Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/E-ODSE9T2HQMuhqMh23ibEi5DtA.roa
File: E-ODSE9T2HQMuhqMh23ibEi5DtA.roa (raw, json)
Hash identifier: 9NFLUF5lDorchpL05TctiJmYmDzFToD4fy/ZzUYT+vE=
Subject key identifier: 13:E3:83:48:4F:53:D8:74:0C:BA:1A:8C:87:6D:E2:6C:48:B9:0E:D0
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0183A7CA92DD721928780D9ED9822189FC99
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/E-ODSE9T2HQMuhqMh23ibEi5DtA.roa
Signing time: Wed 05 Oct 2022 10:56:54 +0000
ROA not before: Wed 05 Oct 2022 10:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203182
IP address blocks: 85.187.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:ca:92:dd:72:19:28:78:0d:9e:d9:82:21:89:fc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Oct 5 10:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13e383484f53d8740cba1a8c876de26c48b90ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:e2:aa:d6:1b:07:f1:74:5e:d2:f5:57:72:
44:0b:f4:3f:dc:35:d3:c3:8a:d3:ee:ce:e8:ce:eb:
8e:73:00:8c:39:41:1c:16:e8:62:06:2a:09:73:66:
d0:66:fb:7d:29:8d:a2:28:43:6c:12:81:a5:cf:b3:
e5:61:6a:02:9a:80:28:88:a5:60:e3:01:56:95:92:
ac:15:35:3b:a7:fd:6e:38:40:e4:7a:e4:78:24:57:
67:28:4b:4a:e7:b5:5b:ba:03:fa:fa:8a:b2:e4:41:
df:86:69:5b:4e:1e:cb:6d:a7:f2:f4:f5:26:e4:96:
43:c2:52:02:83:df:80:98:9f:03:2d:f3:8a:f4:e3:
2e:c8:b9:63:11:02:51:e4:28:a4:05:bb:c4:b9:64:
23:e1:c6:07:cd:bb:59:b2:cd:d3:bb:e2:5b:ac:e1:
97:9e:d1:b0:30:7f:f7:11:7d:16:57:e9:35:30:c2:
b6:a9:a3:b7:67:94:61:cf:65:b5:d1:3a:ac:d2:f5:
a3:be:30:09:12:35:32:ec:e1:cb:a4:e9:48:6d:5e:
62:94:6c:1a:d1:84:9f:c9:65:a8:ad:e0:14:3b:cf:
0d:f6:bc:ca:63:a2:50:98:cf:4e:8c:dd:34:d4:4a:
33:6e:d4:ea:eb:68:1e:a1:3c:cc:62:b3:84:3c:36:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E3:83:48:4F:53:D8:74:0C:BA:1A:8C:87:6D:E2:6C:48:B9:0E:D0
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/E-ODSE9T2HQMuhqMh23ibEi5DtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2c:95:85:0e:d3:ed:25:75:95:34:5e:c7:a7:27:72:c7:79:
83:f7:a9:b4:b7:d8:b6:59:2e:f6:51:4e:21:e4:ce:ad:a7:18:
fc:63:a2:af:b3:3a:79:78:d0:a7:b6:15:88:24:90:a4:92:cf:
5d:a9:b0:5e:7d:fb:14:0a:1b:bf:78:23:51:3e:e5:04:f2:b0:
fb:85:04:cb:d2:6f:25:17:a2:cf:ab:3b:39:22:56:0f:a2:a1:
88:27:e5:95:68:2e:ba:91:88:ac:00:0e:77:75:55:ad:07:31:
fa:04:a7:5e:b2:b1:d2:15:49:3c:04:81:31:3f:a3:d8:42:0f:
2d:56:3d:82:1d:ff:c0:81:3c:1b:12:b0:76:6e:0a:2c:e1:0a:
41:55:c6:17:67:e6:04:61:c2:78:2a:ea:62:86:90:84:f3:57:
6c:11:7a:e4:e7:f6:eb:0e:e2:d3:49:58:f2:0f:45:10:72:2d:
a8:66:c2:47:43:24:b8:4f:58:c9:82:e9:1d:1d:71:f2:9c:58:
46:cc:f1:73:5e:b9:39:40:65:59:2e:3d:e1:35:71:45:1e:fb:
fe:aa:6c:bc:ec:27:5b:3b:b7:5c:89:31:b1:35:fc:9b:a3:f0:
35:54:de:fd:25:01:51:24:79:ba:85:e1:97:0d:bc:e9:32:68:
f4:b1:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org