Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/98gsIgG6cZir7yDscunRPiptksU.roa
File: 98gsIgG6cZir7yDscunRPiptksU.roa (raw, json)
Hash identifier: KMfOO1InG4GWWfCR5gCsycg4ZDQt8S4nYXxPu2IYkZg=
Subject key identifier: F7:C8:2C:22:01:BA:71:98:AB:EF:20:EC:72:E9:D1:3E:2A:6D:92:C5
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0B1570D2
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/98gsIgG6cZir7yDscunRPiptksU.roa
Signing time: Sat 30 Apr 2022 11:47:25 +0000
ROA not before: Sat 30 Apr 2022 11:47:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213277
IP address blocks: 85.133.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185954514 (0xb1570d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 30 11:47:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7c82c2201ba7198abef20ec72e9d13e2a6d92c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:ec:f4:2c:b1:74:db:c1:aa:ca:8e:52:0a:
80:b1:1e:91:6c:d6:2e:ac:ef:85:cf:88:0a:e8:46:
a0:80:69:af:ee:10:9a:ed:60:16:03:7b:bb:f9:da:
3b:60:8d:db:b7:34:f0:22:f1:4e:6e:a6:5c:93:14:
e9:77:13:96:d1:78:a1:02:e8:fd:9e:79:28:ce:21:
97:b0:9b:15:0b:f9:67:5a:7a:fa:46:82:c5:b3:60:
03:45:98:01:2a:4a:de:3d:06:d1:74:d1:84:fd:32:
16:4c:bd:c8:c7:10:2c:a7:44:54:34:34:7f:2c:87:
95:02:ae:45:60:d1:1b:23:be:b0:f4:e7:3f:a8:af:
d2:a2:78:38:6e:6b:94:9d:ca:12:45:46:df:46:59:
3c:ae:e0:cb:9b:c8:dc:e8:27:c2:ea:c2:de:ed:41:
25:d7:da:6e:73:eb:cc:15:e6:82:29:00:57:12:90:
e1:a1:1c:cd:15:ac:5a:cb:64:9f:7e:97:e7:b8:7d:
30:bc:15:a8:8e:39:a2:3a:aa:d6:50:17:dc:8d:39:
21:73:5c:ae:70:98:6c:bd:3c:bd:e3:97:7b:86:b6:
94:c0:e8:d1:4b:4c:7f:da:bf:4a:97:81:08:4c:08:
4d:0d:0d:45:08:7f:6e:16:1c:dd:24:91:38:fd:18:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:2C:22:01:BA:71:98:AB:EF:20:EC:72:E9:D1:3E:2A:6D:92:C5
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/98gsIgG6cZir7yDscunRPiptksU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:47:fd:21:07:0f:a7:56:49:bd:95:2e:92:53:fc:3d:33:37:
d4:3f:12:77:14:b9:46:37:dc:20:b7:f0:e4:92:13:26:02:6a:
68:e6:74:8c:23:7a:95:51:75:c2:45:5a:e0:31:aa:14:71:92:
81:fd:fa:58:a2:cf:7c:a7:2e:45:0f:cb:53:80:de:b4:d1:ee:
9d:cc:3f:7c:36:d6:56:41:29:4d:59:74:36:27:60:3c:12:6e:
40:ef:8f:a1:8a:49:a4:7c:06:4f:88:08:80:09:0f:3c:1a:cf:
ae:fa:c6:f3:6e:1f:b3:ed:b7:f4:1d:66:62:0c:33:24:a3:ce:
4c:58:68:50:f0:19:81:ab:68:45:f0:9c:79:fa:1a:bf:ac:cb:
76:91:9a:72:0d:85:7b:9c:5d:c9:90:4c:7d:bd:28:89:5e:31:
01:0e:57:2b:1f:48:14:ab:02:87:67:52:d5:93:be:8b:65:5e:
6c:55:a6:c0:36:4d:68:81:e0:c3:7b:57:6f:16:cf:15:07:bd:
ce:75:e6:94:bd:af:2b:c1:d6:d4:52:2a:d8:0e:4d:23:bb:71:
9f:51:9b:95:b5:5f:10:39:26:03:44:b8:3c:2d:a8:ab:3e:3a:
55:ab:b6:75:0c:50:f0:be:3c:13:75:50:6a:0d:95:8b:07:54:
b5:35:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org