Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CJdJxP_lVSgN8e0XNDne9Tu6UkY.roa
File: CJdJxP_lVSgN8e0XNDne9Tu6UkY.roa (raw, json)
Hash identifier: iIJbEX104KzFPqJXwDyjn1W72KdILSXQkaqkQP8kYbc=
Subject key identifier: 08:97:49:C4:FF:E5:55:28:0D:F1:ED:17:34:39:DE:F5:3B:BA:52:46
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16D3F6A0
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CJdJxP_lVSgN8e0XNDne9Tu6UkY.roa
Signing time: Sat 01 Jan 2022 02:51:26 +0000
ROA not before: Sat 01 Jan 2022 02:51:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207256
IP address blocks: 85.142.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382989984 (0x16d3f6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=089749c4ffe555280df1ed173439def53bba5246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:d1:0a:b2:00:54:8e:4f:78:9a:68:fe:3e:
6c:08:d1:d5:76:dc:d8:4b:ed:ce:a9:51:6e:91:ff:
9e:af:9a:1e:47:b2:eb:b0:5a:dc:be:e6:4e:ba:b0:
f1:ff:ef:0b:fe:e8:bf:b6:d6:f7:92:cf:d1:f7:9c:
df:a8:53:8d:47:8d:7a:20:7c:8e:19:78:d2:c6:d8:
a2:21:b1:ee:3e:f0:0b:e8:79:24:fe:a9:f8:10:b8:
09:8f:e0:32:30:9a:5e:06:48:a4:9b:45:f4:98:7d:
ac:37:8c:c0:f4:a9:f5:10:cc:46:fa:a7:dd:2d:6d:
fe:81:69:37:a3:07:36:38:c6:63:be:83:31:2b:e8:
b1:dc:55:24:00:27:24:26:04:b4:db:30:81:3c:0e:
d9:d2:ce:e1:d4:60:79:b7:17:e7:d0:19:1f:cf:ef:
dd:2a:06:61:7a:fb:6c:c4:40:c8:7f:a9:55:22:36:
f2:ac:6c:dd:98:9d:3b:6a:c1:d1:b5:43:be:08:6e:
15:81:16:ef:b2:ab:eb:f3:33:d0:a9:96:07:33:dc:
13:23:c9:d5:88:8b:3a:a9:89:fb:eb:9b:80:41:da:
a7:47:67:9c:df:a5:9b:7f:7b:b4:5b:da:b1:46:20:
03:1a:ef:10:b1:bd:ea:46:0f:97:49:71:e8:03:10:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:97:49:C4:FF:E5:55:28:0D:F1:ED:17:34:39:DE:F5:3B:BA:52:46
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CJdJxP_lVSgN8e0XNDne9Tu6UkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.251.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cd:65:c0:a8:1f:c3:7b:2e:10:8c:fa:da:e0:40:d0:a5:16:
c6:e2:f6:9e:0a:1d:cb:43:c9:cd:9c:62:22:60:8c:34:50:53:
ac:b6:d8:75:dc:31:30:6b:c3:07:af:eb:09:b8:cd:67:bb:e0:
e7:62:2c:11:26:2f:79:5c:b0:62:a0:85:86:5a:df:3d:1b:52:
9d:f0:7c:b1:10:e9:05:c2:01:74:28:31:5e:7f:0e:8e:69:74:
37:a9:f2:fd:ca:25:bb:b2:3e:20:9d:a9:8f:dc:aa:e3:c0:a6:
c0:7d:cc:87:c8:69:11:2d:90:7e:ad:be:b0:87:c6:cd:3b:fc:
d3:ea:82:d7:96:7b:99:54:c2:5a:b1:ab:16:61:97:15:58:c6:
c4:c0:5d:b1:05:9c:d5:88:01:de:3d:71:9c:d3:48:5e:33:48:
92:0d:e4:c7:bf:e3:0f:9b:fd:5f:2f:c7:43:47:92:b2:3c:3e:
fe:4e:82:2d:a3:b3:a6:b1:c9:83:73:af:40:54:83:3f:ee:d2:
d7:24:57:0c:33:f5:e0:be:66:34:de:5e:b9:5c:b9:05:11:ee:
db:e3:47:92:2f:45:14:e6:d5:4d:b1:9d:cc:be:f7:6c:6f:d5:
80:ec:d9:a2:2a:89:14:1c:8e:4d:43:e0:91:3b:8e:ac:91:c2:
59:9e:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org