Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iZfvUt7pI0d_ofQVqbmIliPhrM0.roa
File: iZfvUt7pI0d_ofQVqbmIliPhrM0.roa (raw, json)
Hash identifier: qC8KUjtk7HfjR45AVSM6fed106tYF3CMZeOOU0+Y//w=
Subject key identifier: 89:97:EF:52:DE:E9:23:47:7F:A1:F4:15:A9:B9:88:96:23:E1:AC:CD
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A86AA22
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iZfvUt7pI0d_ofQVqbmIliPhrM0.roa
Signing time: Sat 01 Jan 2022 16:07:15 +0000
ROA not before: Sat 01 Jan 2022 16:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197769
IP address blocks: 85.187.255.0/24 maxlen: 24
85.187.254.0/24 maxlen: 24
85.187.253.0/24 maxlen: 24
85.187.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176597538 (0xa86aa22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8997ef52dee923477fa1f415a9b9889623e1accd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:f3:a3:0e:7a:99:6e:b3:62:34:10:f4:d7:
90:94:13:ce:f5:aa:2b:6a:fa:14:a9:34:b1:28:28:
0e:14:7a:a5:04:b9:e6:2f:9f:b7:9c:39:5f:b6:eb:
ad:a1:a7:1c:2c:f2:6b:81:9a:57:e9:b3:9e:7f:b0:
49:f4:6e:ed:90:83:21:f7:f4:66:ba:2a:65:b7:b9:
d7:e7:87:71:76:25:34:16:59:74:ed:6b:56:a3:dc:
c1:c6:e8:94:70:06:ac:11:f1:06:05:85:b3:32:ae:
0e:1b:b9:5b:8a:36:5c:48:15:4c:35:cd:1b:11:c0:
a1:18:a1:d2:eb:21:38:9a:d7:d0:a0:bf:20:09:b1:
32:ef:aa:65:8c:5a:de:f5:df:67:80:bd:72:8e:14:
57:9b:41:13:3d:ae:b3:5c:0f:b3:cc:d2:8e:48:34:
b7:c3:77:44:07:44:57:5d:f0:59:68:da:c9:3f:0b:
42:3c:f2:1c:d4:b2:1a:19:03:aa:71:74:4a:6a:d2:
4b:29:30:6e:19:4e:4f:24:b0:45:e2:0d:db:6f:7c:
e1:cb:cb:60:a2:6d:77:75:22:2b:03:8c:cf:72:f3:
6e:1b:85:d8:18:ae:ad:46:87:ab:8b:f6:af:e3:e1:
91:3b:33:f7:48:e3:74:f8:de:47:2c:ca:27:48:21:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:97:EF:52:DE:E9:23:47:7F:A1:F4:15:A9:B9:88:96:23:E1:AC:CD
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iZfvUt7pI0d_ofQVqbmIliPhrM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:d8:5c:a3:d9:bc:5c:fd:19:01:76:9e:e5:7a:79:92:14:ae:
4d:96:be:05:18:6c:19:02:41:52:4e:06:d4:00:c3:30:1e:7a:
a4:f4:c3:b5:e6:ca:90:26:8d:64:bb:62:89:74:b4:e2:a7:8c:
0b:d4:41:ac:21:98:f7:cd:b9:cd:43:e0:26:3f:fd:f4:93:df:
d7:10:7f:9c:f2:37:ef:15:7c:74:99:08:d7:27:4c:5d:c5:f7:
1a:0f:62:35:c5:ce:9a:31:5e:b8:87:34:86:1a:68:4b:02:cd:
ad:cd:67:9b:84:28:d4:21:66:46:2a:6d:d2:e0:3b:62:5d:dd:
0d:d7:aa:b2:a1:6c:8c:cd:11:37:44:9e:c3:0c:ac:0f:c5:8d:
fe:75:0f:85:a4:69:2a:39:c3:b2:0a:ed:31:e8:76:b9:6f:c8:
fc:fd:37:69:bc:fd:d6:53:ec:f9:2d:69:78:72:88:1d:5a:61:
4e:51:07:7c:70:e9:7d:48:79:2f:18:60:2f:d8:b3:b3:2f:07:
c6:c0:ee:3f:79:a0:ed:da:4f:36:06:f9:0e:b3:db:b7:1e:a5:
aa:e6:5a:c9:f9:bb:7e:e5:8d:b8:3f:01:b8:f5:40:bb:8d:a4:
5a:5c:46:be:c9:dd:4e:e8:6e:2f:07:ef:32:a8:d9:43:ef:61:
24:1a:4c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org