Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/he9DpI3mu7LIqaI2uRc5wqff7w4.roa
File: he9DpI3mu7LIqaI2uRc5wqff7w4.roa (raw, json)
Hash identifier: Zr1AU6qNgbI/Ypb4NqjK7/S1vqcRkFBwcVxWuaBV1Xw=
Subject key identifier: 85:EF:43:A4:8D:E6:BB:B2:C8:A9:A2:36:B9:17:39:C2:A7:DF:EF:0E
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 3513EAB3
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/he9DpI3mu7LIqaI2uRc5wqff7w4.roa
Signing time: Sat 01 Jan 2022 05:58:43 +0000
ROA not before: Sat 01 Jan 2022 05:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200296
IP address blocks: 5.56.135.0/24 maxlen: 24
79.143.85.0/24 maxlen: 24
87.236.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890497715 (0x3513eab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 05:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85ef43a48de6bbb2c8a9a236b91739c2a7dfef0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:85:ab:e0:00:98:e5:c8:4c:42:ac:7f:98:
27:64:a3:00:70:2d:31:b2:d9:e0:61:81:35:0d:cd:
fb:18:e7:60:7e:0e:ee:4e:3d:ab:2e:a1:17:4c:73:
0b:07:5d:7a:0c:ad:ac:b5:66:91:b6:91:59:04:cb:
b4:fc:50:51:89:23:c3:8f:8a:32:bd:74:1a:95:92:
60:14:4f:22:f9:40:aa:86:27:0a:03:ed:15:fa:69:
dd:86:1c:cf:86:22:c6:c7:b3:f5:9a:85:4b:d3:f7:
44:c1:29:77:18:5a:88:19:f8:ef:41:60:27:fa:ed:
a7:1a:40:32:5f:06:52:52:48:d5:66:bd:3a:6c:3a:
14:90:6c:98:39:98:d2:1a:e2:f2:0f:d1:86:f0:a1:
75:52:65:73:01:8a:fb:ce:10:fc:51:2a:98:26:22:
14:77:cc:8e:35:fd:d2:f8:d1:35:d0:6f:9c:7d:08:
a0:4b:51:ee:d2:62:a6:e8:dd:3b:19:de:49:07:87:
0b:4f:61:35:1a:df:26:96:50:ad:93:dc:f6:5b:e6:
7b:86:44:98:12:27:92:2a:46:72:da:2f:bb:dc:10:
cf:6c:c4:1a:59:62:97:e6:67:1e:04:6d:bc:dc:61:
9b:e1:56:f2:3e:91:67:c5:49:ce:78:5a:f1:2c:d9:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EF:43:A4:8D:E6:BB:B2:C8:A9:A2:36:B9:17:39:C2:A7:DF:EF:0E
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/he9DpI3mu7LIqaI2uRc5wqff7w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.135.0/24
79.143.85.0/24
87.236.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:de:d2:0f:27:a2:40:ec:e5:65:8b:6c:69:30:53:d1:b9:c4:
20:7d:59:4c:48:9e:fe:31:e8:5e:d8:47:aa:5c:96:a0:e3:3f:
d0:ee:48:5f:ab:d7:16:c7:97:65:a0:89:47:1b:02:fa:04:9c:
63:68:b1:2e:f5:ca:46:fe:f4:46:d1:60:d2:51:78:2e:dc:57:
e6:9c:c3:cc:22:70:4a:49:e3:18:0c:99:49:d3:41:7b:01:57:
ab:2b:b0:b5:84:36:e1:e1:f6:ea:e5:3f:73:7c:11:af:9c:de:
03:67:79:11:a4:33:40:64:36:0e:11:40:bd:d2:e0:4a:e6:0f:
b1:a8:0c:21:46:9f:15:db:aa:6d:94:d7:10:64:e9:53:07:65:
dd:65:00:5e:69:2c:50:a3:07:00:d2:a2:cb:e1:fd:33:65:6a:
e7:92:82:3c:a8:a9:b4:3c:b2:51:6f:86:85:a4:0e:8b:ee:3d:
2c:88:2b:ed:41:8f:d8:b1:12:c0:20:23:cd:5b:05:12:95:41:
71:78:ff:40:4a:93:1a:b8:f1:a5:4d:b4:b3:5c:94:82:df:b9:
10:e0:87:ef:0a:6c:7b:bc:4e:06:ad:e6:2e:ac:b3:72:ce:be:
30:2b:00:5a:83:56:4d:23:b3:b2:56:01:4b:d6:7a:24:25:1f:
0e:42:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org