Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7VopCdn9fe11Pn1Ie4E2GqRHIMk.roa
File: 7VopCdn9fe11Pn1Ie4E2GqRHIMk.roa (raw, json)
Hash identifier: Yka/tYi1WryVnEz332aQu5wKv0r3auWziSp8OOmgSQQ=
Subject key identifier: ED:5A:29:09:D9:FD:7D:ED:75:3E:7D:48:7B:81:36:1A:A4:47:20:C9
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A79DC2B
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7VopCdn9fe11Pn1Ie4E2GqRHIMk.roa
Signing time: Sat 01 Jan 2022 16:07:07 +0000
ROA not before: Sat 01 Jan 2022 16:07:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45007
IP address blocks: 85.187.45.0/24 maxlen: 24
185.242.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175758379 (0xa79dc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed5a2909d9fd7ded753e7d487b81361aa44720c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:f3:e2:aa:cb:41:fa:4c:57:c4:90:cd:e2:
de:13:a0:fc:0c:28:5b:95:90:fe:5a:28:8b:57:d8:
b2:48:e3:2b:f5:54:19:72:9e:9d:3c:ac:83:1a:ef:
6e:a9:29:9c:2a:e5:21:de:fc:d1:73:0d:26:1e:6d:
30:a1:16:f9:01:03:09:76:a5:82:d4:e3:65:d7:6f:
e5:00:c3:5a:51:c6:8d:94:80:ba:d5:f5:e4:9c:d5:
ec:35:95:91:1f:e2:d8:32:d0:4d:86:c3:93:b8:c1:
24:7a:2e:ac:1d:67:71:ed:08:58:8f:9f:cc:ef:c4:
53:05:21:24:08:16:2c:41:76:9c:bf:cb:14:70:ee:
35:9c:82:04:b8:63:00:ad:6f:5e:fb:9e:5e:e7:1e:
97:96:1f:fa:7c:c6:1c:95:1d:3e:e2:90:e7:0b:b2:
70:1a:c5:4f:f2:0b:2c:9f:a7:e8:c8:05:2d:06:24:
72:27:1e:30:0b:5f:a7:c2:4d:73:af:ae:a0:80:a3:
4e:51:3a:54:22:be:48:f1:f1:d5:f4:f1:14:62:9d:
9f:67:48:53:ad:af:c6:3b:89:58:d4:26:17:bf:9b:
24:17:f0:36:06:95:8c:ab:33:00:81:8a:9a:8c:c7:
d9:49:a5:62:63:71:80:c0:a3:4f:98:e2:4d:62:95:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5A:29:09:D9:FD:7D:ED:75:3E:7D:48:7B:81:36:1A:A4:47:20:C9
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7VopCdn9fe11Pn1Ie4E2GqRHIMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.45.0/24
185.242.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c7:8a:91:48:2f:a5:83:24:e2:29:f1:75:3b:90:4c:fd:36:
b9:af:33:50:f0:6c:e5:8f:df:c2:a3:ef:e5:6c:0b:5e:67:a7:
08:70:87:3b:9e:55:c5:c8:c6:0b:11:28:99:40:cd:f6:64:a6:
98:47:6f:a8:08:92:53:a5:37:5f:c4:40:23:0a:39:91:2b:f7:
5e:e9:4d:90:11:c9:0f:74:2c:f5:4d:c9:d0:01:ae:c5:b6:03:
58:51:87:c4:9d:e5:7f:3b:69:e1:d9:4a:bd:14:2f:24:8d:09:
a2:c2:ce:6c:e5:02:21:1d:42:fe:aa:ab:37:ba:cb:9b:12:50:
8f:5a:79:e2:7c:40:6f:68:95:82:83:9b:bd:22:af:18:7d:81:
2a:85:19:33:b8:f5:65:83:80:51:2e:cc:45:6e:17:b8:8d:60:
ee:5e:75:c8:cc:8f:2f:de:0a:b4:ee:b6:18:d2:c4:82:9a:4c:
73:fb:c9:0a:d9:97:e0:88:2b:bb:ad:de:fb:24:64:e4:9e:19:
70:40:70:59:5e:e8:d6:03:d0:cc:d2:d3:a3:10:8a:45:46:15:
f1:56:58:79:e4:05:29:b9:7e:be:6c:c8:11:f0:e7:a8:01:ed:
54:48:e7:89:e9:a5:71:3c:9a:65:a9:7e:ec:cc:62:10:2a:33:
1d:da:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org