Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/EkU9KJJdH1d3vROAgQmIQfy3CVA.roa
File: EkU9KJJdH1d3vROAgQmIQfy3CVA.roa (raw, json)
Hash identifier: BXJ2GpW3MZ4f3H4wS8ft9KZjPHQmqi4gziAfbDiyNnk=
Subject key identifier: 12:45:3D:28:92:5D:1F:57:77:BD:13:80:81:09:88:41:FC:B7:09:50
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16C8FD45
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/EkU9KJJdH1d3vROAgQmIQfy3CVA.roa
Signing time: Sat 01 Jan 2022 02:51:19 +0000
ROA not before: Sat 01 Jan 2022 02:51:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51562
IP address blocks: 85.143.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382270789 (0x16c8fd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12453d28925d1f5777bd138081098841fcb70950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:69:58:6b:d3:db:cf:3c:b0:60:97:b4:d5:
0d:84:fd:8e:0a:f6:73:50:3c:95:d3:7e:50:4e:55:
0d:59:a3:0c:67:09:ef:58:4c:9f:ce:96:25:e9:a7:
78:16:68:d1:20:48:5a:75:0b:78:94:b2:8a:86:55:
b7:48:5a:82:b4:a1:6c:71:a3:92:db:af:d1:28:97:
0e:39:be:9d:c0:e7:3a:c4:0c:e6:04:2b:33:bb:99:
78:30:4a:b5:3b:96:49:d9:25:f3:b4:db:fb:bb:3b:
f4:d1:ec:a4:2b:da:52:63:9e:37:81:5b:17:f7:c4:
13:c0:d6:a8:67:35:18:ba:c1:14:b5:0c:c4:b0:15:
53:25:d5:ef:47:d4:c4:d8:d3:46:cf:e1:9a:4c:5c:
56:f5:54:55:5d:c3:cf:da:13:d3:6b:23:a2:53:fc:
84:3d:23:1a:fc:9b:36:04:e2:d7:83:d6:55:a2:6f:
02:87:3d:f0:8d:ad:04:21:0e:d0:e0:0a:0e:07:46:
c6:59:b7:53:1a:47:39:1b:05:d3:0c:23:ae:11:46:
41:28:40:8a:f8:78:ae:67:c5:43:20:3c:76:ef:cc:
c5:ae:1a:cd:30:e4:bd:1a:b7:be:19:f5:15:8c:23:
75:50:88:5e:7a:e3:7b:74:b2:04:70:a5:d9:86:9d:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:3D:28:92:5D:1F:57:77:BD:13:80:81:09:88:41:FC:B7:09:50
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/EkU9KJJdH1d3vROAgQmIQfy3CVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.200.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ab:72:d0:0e:20:35:32:96:e0:86:0e:ee:93:e1:90:f5:57:
7d:6c:a0:e3:b5:0a:ab:8f:9f:59:b0:3b:2f:70:5d:14:a1:05:
89:ff:70:85:06:c6:f7:00:4c:ad:4d:82:60:4c:a4:76:75:ce:
67:ad:6d:d4:ed:ef:17:f0:88:63:36:21:58:55:49:aa:06:c4:
34:cd:20:3d:3f:38:df:a8:b5:65:3d:a1:84:98:3e:cb:35:56:
6b:73:8c:3a:e0:c6:ae:11:e9:c8:4d:04:b7:c7:7f:6c:de:18:
02:b3:7d:0e:13:cb:cc:37:63:dd:e5:38:fc:f0:a7:2f:03:d0:
c9:bb:a9:62:59:89:1d:e8:0e:a9:c1:ca:15:9f:df:d5:40:43:
83:c4:a2:e0:1a:a9:04:ed:83:67:e2:9c:a2:7b:b9:b2:ea:0b:
4a:85:97:f7:33:dd:ce:3f:b5:84:4c:97:0a:d9:79:10:f5:33:
76:c8:71:94:bc:7c:65:ea:4d:f7:02:40:70:e9:57:af:ef:69:
62:d3:bb:66:bc:dd:38:01:24:77:77:1f:c9:81:c1:88:ce:e4:
21:60:c9:0c:f7:44:1e:5a:bb:7d:8c:90:7c:e6:b6:51:54:a7:
d4:9e:0b:c8:8b:ce:06:a0:a4:47:0a:6a:27:00:c6:cf:03:0c:
ba:a0:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org