Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wFbAnhCSq__ypSW23oQI4jPVXOU.roa
File: wFbAnhCSq__ypSW23oQI4jPVXOU.roa (raw, json)
Hash identifier: qpD0efS3SZRFmvWgXOM3jZQKmzJ/jZYYxmbobh+nXNg=
Subject key identifier: C0:56:C0:9E:10:92:AB:FF:F2:A5:25:B6:DE:84:08:E2:33:D5:5C:E5
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A7CAC5A
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wFbAnhCSq__ypSW23oQI4jPVXOU.roa
Signing time: Sat 01 Jan 2022 16:07:08 +0000
ROA not before: Sat 01 Jan 2022 16:07:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49147
IP address blocks: 85.187.0.0/24 maxlen: 24
85.187.5.0/24 maxlen: 24
85.187.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175942746 (0xa7cac5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c056c09e1092abfff2a525b6de8408e233d55ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:09:30:c3:c9:d8:16:24:71:1b:3f:9f:07:
7e:b6:d1:f0:3c:12:78:4b:b9:ef:c6:7a:2e:ff:b8:
66:5a:59:86:17:f8:02:d1:51:d3:fd:70:13:4c:5f:
2c:ea:5b:65:2e:b5:3c:e0:c0:f7:fe:70:50:d0:2e:
86:2a:d4:7a:b8:5c:0c:3b:01:a3:57:2a:18:23:bc:
b8:2c:1e:d0:92:6b:70:01:8f:c9:52:c8:5d:ac:70:
ec:b7:4a:69:0f:c6:66:0a:a9:cc:7c:db:51:6e:35:
d1:58:b8:e2:00:e0:e4:6f:14:d0:83:5d:11:98:20:
5e:c6:ef:af:5c:79:a8:5d:e7:02:08:14:70:32:32:
88:55:8a:88:d7:18:c2:95:af:a3:ab:d8:83:e3:1b:
b7:29:c1:87:77:f2:49:38:c0:b9:68:dc:ed:cf:ad:
cc:a5:7f:d8:18:78:6f:30:1f:0d:cd:bb:16:6b:c0:
e0:00:f2:8f:ab:d8:18:8b:68:7d:a4:d2:68:9c:ef:
ad:41:0a:b4:31:a8:8b:34:24:ce:d1:f0:75:01:e2:
50:f4:06:04:7b:c2:c1:a4:20:e5:2b:0e:f4:5e:fd:
61:88:34:c0:96:5f:ee:e3:59:7c:35:8f:f9:b6:1c:
f9:a6:c1:6e:13:30:07:20:4e:8e:a8:26:ec:4d:92:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:C0:9E:10:92:AB:FF:F2:A5:25:B6:DE:84:08:E2:33:D5:5C:E5
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wFbAnhCSq__ypSW23oQI4jPVXOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.0.0/24
85.187.5.0/24
85.187.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9e:05:e2:75:99:ce:a2:68:c2:9f:55:44:97:61:60:23:01:
c5:47:94:a2:47:04:6a:2b:cf:13:97:d5:0f:dd:4b:c9:0c:64:
dd:70:ae:41:81:f2:01:3f:4e:69:49:ef:63:3c:8c:a7:f0:78:
6c:58:03:cd:56:c4:11:1d:ef:4c:ad:79:bd:0f:2b:f7:de:ab:
a9:fd:e3:e1:07:ca:0b:df:d2:95:3b:10:16:83:75:ec:49:77:
c9:25:11:67:2c:11:f3:a9:a5:2b:0a:f5:20:a5:af:1e:8c:74:
d9:2a:84:0b:aa:fc:c6:c1:2a:95:8a:bf:a5:53:22:c1:0b:36:
59:3b:85:61:af:0a:c7:93:44:32:03:07:7b:a4:ac:5b:9b:26:
1a:0e:64:95:6c:42:bc:99:d9:dd:1f:39:c9:02:4b:76:be:70:
23:65:86:86:5d:0c:7d:ee:8e:97:79:2a:ba:eb:e9:c1:21:38:
8b:da:e6:f7:fd:77:52:a0:bc:0e:50:08:88:2e:b7:d9:19:c2:
70:7f:5f:1c:34:c3:7d:22:10:ca:0c:af:3c:fc:fe:27:45:c3:
7a:04:e9:05:fb:22:6a:c0:46:33:6c:e0:2e:f4:b1:a9:ea:f9:
88:15:22:ed:c3:80:a5:71:78:b3:ec:54:80:f8:2e:16:31:a0:
0c:57:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org