Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CgGUqJVXlma8x8xdReFKWXr0ME4.roa
File: CgGUqJVXlma8x8xdReFKWXr0ME4.roa (raw, json)
Hash identifier: txmpeSeAIuuoGgWos8C36goOZA6XTp29+hWapFORGXw=
Subject key identifier: 0A:01:94:A8:95:57:96:66:BC:C7:CC:5D:45:E1:4A:59:7A:F4:30:4E
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16D1BC82
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CgGUqJVXlma8x8xdReFKWXr0ME4.roa
Signing time: Sat 01 Jan 2022 02:51:24 +0000
ROA not before: Sat 01 Jan 2022 02:51:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202989
IP address blocks: 85.143.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382844034 (0x16d1bc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a0194a895579666bcc7cc5d45e14a597af4304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:f5:e7:97:00:3c:65:28:8a:a8:d8:70:21:
c6:49:e6:22:50:52:ce:67:aa:66:28:10:50:f5:68:
e9:a2:a7:22:fc:cf:27:b8:d3:54:f3:a0:d9:11:1d:
2a:c0:d4:b1:6b:75:eb:4c:16:10:81:17:8c:56:60:
fd:60:b1:9c:13:ff:de:94:d4:cd:cc:6b:e1:3b:83:
d7:9e:9e:82:fc:e0:68:1f:b0:45:0d:27:d2:a5:32:
95:07:4e:9d:9c:74:6d:58:5c:14:ea:82:4f:2d:e2:
d7:fb:55:b2:a2:8b:8b:f0:3a:15:d3:66:b0:98:96:
fb:3e:71:7e:2e:4f:4c:8c:18:c1:ad:23:42:2f:9b:
8d:94:7c:19:00:b9:50:1c:77:c8:b9:d8:e8:73:2e:
fa:87:ee:b7:22:05:d5:dc:89:b5:da:09:74:df:d8:
7a:f2:f8:42:37:5f:d9:0a:9a:62:35:d9:26:88:33:
ae:37:bc:d7:9d:ae:04:4a:e6:f4:27:86:d8:ff:b2:
08:e6:96:e5:ec:22:c0:68:37:cd:19:be:fd:51:cc:
c2:28:64:14:83:3e:bb:e4:c2:6e:a7:8f:c4:54:ed:
b6:74:4c:e1:70:28:ba:94:1b:57:94:4e:70:54:92:
f2:2d:e7:39:e2:80:86:47:33:e6:c9:27:73:90:5e:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:01:94:A8:95:57:96:66:BC:C7:CC:5D:45:E1:4A:59:7A:F4:30:4E
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CgGUqJVXlma8x8xdReFKWXr0ME4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.248.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7d:a6:22:3f:87:13:09:82:ef:09:b7:d5:2c:75:32:80:d4:
41:96:06:d7:34:cf:46:9f:49:6d:52:d8:4a:8b:8b:52:f8:23:
f3:5a:e8:e1:76:68:f2:4c:22:95:36:01:65:56:7e:9a:91:70:
f6:38:35:48:a6:cb:ed:ea:09:79:4e:1a:12:33:28:d7:30:14:
13:ef:87:d1:88:9b:3a:92:e9:7b:c5:30:c9:06:eb:1e:4c:f0:
4f:75:b3:d8:ba:d2:ca:f0:8b:2d:77:6c:70:fb:b4:ef:dd:69:
4c:e2:b1:01:3a:e0:99:a6:60:78:14:81:85:18:8b:65:c4:d7:
62:56:90:26:d5:cb:1f:5b:1d:f9:26:16:94:42:cf:98:eb:52:
18:e7:0d:a4:b1:1b:d1:ff:0a:62:52:70:58:f8:97:3b:67:bb:
8c:a5:83:f2:2c:fd:5a:6d:bb:2e:9b:25:da:26:64:46:b2:66:
5d:ed:f5:30:1e:82:54:62:86:8f:32:3d:90:61:40:c6:d5:f4:
6b:63:29:0b:cf:be:88:d4:13:fe:7b:a5:fd:fb:50:39:a6:16:
35:98:ed:d7:4f:71:23:ab:b5:e3:75:7d:b2:83:e1:9a:23:8d:
9c:84:ce:c6:9b:ae:5d:cf:76:bc:c4:bb:71:bf:3c:a5:17:b8:
22:cb:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org