Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/1sLRtFB1jsV5HJromxfpHDoR5Pg.roa
File: 1sLRtFB1jsV5HJromxfpHDoR5Pg.roa (raw, json)
Hash identifier: PXZl3L9KLlMkramMlZG5pk+/lHc+ZyCSyfsHjvhznR4=
Subject key identifier: D6:C2:D1:B4:50:75:8E:C5:79:1C:9A:E8:9B:17:E9:1C:3A:11:E4:F8
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 02158912
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/1sLRtFB1jsV5HJromxfpHDoR5Pg.roa
Signing time: Sun 01 May 2022 05:35:35 +0000
ROA not before: Sun 01 May 2022 05:35:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 85.237.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34965778 (0x2158912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: May 1 05:35:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6c2d1b450758ec5791c9ae89b17e91c3a11e4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:8b:5b:86:32:0e:b7:59:35:b1:c9:a9:70:
26:c2:ad:67:69:59:ec:8b:a0:8b:0b:96:fc:d0:b8:
12:56:0e:ab:5f:6c:f9:eb:c8:bb:65:8c:36:8b:23:
ee:81:85:73:9f:8f:fd:1b:c6:40:ea:56:58:35:bc:
12:ce:96:b4:ce:ce:b9:a8:2e:0e:dc:03:58:b6:bd:
d6:75:f7:b7:b9:68:90:3d:a7:ff:28:26:10:63:7d:
c1:7a:38:9a:9e:04:01:78:6b:95:08:c4:95:6f:c0:
0c:92:57:25:39:a9:fb:28:41:df:7e:44:ce:a9:16:
62:a2:43:14:6b:c9:d6:1d:ed:a7:79:26:09:44:f6:
b1:32:b9:fb:b4:49:12:f0:b2:7e:3b:db:8c:5e:15:
74:bb:3d:8d:02:23:79:ac:cc:1c:ff:18:85:42:09:
6f:94:05:a8:6f:24:44:b2:69:b7:33:91:89:ee:88:
46:52:61:06:30:cb:31:bb:3b:9a:1e:2c:a8:c8:d1:
64:d5:af:14:3c:1e:12:38:21:a8:1c:ea:22:58:95:
9e:65:1d:d5:0b:cf:77:e0:31:b8:44:03:08:98:a6:
9a:29:10:f3:18:0a:99:f0:a7:38:ae:a3:ca:d1:53:
62:53:27:29:77:a5:37:6a:87:d6:9b:a4:44:4d:2f:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:D1:B4:50:75:8E:C5:79:1C:9A:E8:9B:17:E9:1C:3A:11:E4:F8
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/1sLRtFB1jsV5HJromxfpHDoR5Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
69:52:68:5c:3f:61:b9:78:4d:f3:a3:54:82:2f:0f:fd:d9:27:
5b:a2:1b:f0:9f:bc:2e:55:06:89:2a:5a:6f:45:cc:2c:44:89:
e7:8c:48:8f:d7:0c:d6:0d:a1:ca:3a:d5:a4:e2:fc:ee:28:e8:
ec:26:86:52:fa:91:8c:37:09:35:f9:58:34:82:e9:35:7e:47:
89:76:f9:17:67:e8:06:f7:77:9e:44:d8:07:3f:e1:80:02:71:
35:2d:fc:8a:a0:61:1d:e5:cd:60:99:cc:48:55:b0:cc:13:bf:
b9:e0:65:94:6c:71:1c:b5:11:40:87:0e:29:e0:84:6a:c5:b6:
0f:ba:be:1a:b3:5d:8b:87:97:79:db:2f:13:1e:84:8a:30:87:
fd:e4:1f:f6:9a:09:93:0c:4b:d3:68:4e:a1:ae:b2:c2:67:cc:
50:a5:55:74:ca:72:b7:53:e0:d8:03:77:f8:2f:06:fc:89:b3:
7a:e8:2f:ab:70:ee:77:1f:0e:6b:f3:e7:76:24:29:14:90:b5:
cd:a1:70:80:29:1d:b5:d9:95:f6:05:06:07:10:2e:0b:cb:0a:
49:34:06:50:b6:0b:34:09:af:22:67:8b:79:8f:4f:4e:09:63:
ae:58:6e:30:02:29:8d:92:22:b6:41:61:6e:7a:91:72:cc:1b:
29:2c:8b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org