Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/8MGVx9sXtRPBgF_wxqNs2dhY_HU.roa
File: 8MGVx9sXtRPBgF_wxqNs2dhY_HU.roa (raw, json)
Hash identifier: lAvqLP1LfAqhihLAB6uPnRo4TEi6pjR1i6xzi+YT86M=
Subject key identifier: F0:C1:95:C7:DB:17:B5:13:C1:80:5F:F0:C6:A3:6C:D9:D8:58:FC:75
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 03DE1F70
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/8MGVx9sXtRPBgF_wxqNs2dhY_HU.roa
Signing time: Sat 01 Jan 2022 14:08:15 +0000
ROA not before: Sat 01 Jan 2022 14:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30781
IP address blocks: 185.85.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64888688 (0x3de1f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: Jan 1 14:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0c195c7db17b513c1805ff0c6a36cd9d858fc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:ad:7b:b9:77:1c:25:96:ae:1d:e5:2d:4c:
07:36:8c:cf:94:bb:05:02:a9:9c:98:85:ab:68:7e:
e2:85:ea:14:be:35:15:4f:84:a2:ca:ea:15:97:1a:
7e:69:a7:43:a5:64:36:8a:c7:cb:b6:ff:18:b9:d6:
ef:89:6f:e5:e0:3c:8b:75:55:b8:2d:9f:1b:20:bd:
cc:bf:86:e2:03:42:02:04:81:a4:d6:a3:3f:c1:56:
e3:86:e8:af:b2:27:ea:5d:63:f2:f6:33:0a:05:71:
08:42:42:ac:eb:0b:45:51:f8:70:7b:0b:32:79:79:
87:c3:82:ee:02:fb:d2:ce:27:d7:a3:c5:60:19:8d:
eb:3c:ac:d5:a4:ef:1b:b7:49:0a:75:7d:e3:99:67:
64:a2:fb:70:8b:50:e3:7a:c6:ef:a7:e9:16:30:34:
58:d6:46:1b:d4:92:e2:9d:0e:11:9e:35:84:f9:ac:
20:31:9f:44:f5:5f:8d:6c:f6:c3:2a:e4:30:9e:89:
f8:d1:01:83:7c:f8:04:d5:4c:39:6d:b8:b6:1c:c3:
e7:fa:17:59:6d:9b:c8:a3:d1:39:44:96:9d:6d:61:
f1:7e:39:72:63:db:fb:b1:a1:8a:f9:72:29:b4:ea:
ab:30:2a:d0:6d:02:73:ce:f1:62:7c:c8:50:4c:4e:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C1:95:C7:DB:17:B5:13:C1:80:5F:F0:C6:A3:6C:D9:D8:58:FC:75
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/8MGVx9sXtRPBgF_wxqNs2dhY_HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.234.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ae:02:1c:0f:d9:6b:b4:39:4c:2e:01:17:0d:82:b1:26:94:
02:0e:bf:61:64:d8:2c:e5:4d:2e:09:bb:81:cc:14:c7:0e:55:
38:e8:fe:6c:52:ad:4a:bb:24:35:ec:35:71:44:a4:2f:22:75:
92:0e:39:20:d1:54:32:ec:a4:d3:95:b6:05:53:b9:31:26:18:
20:09:aa:32:29:aa:24:d5:1a:d5:4d:0c:10:b1:59:7a:3c:69:
6d:25:aa:fe:1d:53:60:41:94:60:39:48:eb:28:64:ef:10:fc:
61:6b:6b:31:b9:ca:e6:26:4b:d7:dc:41:5a:f4:c2:29:76:92:
d8:c7:aa:f7:44:68:9f:6c:c0:14:fc:a4:cc:6b:bc:29:5d:0b:
24:f1:36:44:7c:21:c8:bf:ce:38:2c:e4:fe:5e:b8:71:ed:77:
96:67:51:e0:54:db:65:91:2b:c4:67:54:3a:48:2c:a9:1c:47:
c8:50:93:49:e8:2d:5d:0b:40:65:be:3a:44:95:1a:53:be:e6:
da:6b:3e:17:17:e0:75:b3:e5:0f:e4:22:f5:19:1a:f4:35:f7:
6d:97:b5:4d:42:3a:cf:9b:7d:b3:b5:cf:13:17:40:bf:48:b6:
f6:09:0a:b4:63:86:29:25:86:61:86:7e:16:99:2a:95:48:86:
9a:a9:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:42 2024 by rpki-client on console-fra.rpki-client.org