Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Yo4PI5j6pQ8_johPeM8ZjoV9B0k.roa
File: Yo4PI5j6pQ8_johPeM8ZjoV9B0k.roa (raw, json)
Hash identifier: q15ZRTOkj0hJlg9aEt5DSUDftCKFqr4PDbS71AzhCL0=
Subject key identifier: 62:8E:0F:23:98:FA:A5:0F:3F:8E:88:4F:78:CF:19:8E:85:7D:07:49
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018552BE9D34D196DCF2C505A3D18B612A30
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Yo4PI5j6pQ8_johPeM8ZjoV9B0k.roa
Signing time: Tue 27 Dec 2022 08:41:41 +0000
ROA not before: Tue 27 Dec 2022 08:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210276
IP address blocks: 85.143.238.0/24 maxlen: 24
86.110.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:be:9d:34:d1:96:dc:f2:c5:05:a3:d1:8b:61:2a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 27 08:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628e0f2398faa50f3f8e884f78cf198e857d0749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:62:0f:73:45:37:aa:4b:d3:22:45:57:e7:
7a:97:37:2f:fe:25:cb:03:b8:21:a6:ac:5b:30:dd:
a3:2c:d6:68:89:50:70:92:7d:2e:8f:53:e2:32:b2:
51:1a:0c:52:8e:64:a4:3a:c1:7f:3e:00:09:1c:ce:
d1:35:12:cd:d6:08:d1:82:b5:71:ee:52:b0:13:1d:
23:df:e2:36:4d:15:18:71:3c:ab:19:f8:4d:54:9c:
ad:89:76:17:ac:18:6e:7b:8e:4d:e5:d4:ed:e8:26:
83:f7:f0:d9:9a:6e:a7:db:83:99:4a:50:ec:f5:39:
c9:d7:39:b9:de:5c:1a:98:e9:5d:0b:db:d3:7c:01:
12:80:fa:21:70:b2:aa:18:6a:18:56:e5:dc:33:af:
6f:b0:ff:23:07:17:2a:96:fd:ad:00:95:fc:77:97:
c1:e0:2b:fd:a9:b1:ae:b7:04:53:1a:2f:15:21:93:
e2:2b:09:f2:9b:8c:6f:c4:37:95:57:b7:3f:81:2a:
e8:e1:55:7e:8a:e3:19:d5:f3:89:ff:4a:82:6c:fb:
b5:33:62:ad:be:48:7c:5b:c3:80:ba:15:41:7e:48:
aa:5a:ad:17:01:2a:ca:74:fd:34:b4:9b:37:eb:74:
4f:b6:01:10:95:93:78:d5:0e:06:f9:9e:42:eb:15:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8E:0F:23:98:FA:A5:0F:3F:8E:88:4F:78:CF:19:8E:85:7D:07:49
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Yo4PI5j6pQ8_johPeM8ZjoV9B0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.238.0/24
86.110.100.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f6:26:12:7f:b3:99:4a:56:75:61:3e:b1:42:9b:fd:ea:de:
6e:96:44:ec:e2:d1:01:91:c6:3f:0d:c7:1d:d7:1e:ab:9e:cf:
39:a9:1d:53:d1:74:c2:f2:77:e9:0e:ae:8e:c5:ac:64:57:e2:
16:14:b0:0f:cb:0e:ad:68:ea:31:95:43:99:bf:d8:4e:cb:84:
24:ce:58:d5:4a:35:36:5d:f4:db:ed:05:bc:5f:17:a0:26:23:
84:3a:50:7e:00:1e:3a:26:4f:70:02:07:15:34:5c:ed:5a:73:
ab:15:12:d2:6e:76:e0:4a:1c:66:55:10:2c:8d:20:85:57:9b:
a6:6b:87:f6:cd:61:8c:2c:4d:f1:f1:4b:3e:37:3e:f2:5c:96:
7b:62:3c:ed:70:ab:13:26:5f:a7:2b:fc:22:81:31:81:24:00:
bb:89:1d:dd:cd:4a:b8:9d:b0:c7:64:b1:06:0d:db:ca:ff:ee:
02:3f:2a:6f:98:78:49:11:3e:4a:7e:d8:48:06:91:44:6d:51:
f8:07:8a:70:a1:11:e4:24:66:d5:1a:92:9d:23:4e:9e:cc:ef:
1f:7a:ad:b5:11:61:14:b9:9d:86:3b:1d:32:e3:54:b5:27:b1:
36:c4:69:d4:8f:05:0e:03:5d:13:11:95:fe:e9:81:27:5f:2e:
15:ad:ed:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org