Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/hfuM4hUG0Gs0PRYHanMY3Ew8YcE.roa
File: hfuM4hUG0Gs0PRYHanMY3Ew8YcE.roa (raw, json)
Hash identifier: 8qKc2A1k64QktsiAyXWyWVpUCHJ8MIudSIcPuhXjgmM=
Subject key identifier: 85:FB:8C:E2:15:06:D0:6B:34:3D:16:07:6A:73:18:DC:4C:3C:61:C1
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16D38FEE
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/hfuM4hUG0Gs0PRYHanMY3Ew8YcE.roa
Signing time: Sat 01 Jan 2022 02:51:26 +0000
ROA not before: Sat 01 Jan 2022 02:51:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207184
IP address blocks: 85.143.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382963694 (0x16d38fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85fb8ce21506d06b343d16076a7318dc4c3c61c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:e7:95:52:8e:6b:f9:44:16:a8:18:64:2e:
6a:b5:3b:a3:63:97:b6:83:86:d4:7e:c5:0a:54:5e:
7a:11:67:22:01:ef:d6:d7:aa:b6:0e:62:cd:54:e1:
8e:97:d9:43:8d:f7:95:82:8e:b4:35:76:11:56:92:
c0:e0:a0:91:94:24:9d:f2:84:02:fb:63:82:00:28:
9c:44:09:ab:fa:1e:06:38:99:cd:09:c7:e8:35:d3:
81:df:16:d0:8a:f2:96:ae:c6:a8:aa:45:6a:de:be:
53:70:3f:6c:a8:fc:38:5f:e2:02:bb:52:5a:b6:91:
cd:fb:1c:47:14:b1:b8:6f:42:28:14:02:5b:8b:9a:
e5:2e:9b:53:a1:b4:fe:59:d9:bb:57:2a:ea:a0:d0:
a7:f3:62:08:2f:65:0f:51:55:a2:76:13:ec:5c:bf:
6c:d5:00:7c:73:ef:af:df:1a:c1:ca:9d:82:ac:ac:
82:3d:47:3c:1e:7a:fb:4a:8b:bc:56:96:70:b2:98:
e4:66:58:e2:12:9b:63:a7:49:20:28:d6:dd:f2:80:
66:ae:e1:93:7b:ee:56:b5:44:24:65:25:4c:24:d5:
27:7a:5b:8d:a6:64:04:2c:44:13:c3:c1:01:d6:a6:
2a:ba:d0:c3:65:21:35:45:b7:ea:19:1a:fe:8c:04:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:8C:E2:15:06:D0:6B:34:3D:16:07:6A:73:18:DC:4C:3C:61:C1
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/hfuM4hUG0Gs0PRYHanMY3Ew8YcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4d:e5:b7:cc:b8:e2:e1:7d:42:54:3a:89:35:e2:c8:47:cc:
17:9b:3e:3e:45:d6:05:b2:f7:e4:13:04:9c:4b:51:85:3d:87:
59:0f:fe:d8:a6:72:12:f7:08:95:a1:da:b6:3b:01:e5:e0:54:
f4:0a:60:50:1c:20:f0:9b:b3:f4:85:e5:d7:6b:b7:2e:d2:4c:
94:77:d7:be:0d:bd:9d:0f:14:75:93:6d:75:8a:a2:32:b7:73:
e7:47:5a:94:35:9c:fd:5d:a3:6c:94:4e:25:bd:6f:96:13:eb:
ce:f1:fb:a9:dd:ad:0d:54:02:1a:ff:e0:dc:44:ca:ed:08:a1:
f3:09:07:93:ab:6f:bd:47:c9:48:ed:6d:ee:6d:f8:25:ec:87:
b6:f6:9a:30:9a:a6:8e:f7:20:77:01:0c:6c:0d:54:ba:42:10:
aa:41:a1:7f:b7:cb:d8:c2:ca:f3:61:b6:9f:3d:c6:93:a9:42:
c6:7d:e1:9a:94:2b:2c:a7:b7:14:d1:0c:a1:44:ca:08:c5:c0:
4c:09:0d:ce:98:e1:d2:0c:4a:de:ce:72:98:f2:bf:e7:32:1e:
97:40:61:8a:95:7c:4f:fa:7b:dd:8c:bc:62:1b:97:ff:91:23:
02:33:3a:fa:76:b6:0e:fa:5b:7e:ce:1e:c4:59:7e:5a:75:b0:
ae:a0:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org