Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pV80p17zWOr1ybjKvZ36x3Sush0.roa
File: pV80p17zWOr1ybjKvZ36x3Sush0.roa (raw, json)
Hash identifier: p9KhWvGGG/hfqFd7aXBT+qhMUBWJ+EHe1r9vaEjK3DI=
Subject key identifier: A5:5F:34:A7:5E:F3:58:EA:F5:C9:B8:CA:BD:9D:FA:C7:74:AE:B2:1D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A8C7679
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pV80p17zWOr1ybjKvZ36x3Sush0.roa
Signing time: Sat 01 Jan 2022 16:07:17 +0000
ROA not before: Sat 01 Jan 2022 16:07:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203633
IP address blocks: 85.187.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176977529 (0xa8c7679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a55f34a75ef358eaf5c9b8cabd9dfac774aeb21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:57:08:f2:ab:7b:7e:fd:e2:c4:ec:2d:f3:17:
9e:64:6e:f6:61:61:a9:a5:57:3b:6a:82:18:dd:c6:
70:20:52:42:87:ed:9b:46:97:29:41:bc:84:79:bf:
fa:e3:71:4f:0a:18:47:b3:7d:a8:70:53:00:21:09:
7d:78:7b:c6:fb:fc:bb:41:80:87:43:e6:7a:bf:56:
bf:31:b9:dc:37:4d:91:c5:27:3d:84:24:be:01:da:
1f:4a:d4:4e:55:2e:33:a7:3d:d7:38:82:43:7a:5f:
ee:c1:39:9f:a9:f4:af:81:be:f1:4b:fc:07:18:77:
db:00:15:a2:81:2c:0e:30:8b:ea:fb:16:e2:73:5d:
9e:b4:0d:07:94:f2:8a:8e:81:ad:eb:f5:72:aa:c8:
1d:0e:ca:bf:ad:8d:88:8a:36:c6:0e:2c:2b:7b:50:
03:46:6e:3d:ba:34:41:24:a6:2a:e1:18:fe:1e:26:
45:51:32:c7:63:75:ec:ab:6d:d9:3f:7a:85:95:35:
10:e5:6f:ed:5f:68:9e:c5:75:65:97:83:22:4e:fb:
84:7e:e3:04:72:78:99:48:b3:d7:46:d5:c6:42:eb:
5b:d8:f2:5e:83:81:0e:54:d7:c1:d2:8c:a9:79:dd:
41:64:ef:0c:d5:32:00:39:c6:7d:0b:c0:7c:3a:6a:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:34:A7:5E:F3:58:EA:F5:C9:B8:CA:BD:9D:FA:C7:74:AE:B2:1D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pV80p17zWOr1ybjKvZ36x3Sush0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5e:e7:bd:e2:7f:4e:ee:1e:5b:1c:b0:08:e7:07:f4:06:8b:
80:b9:0a:8d:56:50:2c:05:47:06:64:3d:8f:bd:f7:0b:5a:c5:
c8:07:d1:e6:67:ec:80:63:06:87:38:ae:81:d5:8f:98:ac:73:
08:b4:80:a0:76:c4:d1:86:d6:8f:56:2e:bd:47:5e:47:7d:5b:
7e:77:2b:c5:56:99:8b:f5:6e:77:f9:61:3e:4f:66:5b:83:dc:
6d:5a:95:43:52:70:0b:14:7e:13:80:83:cc:ce:ef:10:33:7c:
4c:6d:5f:54:ba:d7:50:7b:63:e6:2e:1b:af:73:51:fb:90:51:
7a:5c:11:bd:d6:a5:f0:42:7c:46:e6:6f:9a:5a:e3:cf:db:ca:
70:5a:3e:de:62:db:de:4d:a8:fc:0e:44:77:6f:c5:0b:e8:66:
f4:02:4f:01:6e:98:0a:6e:0d:06:f6:ea:2d:eb:27:9e:4b:87:
15:f7:a7:9a:14:be:1c:7c:02:52:f3:4b:d9:89:6c:72:06:03:
d6:b3:26:e2:4b:6e:75:4a:35:45:c9:26:b2:b3:df:c6:6f:08:
1e:90:e0:17:7c:84:79:6f:58:da:ff:74:c1:a8:24:61:80:07:
56:02:80:5c:27:84:2b:e2:7e:f1:e6:11:43:82:29:ae:42:a6:
02:b1:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org