Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/tlVUyJ1GJ5yMFLV2snDq5sEMgso.roa
File: tlVUyJ1GJ5yMFLV2snDq5sEMgso.roa (raw, json)
Hash identifier: yu9yRwqkoTSY4aVyTRuWDXJhON1o3NZ5k/z13WjFSUw=
Subject key identifier: B6:55:54:C8:9D:46:27:9C:8C:14:B5:76:B2:70:EA:E6:C1:0C:82:CA
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 010D5BFA
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/tlVUyJ1GJ5yMFLV2snDq5sEMgso.roa
Signing time: Fri 07 Jan 2022 10:07:35 +0000
ROA not before: Fri 07 Jan 2022 10:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 85.237.80.0/22 maxlen: 24
85.237.90.0/23 maxlen: 24
85.237.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17652730 (0x10d5bfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 7 10:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b65554c89d46279c8c14b576b270eae6c10c82ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:88:ad:d9:8a:1a:08:cd:3e:f2:07:fb:d4:
59:27:f1:62:24:fe:f9:d3:49:ee:09:bf:f0:ee:00:
4c:0a:f5:60:53:10:fd:2a:0b:b1:47:ea:0f:d6:62:
30:d1:24:a1:b9:a5:6b:24:b3:58:59:23:c3:1b:2c:
d6:b3:72:63:1b:5c:0c:cc:03:0d:e9:42:df:ef:ac:
78:e5:80:52:24:06:b7:42:83:aa:86:39:34:79:a4:
41:c8:ec:40:60:43:42:99:c3:23:7a:da:d4:7b:e0:
96:e6:8a:80:7f:d2:7e:3d:d5:7f:f5:ec:7a:5a:ba:
ef:06:45:d2:7e:34:73:d2:c4:81:31:8f:58:66:f8:
20:03:51:9d:ec:6a:d8:14:08:f0:4b:68:1a:0d:b3:
02:ba:36:39:7b:09:65:8c:85:41:f7:48:c6:d1:b7:
4e:7c:83:c0:de:43:0f:fd:9d:bd:0a:a7:6a:d6:5d:
9f:9b:78:7a:85:16:9c:1a:c7:f8:4b:ad:a1:26:b5:
a5:58:ad:91:eb:19:06:71:e7:64:62:7c:5d:8b:98:
59:29:ed:54:9c:68:ac:bd:be:73:ca:1e:2e:33:d5:
c3:38:f3:e3:ee:fd:e6:ee:99:e3:fa:73:aa:d6:dd:
df:43:4d:6e:d1:26:08:ce:c0:fa:60:e7:bf:27:98:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:54:C8:9D:46:27:9C:8C:14:B5:76:B2:70:EA:E6:C1:0C:82:CA
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/tlVUyJ1GJ5yMFLV2snDq5sEMgso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
85.237.90.0-85.237.95.255
Signature Algorithm: sha256WithRSAEncryption
2e:12:25:bb:10:15:6f:ce:18:75:bf:15:47:e2:89:93:d7:91:
c1:81:bd:e8:4c:bf:9e:56:48:5d:51:fa:e4:98:7f:2e:53:23:
24:90:a2:e3:65:9f:19:e6:6d:47:a7:7d:7e:07:27:74:07:6d:
87:28:20:ca:d4:b7:48:92:f0:01:2e:0d:40:0f:00:97:5b:7a:
92:a3:45:d9:1f:c0:5f:39:13:a9:3d:1b:7a:d4:01:e4:71:95:
06:fa:b5:37:21:1b:00:ed:e8:ce:fd:d9:81:dc:15:14:cf:0f:
c7:fc:d3:c9:cc:82:1d:6f:51:f9:d5:fa:70:ae:c3:54:5e:c2:
24:1a:c4:28:16:16:2f:4b:b4:3f:c0:33:ce:3a:cb:fc:98:1f:
31:c4:ae:22:2e:da:93:ee:80:a5:48:1c:e0:d7:d9:6e:74:3b:
1a:d8:4b:b2:2b:31:d5:4f:18:77:bb:83:70:04:4d:0c:d2:c4:
9b:6a:7b:1f:9a:f6:cd:90:57:4a:2f:18:fd:9e:65:24:a7:61:
8d:87:b5:cb:ae:04:8e:aa:2f:5a:b9:e0:9c:81:f5:26:ad:80:
6f:eb:cd:24:6a:0f:03:9c:24:86:33:c7:da:7d:17:39:16:97:
65:1c:18:4f:c6:18:7d:ba:fb:e0:f8:ee:ef:86:59:df:0b:4e:
98:11:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org