Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2btjXrigrXeVJ2aO7DvbXM44Y6Q.roa
File: 2btjXrigrXeVJ2aO7DvbXM44Y6Q.roa (raw, json)
Hash identifier: yo8amPRDeNHJa3KzHWmbYUzNNHa8qj3SsQsOGueUlCA=
Subject key identifier: D9:BB:63:5E:B8:A0:AD:77:95:27:66:8E:EC:3B:DB:5C:CE:38:63:A4
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16D0239F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2btjXrigrXeVJ2aO7DvbXM44Y6Q.roa
Signing time: Sat 01 Jan 2022 02:51:23 +0000
ROA not before: Sat 01 Jan 2022 02:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202633
IP address blocks: 85.143.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382739359 (0x16d0239f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9bb635eb8a0ad779527668eec3bdb5cce3863a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:3f:a0:cc:46:b7:55:3d:e2:33:16:00:3a:
e9:ad:07:79:2b:ae:5e:c8:b0:34:d7:04:95:8b:76:
40:90:b9:b9:66:26:94:cc:fe:dd:23:51:17:c0:63:
c3:31:bc:78:0a:46:e6:be:bd:1b:9b:77:bb:54:18:
5b:fc:f9:89:4d:f5:62:cf:42:1a:f4:4d:be:0b:40:
af:9e:ab:20:03:5b:e2:d4:eb:64:fc:a4:2b:c7:12:
4b:65:b9:f0:b7:e4:0e:6a:21:f9:54:fa:8d:d3:c7:
e0:cc:6e:c8:11:00:3a:43:e3:0a:f9:e0:65:a6:36:
7c:b3:f2:7d:11:6d:e2:21:00:75:f3:cf:e3:88:66:
09:49:8d:64:7a:bc:29:c3:c2:25:00:37:64:67:32:
34:ea:f1:20:8c:4b:01:05:6c:de:d7:b0:7c:a5:8c:
19:3e:83:00:1c:4b:0f:79:b7:ea:6f:6e:9c:27:64:
96:f3:ca:cb:58:fe:9a:57:6b:6c:87:64:dd:c7:26:
83:79:bb:1f:31:b4:42:be:8c:0c:5e:4d:48:9d:b1:
e9:90:3f:e3:a5:ca:51:cd:67:a0:3a:88:64:14:19:
60:8a:4c:fd:fc:6e:71:50:3c:b1:ff:0e:b6:cb:71:
26:15:a8:6e:7c:2a:47:3a:4f:47:a6:33:93:89:01:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:63:5E:B8:A0:AD:77:95:27:66:8E:EC:3B:DB:5C:CE:38:63:A4
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2btjXrigrXeVJ2aO7DvbXM44Y6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.247.0/24
Signature Algorithm: sha256WithRSAEncryption
39:95:f0:8d:9c:05:c0:35:83:d5:31:9e:6e:9c:f3:c8:a9:a9:
00:97:c3:fe:12:df:33:46:c6:43:5c:69:24:97:96:aa:23:91:
02:f4:04:94:06:10:66:cb:38:f8:96:1e:31:e7:4c:bf:93:7d:
7a:e1:93:24:89:f9:31:a9:5d:7b:d1:40:7d:15:c5:ae:db:b5:
79:0f:6b:cc:28:66:9f:19:f6:5f:d2:e9:af:5c:3f:df:f9:4d:
eb:18:b0:00:43:04:a8:26:e1:ae:d2:8f:6e:ca:b3:fe:bf:e6:
c9:e0:70:c5:23:2d:93:1c:8a:d4:b1:3b:ed:c9:cd:ec:83:e9:
d5:1a:68:0f:db:07:38:d6:ca:38:ae:9d:36:28:30:7c:0b:8b:
5b:27:9f:dd:4f:9b:fa:0b:22:99:63:0c:f2:08:93:45:fb:25:
8b:5f:4b:94:f0:4a:13:31:74:cd:96:f3:a1:e8:6d:de:d6:8a:
7e:61:75:10:89:ae:07:49:11:6c:43:58:b2:5f:03:ba:71:51:
23:d2:97:6d:00:e4:83:95:51:a7:b3:37:b1:3a:4d:c9:fe:d1:
a5:fb:6f:fa:3d:41:a8:ff:a8:0a:bc:fc:70:1a:44:d8:76:a0:
d0:ab:85:52:57:44:8a:03:26:3d:3f:67:64:cb:b2:99:45:44:
d5:0c:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org