Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/QZbPJe_rIaS-Fr2w5VICRRVxjlI.roa
File: QZbPJe_rIaS-Fr2w5VICRRVxjlI.roa (raw, json)
Hash identifier: lm7qxdRFuhzJrvrnI/fcGVmVVEMd8Z0E9wtWyduyvzo=
Subject key identifier: 41:96:CF:25:EF:EB:21:A4:BE:16:BD:B0:E5:52:02:45:15:71:8E:52
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0ADDD5B6
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/QZbPJe_rIaS-Fr2w5VICRRVxjlI.roa
Signing time: Fri 21 Jan 2022 12:31:32 +0000
ROA not before: Fri 21 Jan 2022 12:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60182
IP address blocks: 85.187.233.0/24 maxlen: 24
85.187.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182310326 (0xaddd5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 21 12:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4196cf25efeb21a4be16bdb0e552024515718e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:e7:e3:97:2c:3d:db:97:d4:52:c3:7d:72:
ba:52:1d:fb:f7:5b:66:59:68:41:f5:75:4d:e7:33:
33:57:0a:b8:90:5f:63:49:f2:ee:15:c2:5e:ea:79:
67:81:0e:7d:4e:e0:5b:17:1d:67:50:41:55:4a:1c:
4c:5a:b3:ce:3d:df:c4:e0:98:72:47:bb:e2:32:40:
d3:d4:e8:0c:80:bb:16:91:82:2c:5b:8c:e8:f5:19:
13:2f:0d:77:a1:71:35:db:65:63:9e:db:b5:76:17:
d0:61:15:1d:6c:e6:d5:1e:c4:09:e9:33:4d:bc:41:
b4:bb:56:35:71:4d:31:a1:26:e4:78:0e:c9:49:0d:
c6:41:20:9f:24:71:00:57:8d:be:e3:75:ed:79:84:
95:64:5e:51:bc:c8:94:83:35:a9:c1:8e:b8:86:4e:
03:3f:b8:93:d0:36:a7:27:91:79:6d:d9:a7:20:c3:
1e:d5:f2:cf:68:3d:ed:6d:32:28:59:d2:e5:7f:ad:
87:11:fe:3b:e5:e3:91:c4:e4:29:fc:96:57:19:22:
26:a1:9b:5d:e2:7b:eb:3c:23:75:03:8d:f9:e4:0b:
a7:f9:0b:a6:24:35:95:72:48:88:da:c5:7b:24:ec:
8c:9e:4f:f5:35:4e:e5:63:2c:be:69:33:54:f1:a0:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:CF:25:EF:EB:21:A4:BE:16:BD:B0:E5:52:02:45:15:71:8E:52
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/QZbPJe_rIaS-Fr2w5VICRRVxjlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.233.0/24
85.187.242.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c6:19:ed:30:b4:bb:2a:ab:57:de:e1:fa:ee:e2:35:3e:eb:
23:0c:b0:f6:56:74:04:51:5d:b5:7c:30:6b:11:af:00:b4:cc:
e3:42:db:16:0e:3d:f9:23:f7:2e:1f:44:62:7f:4c:d4:90:6d:
53:60:1b:11:e7:30:34:af:90:2a:07:e2:db:f0:51:be:2c:05:
1a:68:0f:17:a6:52:a8:c9:f3:f1:b9:9e:7c:c0:93:26:fe:38:
fa:bb:1d:5e:0a:05:59:ba:68:12:50:03:b5:10:e7:ca:66:a1:
0b:bf:be:b7:17:57:68:c3:ec:b1:9e:da:a8:bf:2b:86:36:17:
30:cb:8a:41:f3:3d:0d:98:6b:4f:89:50:4f:06:b8:54:dc:1f:
ea:40:d7:e1:ba:68:79:07:9e:2f:b1:93:d9:c9:e5:58:1c:16:
19:db:f8:c7:f2:8b:76:af:fb:3b:a1:05:00:c6:9d:5c:05:38:
e6:10:be:0f:89:85:86:8e:44:e0:20:b3:83:87:a4:90:df:51:
73:32:c0:43:c2:f4:3f:a7:45:2d:06:96:c9:fe:d2:66:e0:d2:
59:c6:51:9a:63:a3:83:ff:cd:76:d1:6f:e2:dd:3f:d6:55:4f:
6a:3b:38:83:86:0c:7b:dd:11:6f:8f:8b:cf:73:4c:33:01:aa:
f6:62:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org