Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/sDPCRdSM9f5SqjnHBufgZKNJIVM.roa
File: sDPCRdSM9f5SqjnHBufgZKNJIVM.roa (raw, json)
Hash identifier: /6iOKmv8waSPzoLxYBhvOgXAfaMYCxMfZ46jMMcRFeE=
Subject key identifier: B0:33:C2:45:D4:8C:F5:FE:52:AA:39:C7:06:E7:E0:64:A3:49:21:53
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A925A2F
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/sDPCRdSM9f5SqjnHBufgZKNJIVM.roa
Signing time: Sat 01 Jan 2022 16:07:20 +0000
ROA not before: Sat 01 Jan 2022 16:07:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208322
IP address blocks: 85.187.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177363503 (0xa925a2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b033c245d48cf5fe52aa39c706e7e064a3492153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:03:5d:97:a2:0c:a2:1e:e4:e8:64:83:b4:
62:da:58:54:96:5d:62:16:e0:de:7f:ba:57:bf:69:
58:b2:07:2c:67:d6:d7:90:10:c1:b0:ac:e9:2f:bc:
85:84:8f:b7:fe:f0:0b:7a:ed:1e:4d:ba:1e:3b:ec:
44:d1:ce:f3:75:34:f1:74:51:70:f4:cf:5a:61:23:
95:3d:06:ce:a3:36:c8:a5:06:61:a8:2d:83:e9:ea:
60:fa:ca:63:fa:ea:ae:70:08:e7:59:cf:c7:94:25:
f9:28:55:3f:b2:b7:f0:78:99:b2:47:8d:4f:2e:94:
da:2c:51:c8:bc:9e:8b:e0:9e:11:1d:c8:50:ac:b3:
24:d0:27:6c:a1:87:3e:ba:6d:2b:7d:76:c2:4d:b8:
bb:af:a3:98:60:72:cc:3a:a7:a5:46:33:e9:95:6c:
25:90:e8:73:55:02:a5:77:76:77:72:e2:c7:a8:7d:
67:53:06:a2:58:60:08:e4:4d:16:d3:a2:7e:77:3a:
01:57:e8:97:f3:4d:1e:17:76:42:69:e8:81:1a:21:
54:f9:e9:8d:4a:95:7e:30:d2:8a:bd:18:58:c2:86:
6e:07:09:2d:10:1c:6f:8c:cd:ae:ff:b2:b7:7e:e9:
9b:fb:bb:74:53:8b:df:92:ad:80:d2:8d:2a:45:41:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:33:C2:45:D4:8C:F5:FE:52:AA:39:C7:06:E7:E0:64:A3:49:21:53
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/sDPCRdSM9f5SqjnHBufgZKNJIVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.44.0/24
Signature Algorithm: sha256WithRSAEncryption
82:22:b9:68:2d:36:32:08:8f:2b:5c:3b:5e:b9:6f:9f:ef:3a:
ae:97:33:7a:61:9b:61:d0:4f:a8:21:de:e2:2f:f9:b5:b0:eb:
3b:4e:7b:dc:4d:73:4f:d6:b4:f3:ae:93:e9:e4:a8:f8:af:4c:
af:a1:bc:15:48:20:0d:86:79:03:ba:9d:de:f4:35:43:8c:0c:
88:27:8c:c1:c1:cb:83:4f:3a:94:79:09:2f:8d:82:e2:14:29:
a2:cc:d1:9f:44:02:56:58:56:74:f9:0c:f6:fc:31:0b:5e:ef:
fe:94:a0:52:86:bd:12:81:17:37:6d:6d:6d:0d:88:a8:44:74:
10:ae:ce:3a:bc:c5:83:bf:25:0c:e9:9d:f6:59:e4:cb:22:84:
7c:d1:6e:31:8f:d6:9b:e4:fa:19:68:02:19:a1:6a:5b:81:2e:
56:1f:1c:31:4c:8e:e9:76:00:5d:6b:4d:e9:6d:d5:e8:e8:c2:
24:04:4a:d0:eb:63:a7:5d:a0:ed:67:bc:b8:57:04:8d:42:dd:
29:6d:13:3d:b8:87:05:8e:7a:75:29:4d:0c:4f:ce:47:19:34:
41:8c:43:ee:bd:bb:10:87:23:df:9f:83:df:4f:b1:6d:7a:98:
8b:64:dd:32:41:93:95:b2:4a:75:b3:0e:c7:a3:0b:f4:f4:35:
a0:ea:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org