Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/O9GA7v26qDGt9dil3FaegKV-k-M.roa
File: O9GA7v26qDGt9dil3FaegKV-k-M.roa (raw, json)
Hash identifier: 8nL/IBrB4M4f3muN2PbGxW0Tv7Z0Pp+PTeA0M/u+njs=
Subject key identifier: 3B:D1:80:EE:FD:BA:A8:31:AD:F5:D8:A5:DC:56:9E:80:A5:7E:93:E3
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018552C5F2C3A45B41DF3D714AD26F9A6162
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/O9GA7v26qDGt9dil3FaegKV-k-M.roa
Signing time: Tue 27 Dec 2022 08:49:42 +0000
ROA not before: Tue 27 Dec 2022 08:49:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207168
IP address blocks: 85.142.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:c5:f2:c3:a4:5b:41:df:3d:71:4a:d2:6f:9a:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 27 08:49:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bd180eefdbaa831adf5d8a5dc569e80a57e93e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:cf:4f:d6:9c:f8:f5:8e:a6:86:b3:74:47:
dd:09:9b:9a:ab:de:ca:a6:71:ea:0d:44:1c:b5:59:
d0:2a:bd:2a:a6:d8:7a:17:db:79:cb:6a:11:dc:76:
fd:d5:cf:a9:58:58:85:8b:0e:bc:82:1c:b7:cc:20:
bd:6b:75:72:4f:cb:26:c7:c2:ea:0d:43:65:b1:10:
7e:2b:18:3d:6b:76:2c:b9:71:03:f7:53:db:83:f5:
a4:a2:0e:83:ca:35:45:ab:0a:8e:29:46:9a:f9:84:
a3:ed:ff:da:74:46:e5:59:56:a6:45:a6:f1:05:fc:
f0:92:0a:8e:e8:d0:47:fe:b6:f7:34:8b:c7:d7:45:
de:ff:c2:f6:22:cf:20:40:71:c7:c0:b4:c1:4c:51:
bd:7b:c9:ce:64:8f:20:a6:da:62:61:6d:f8:64:97:
d5:99:75:76:d7:a5:b6:98:60:d4:65:6e:4b:29:54:
b8:16:9b:6c:2f:3f:16:9c:cf:b8:eb:69:7b:ae:1a:
ef:00:c9:aa:d1:ef:dc:4f:30:72:55:ed:1b:7f:d4:
26:69:83:11:de:ec:29:e4:66:da:ed:7f:e4:aa:ec:
89:1c:c3:68:45:0d:a4:5c:75:20:f3:22:2d:cf:24:
1c:d1:d8:b1:8a:e7:11:ec:a6:5e:ac:36:6c:31:43:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D1:80:EE:FD:BA:A8:31:AD:F5:D8:A5:DC:56:9E:80:A5:7E:93:E3
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/O9GA7v26qDGt9dil3FaegKV-k-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.180.0/22
Signature Algorithm: sha256WithRSAEncryption
71:23:e2:9d:f8:53:6f:60:b1:63:c7:2e:88:fa:82:d1:3d:78:
c0:2f:65:c8:4d:ee:d9:e1:b0:16:bb:d4:02:3d:48:68:88:84:
16:b1:c4:a8:a8:88:72:de:fb:c7:8f:20:dd:b7:2b:96:39:3d:
c1:ea:04:f0:69:67:1d:62:99:83:42:e8:08:df:e8:68:3c:22:
e9:5f:61:ec:0c:7e:64:59:90:2e:40:38:bd:68:6c:4d:df:33:
ec:f6:d3:84:d8:aa:fb:a8:11:44:9a:40:ac:b2:81:fc:ad:bf:
78:03:d8:26:53:14:d3:15:49:ab:41:e5:42:e3:fb:1c:31:f5:
67:b2:00:ac:4d:84:93:75:6e:06:6e:1a:6c:09:f3:12:f2:c9:
1d:27:5c:ef:47:50:a6:8f:4d:7c:42:0f:b5:68:0d:c1:ef:ca:
69:29:91:7e:b1:0d:91:b1:03:5f:22:ca:f4:eb:a2:3c:9c:bd:
7f:71:2c:52:48:e2:d5:0c:5c:9b:fa:91:a2:eb:d5:9f:d4:0b:
fd:57:70:10:b9:9d:c7:19:55:aa:4d:24:ee:84:7e:0a:48:ad:
79:8b:3d:f3:68:61:4d:1c:7b:29:91:dc:ae:8b:e7:74:a6:9d:
51:8b:b4:b2:77:23:e5:80:d6:78:8e:e9:d5:c5:28:89:05:7a:
5c:b7:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org