Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7ny5wYbRNTYnLEDcrqvzDcoa1tc.roa
File: 7ny5wYbRNTYnLEDcrqvzDcoa1tc.roa (raw, json)
Hash identifier: rAN1jgsp3Y6qs1rGZsCFfQWNj6VugtmjpoZJAHtl+us=
Subject key identifier: EE:7C:B9:C1:86:D1:35:36:27:2C:40:DC:AE:AB:F3:0D:CA:1A:D6:D7
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A8186B8
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7ny5wYbRNTYnLEDcrqvzDcoa1tc.roa
Signing time: Sat 01 Jan 2022 16:07:11 +0000
ROA not before: Sat 01 Jan 2022 16:07:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56606
IP address blocks: 85.187.40.0/24 maxlen: 24
85.187.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176260792 (0xa8186b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee7cb9c186d13536272c40dcaeabf30dca1ad6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:bf:f9:e2:19:3f:30:89:5b:e2:4a:34:8d:
41:2f:a8:0a:08:ee:3b:af:3e:27:8b:89:9b:20:7e:
25:ea:b4:11:3a:71:8a:99:be:78:af:f8:11:53:1b:
93:47:2b:7c:6e:a2:60:5b:2e:49:69:c8:8c:91:61:
20:94:44:cb:9b:6e:ef:9b:86:fa:81:24:6e:58:3d:
47:f6:fd:c2:74:87:39:c4:e8:45:2c:11:5e:08:2a:
b7:b9:78:4e:23:e9:94:0e:a2:45:a2:5b:56:e1:e8:
61:22:6a:64:29:73:5e:49:2f:b9:39:33:8f:f7:f1:
14:08:e3:b7:04:36:62:d1:60:4e:4d:41:d6:db:de:
af:ff:ff:aa:81:52:84:75:de:c3:86:ec:db:29:ae:
40:2d:52:2c:45:e7:2c:5b:49:62:e6:9d:66:42:2b:
7a:7e:8d:5a:c1:2c:75:e9:87:32:31:ff:9e:3b:61:
8a:80:5d:c6:75:cf:50:76:57:80:0c:66:1c:cb:61:
e2:7a:97:40:b2:07:61:d4:fd:a2:2f:13:0a:74:e4:
1b:d9:2c:75:2b:b0:6a:8b:95:e4:1f:e3:39:f3:19:
ff:c8:56:e6:df:0d:04:38:9e:4b:20:79:91:35:66:
71:5b:8a:68:21:e4:a1:d2:1a:b7:30:06:85:34:2d:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:B9:C1:86:D1:35:36:27:2C:40:DC:AE:AB:F3:0D:CA:1A:D6:D7
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7ny5wYbRNTYnLEDcrqvzDcoa1tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.7.0/24
85.187.40.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ea:8f:1a:4a:4d:b3:3e:25:64:09:2e:17:d2:39:f0:e8:33:
99:25:25:34:c5:f1:34:e2:e8:96:2b:e3:b1:68:b3:9f:1d:16:
9c:1e:82:0c:0e:a4:88:5e:f0:0a:28:c6:bb:f3:6c:2b:83:c5:
83:de:52:f8:25:4c:74:bd:62:cf:63:b6:a1:21:19:2f:2d:eb:
7d:c4:34:c9:22:87:81:38:38:94:7f:3f:18:db:08:de:9a:b6:
f4:45:1a:c3:fd:98:9c:b3:3e:16:cf:61:ea:f0:80:8e:06:3f:
02:df:6e:a2:e4:df:46:b2:bc:8d:66:77:69:de:02:7e:97:a4:
f6:17:f1:0b:53:05:87:5d:d8:10:27:3d:66:f3:c5:9d:67:51:
6e:02:f0:ae:07:bb:29:7b:13:fe:15:4d:45:c0:91:19:b9:51:
69:cd:9c:fe:33:5b:a9:bb:a6:90:3a:01:56:d4:70:7b:61:8e:
55:63:97:8d:58:78:ee:d6:b6:96:32:38:62:48:c7:bd:b4:2e:
c2:00:63:1f:2f:89:62:e5:aa:68:fd:01:ba:d8:fc:73:23:61:
f4:ba:99:a9:1e:95:f4:c3:81:c8:1a:f5:b4:34:78:6f:6d:c3:
21:01:4d:28:4e:a6:2d:b4:16:9a:ae:73:17:2a:05:dd:f8:92:
09:0e:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org