Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jAq2Pl8FJKSRFeWaH35oAhkBRw8.roa
File: jAq2Pl8FJKSRFeWaH35oAhkBRw8.roa (raw, json)
Hash identifier: wjZiMA1VUxzA0bm4Hi+R++xq5MkED2AVfqH4XO4lixk=
Subject key identifier: 8C:0A:B6:3E:5F:05:24:A4:91:15:E5:9A:1F:7E:68:02:19:01:47:0F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0ABFB5C0
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jAq2Pl8FJKSRFeWaH35oAhkBRw8.roa
Signing time: Tue 29 Mar 2022 04:23:20 +0000
ROA not before: Tue 29 Mar 2022 04:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 85.133.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180336064 (0xabfb5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 29 04:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c0ab63e5f0524a49115e59a1f7e68021901470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:24:da:78:8a:53:bf:07:30:ed:63:74:6d:
03:bd:f7:61:a3:25:4d:60:b7:dd:5f:f0:e8:23:ee:
97:fc:ad:ed:a5:5e:d6:0b:b7:43:dc:47:2d:86:fb:
e3:8b:10:40:aa:6b:30:11:69:dd:17:98:e7:e9:b2:
7c:97:d1:9b:d9:26:19:7a:da:7b:2c:5c:52:e2:d8:
67:11:c5:59:0c:1d:b3:db:b8:43:20:e8:ac:49:8c:
a7:15:55:92:b3:d7:9a:f4:eb:6a:a8:c7:7b:b0:44:
9a:6d:dc:f5:27:be:b6:b6:da:1d:0d:76:fd:e4:c4:
21:42:4c:a7:85:c6:6d:57:ba:43:36:2a:53:12:a7:
89:17:53:c4:89:a0:86:92:c9:14:9e:60:13:62:f1:
4f:8d:fc:46:55:e6:bf:7d:c3:d0:26:07:f2:d7:e2:
be:bc:23:f9:26:01:a3:6a:44:33:fb:23:f0:8f:0b:
dd:5f:c2:62:ed:25:c5:34:65:a9:21:63:6f:da:b1:
f4:b7:5e:ae:fa:62:ce:4c:27:03:15:4a:3e:9d:96:
af:29:5c:2b:a0:dd:72:d5:68:ea:c0:b9:22:c8:f7:
f0:ca:c4:4a:7a:38:ef:c0:95:f2:95:fd:fa:93:ea:
55:ca:17:f3:72:7f:90:a1:36:ca:e0:d3:7f:68:d7:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:B6:3E:5F:05:24:A4:91:15:E5:9A:1F:7E:68:02:19:01:47:0F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jAq2Pl8FJKSRFeWaH35oAhkBRw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:62:d5:cf:62:2a:ce:d1:2e:80:d2:dd:6c:9f:f1:6c:42:e1:
54:a0:57:93:5f:9d:db:b8:9b:27:38:21:b9:6a:37:23:60:ff:
f3:40:20:48:f3:57:7a:a6:86:53:00:47:bd:01:b4:73:33:8c:
b9:d8:eb:9f:de:5f:b8:a7:4c:62:dd:f8:57:69:fe:73:25:33:
31:e8:c5:65:66:2c:ec:7d:9e:7c:3d:07:da:f6:98:38:2e:0e:
48:31:d2:3f:cb:e8:a7:ff:82:67:17:0b:47:4e:93:44:4b:e0:
0c:fc:d7:d5:bd:1b:76:6e:f8:87:9a:3d:3d:9b:1f:6f:ad:c5:
6c:e2:26:a4:f7:29:71:6c:cb:1f:83:8a:28:7f:92:b6:d5:db:
db:b1:51:05:09:47:bd:52:fa:17:03:11:d2:13:55:39:1d:f1:
66:d1:ac:fc:a4:1c:3b:34:d5:d0:60:8a:04:ab:4d:3d:fa:5f:
b1:d6:e1:af:45:d8:d2:3a:a6:3d:b9:30:ed:8c:a8:11:c6:03:
54:17:17:85:4b:37:cd:00:2c:cc:99:40:ec:0f:37:9d:f6:c2:
10:1b:4b:5a:ab:7a:a7:e5:dc:28:ac:e9:04:22:f2:cd:2b:7b:
79:3f:a2:a7:b0:2b:de:12:2a:a9:c3:6f:f6:48:66:de:22:f1:
16:6d:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org