0:1e:5f:0a:c7:c7:c3:d3:65:ca:78:32:4f:ea:8f:e1:38:
4b:19:4f:c6:98:fd:02:7b:65:62:bf:d7:2e:e6:61:78:49:15:
ed:be:97:2a:b0:e5:5a:a6:3a:05:c2:0f:69:86:c7:b6:8e:1d:
93:b4:f2:ff:fb:1b:99:b4:1b:a3:28:f7:1f:60:89:ab:60:a6:
f3:3f:ee:42:9d:98:2c:93:2c:d9:08:09:55:f6:5a:c2:4e:0f:
d7:fa:86:73:7c:b6:4d:97:d2:8a:8f:92:df:cc:22:81:d9:d3:
62:74:9a:c9:dc:01:a5:ce:02:92:4f:3e:5a:67:33:3b:d8:9e:
39:dd:61:23:1d:51:aa:35:23:c7:96:76:bb:fd:28:b7:12:93:
2c:0b:37:6e:e1:a3:05:03:10:a4:f9:72:1f:78:cf:37:de:d8:
0f:4b:72:8a:98:35:89:08:db:dc:49:79:1d:58:b8:c4:53:fa:
62:b6:2a:b5:c4:db:b5:82:d9:91:9e:ab:37:ce:26:ad:74:6f:
27:4c:8a:28:48:4e:a4:8c:9d:11:fc:33:e2:ef:2e:e4:2f:34:
8d:74:9c:ba:b7:b8:5b:5f:92:08:c3:22:89:cf:0d:c0:84:f1:
fc:45:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org