Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/OPF7D3iFIJdQ--3I-pjqZzdVxvk.roa
File: OPF7D3iFIJdQ--3I-pjqZzdVxvk.roa (raw, json)
Hash identifier: NveNNaew5+BzQ4Ep/KSsxtQ5Hi54JULWwl4SIWc0DYg=
Subject key identifier: 38:F1:7B:0F:78:85:20:97:50:FB:ED:C8:FA:98:EA:67:37:55:C6:F9
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 15DDDC05
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/OPF7D3iFIJdQ--3I-pjqZzdVxvk.roa
Signing time: Sat 01 Jan 2022 04:03:58 +0000
ROA not before: Sat 01 Jan 2022 04:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 185.94.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366861317 (0x15dddc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jan 1 04:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38f17b0f7885209750fbedc8fa98ea673755c6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:bc:9f:09:a5:f1:5d:f2:47:6b:89:96:cc:
7c:fe:ed:13:12:14:20:80:82:1a:6b:b5:34:1b:79:
e0:d1:bb:f8:dc:62:5b:75:52:31:75:ca:3a:2c:e7:
06:be:06:cb:84:08:0b:d5:e5:94:88:6f:0e:37:33:
aa:f0:04:b9:93:81:38:1d:bf:b4:36:a6:ef:3d:83:
a7:17:cf:7f:15:d7:cc:43:50:91:41:a1:55:b6:47:
71:9d:65:91:23:15:d4:5c:b6:30:63:f1:45:b8:07:
50:8a:14:eb:77:cf:a9:f9:9c:5c:af:07:63:b4:f2:
0e:99:98:c2:a0:08:ad:12:cb:03:8b:ef:1c:2e:f2:
69:da:70:5f:fa:92:05:04:8a:df:96:8b:fa:8b:a1:
4e:e4:c1:82:05:4e:35:7a:48:b0:bf:f9:f2:ef:20:
19:40:2e:d4:8b:4f:a9:33:28:4e:ae:4d:f2:ca:f4:
3f:c6:5a:02:e6:97:e5:4a:b5:8e:80:af:bd:dd:98:
84:22:af:d2:7e:1e:cb:ea:4d:75:5e:9e:40:53:f4:
af:63:5b:e0:c1:64:90:1a:4f:91:3b:65:5b:e3:33:
ae:5e:4b:a5:46:fc:a5:82:52:ed:d6:a6:76:71:cc:
da:7e:3a:61:b2:78:9d:7a:37:5a:8f:0e:2f:0f:58:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:7B:0F:78:85:20:97:50:FB:ED:C8:FA:98:EA:67:37:55:C6:F9
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/OPF7D3iFIJdQ--3I-pjqZzdVxvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:de:50:c1:17:8e:c7:c5:e8:b4:51:29:85:a2:20:6c:b1:26:
a2:dd:41:c9:73:84:46:f7:fc:e7:24:5c:4a:19:a5:31:a6:84:
e2:28:62:ff:b4:49:2c:e0:cd:a1:0c:e4:c3:d5:63:12:36:e9:
e7:3f:7e:f1:27:70:a6:26:d4:58:84:da:f8:5c:82:79:ac:8d:
32:77:4a:93:84:21:f4:de:28:82:41:12:c4:c4:b0:b4:b4:e9:
05:12:89:89:fd:4b:1c:7c:cb:c7:3b:50:75:55:6b:bc:09:96:
7a:82:35:ba:43:50:d8:3a:45:9d:0b:99:cf:f5:08:4b:d3:40:
ab:0f:5e:26:8e:8f:74:d5:e5:db:d0:ac:79:5a:86:f4:6c:cf:
b1:d1:e1:4a:5d:56:92:0f:14:b5:d9:8a:f6:0a:44:62:2b:36:
c2:34:05:74:18:3c:20:30:11:fd:47:6c:05:9c:a3:4c:0b:19:
65:80:3f:53:de:87:70:71:c3:5a:71:e0:2b:a8:bd:4f:d7:50:
a1:da:ab:58:57:b4:e6:b3:62:e0:f6:1d:6d:1b:9e:d3:b7:e5:
fb:31:89:8f:50:6b:93:82:06:e3:3d:58:d5:30:f7:14:e2:de:
ed:f3:54:65:35:c1:73:3a:26:83:89:bc:39:f8:1b:d0:76:15:
0b:1b:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:03 2024 by rpki-client on console-ams.rpki-client.org