Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/o_19uTvbz0WDTItRav_ScnmCDi0.roa
File: o_19uTvbz0WDTItRav_ScnmCDi0.roa (raw, json)
Hash identifier: EzEWggB6MQ5LM1O+ONfn/DLRtN3AlR1YYtNa2hQuImM=
Subject key identifier: A3:FD:7D:B9:3B:DB:CF:45:83:4C:8B:51:6A:FF:D2:72:79:82:0E:2D
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16C9D511
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/o_19uTvbz0WDTItRav_ScnmCDi0.roa
Signing time: Sat 01 Jan 2022 02:51:19 +0000
ROA not before: Sat 01 Jan 2022 02:51:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51783
IP address blocks: 85.143.168.0/22 maxlen: 22
85.143.188.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382326033 (0x16c9d511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3fd7db93bdbcf45834c8b516affd27279820e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:0f:f2:b5:2b:49:45:ad:82:85:35:3b:d6:
d8:6e:51:c2:9f:b0:0a:f9:33:6a:2b:1d:5b:bb:e2:
a6:78:97:43:6b:7f:ed:87:4e:1e:e4:c6:66:ef:79:
ed:e6:fc:5d:56:af:11:e8:57:49:c4:e6:41:0e:2b:
8c:c6:24:3a:03:b5:16:e3:d0:5f:5a:42:77:8f:e2:
31:ac:73:cd:d0:c1:14:3c:cf:43:79:de:99:a0:11:
b0:a5:93:9a:dd:f8:22:8d:f5:54:ab:f8:96:55:54:
45:ef:c0:0e:33:66:73:31:f4:78:9e:df:86:ab:97:
4f:6e:d4:5f:f3:ac:d4:78:7d:d8:f4:47:89:e9:cb:
af:e9:ce:fb:ba:1b:d4:ea:40:ef:fc:b7:e9:45:20:
34:e9:b1:45:22:8b:49:1d:01:98:74:46:96:41:60:
03:e7:be:52:df:15:b3:77:6d:04:70:a0:76:f2:65:
8e:ac:14:b3:ed:74:d5:d5:15:56:05:2b:7a:47:e6:
15:08:82:62:83:f0:33:60:12:3c:ad:0d:33:be:82:
65:98:6d:15:2d:61:28:65:0f:e4:8e:44:80:04:91:
b1:2c:e3:59:3e:be:9f:97:01:53:62:75:63:7e:f8:
5a:fb:ec:56:cf:e2:c5:91:1d:bb:a1:3d:25:e1:d9:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FD:7D:B9:3B:DB:CF:45:83:4C:8B:51:6A:FF:D2:72:79:82:0E:2D
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/o_19uTvbz0WDTItRav_ScnmCDi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.168.0/22
85.143.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:3d:fd:92:b1:dd:f8:f8:2e:b1:4e:9f:ac:d7:fe:5f:2a:56:
b3:11:af:9d:fd:50:d6:38:79:44:a3:f5:16:5a:27:e1:ae:44:
a2:1e:71:4c:92:ed:6e:da:51:f7:32:71:6a:bc:23:53:32:10:
06:5d:e4:7b:9a:0c:d6:f7:7a:df:e0:9d:fa:1a:e6:b6:14:eb:
83:9d:ce:6c:7a:0b:16:ee:04:5e:92:00:23:2c:5e:9b:d7:f3:
c6:c9:09:30:c1:77:21:e0:c8:34:a6:d8:f1:41:6f:1c:98:46:
a8:68:ab:8e:b8:ac:a0:9e:47:db:c3:b9:1a:1b:5e:4a:c3:f1:
13:6a:05:8c:29:a2:8c:1e:12:ce:62:c8:f6:16:3a:0e:08:c6:
08:1b:b1:af:a7:0e:1c:ba:51:83:cf:f8:35:92:9e:9b:e5:17:
2c:75:60:f8:49:11:09:6a:40:31:9f:c3:c9:35:f8:b7:42:a2:
bd:51:95:70:71:cd:14:5e:45:6c:29:4e:3d:a5:50:bc:a9:a9:
d7:fd:34:2d:3f:e6:3f:97:d0:c2:8c:9a:d2:05:c0:8b:58:c2:
dc:a2:f6:ac:06:28:63:1d:67:80:3b:d9:7a:61:c4:d0:b1:f9:
52:6d:28:85:c9:77:8a:11:9b:39:14:a3:a0:1e:10:e1:fb:e5:
b4:1e:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org