Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/axpWPVK-Mtas9GB4213OcZX0zdw.roa
File: axpWPVK-Mtas9GB4213OcZX0zdw.roa (raw, json)
Hash identifier: qej0sacFx6ZURy6mm3YZjDXN8Z/qU9wfNNiqNh5pYl0=
Subject key identifier: 6B:1A:56:3D:52:BE:32:D6:AC:F4:60:78:DB:5D:CE:71:95:F4:CD:DC
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0B5770EE
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/axpWPVK-Mtas9GB4213OcZX0zdw.roa
Signing time: Thu 28 Apr 2022 14:53:31 +0000
ROA not before: Thu 28 Apr 2022 14:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62005
IP address blocks: 85.239.52.0/24 maxlen: 24
85.239.54.0/24 maxlen: 24
85.239.53.0/24 maxlen: 24
85.239.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190279918 (0xb5770ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Apr 28 14:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b1a563d52be32d6acf46078db5dce7195f4cddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:9b:38:50:9f:45:58:7a:f9:2c:29:ac:34:
f9:18:d9:eb:04:c6:9f:bd:30:c2:20:72:e4:18:30:
56:f9:b2:33:b1:29:e7:a6:b0:7a:c6:f1:1b:e5:88:
70:bc:c8:fe:7e:d6:9f:d4:07:c1:f1:79:60:d5:28:
ad:00:da:69:db:79:b0:f9:02:57:fe:a0:50:43:a4:
0e:fb:1e:16:c1:9d:77:3a:ae:7b:30:38:8a:df:99:
20:d4:18:6f:e0:49:c8:ff:a3:70:f3:ac:c1:37:62:
26:d9:93:0c:e0:27:a6:fc:7d:c8:4c:40:9d:99:24:
11:bb:ce:0d:ff:95:b6:3a:3e:4e:25:f2:b7:b8:05:
3f:a5:cd:82:4d:8c:95:a7:b9:28:9c:e2:52:e3:f3:
4c:4b:f4:fa:4a:3c:fc:25:c7:0d:a2:f0:75:0d:b3:
77:c8:b5:71:65:89:d4:77:b9:33:e4:bc:37:f4:85:
31:9d:5a:ea:72:4f:98:2a:15:2d:53:81:71:bf:1d:
52:a7:b7:2f:4e:ac:aa:67:30:ba:93:0a:e7:0e:cb:
7d:a0:63:fd:72:83:39:c6:91:fa:cf:82:ed:aa:eb:
6d:7f:4b:24:5f:c2:eb:b4:5d:91:ce:01:89:84:57:
0b:b3:92:83:a8:91:23:cd:9e:f2:28:14:1b:57:c2:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1A:56:3D:52:BE:32:D6:AC:F4:60:78:DB:5D:CE:71:95:F4:CD:DC
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/axpWPVK-Mtas9GB4213OcZX0zdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:a3:ea:95:cc:00:31:c1:36:15:5b:ea:14:c9:7b:64:a1:77:
d9:7e:3c:fd:d4:40:eb:80:3a:80:c8:cf:2d:7b:5a:ef:e7:2e:
59:ad:24:89:ea:4c:82:7e:b0:de:76:d5:11:00:00:b5:c8:cb:
de:e0:dc:f5:80:d2:33:cd:49:be:a4:f7:94:f4:ed:d4:16:2c:
7d:32:35:ac:c7:8b:b8:c8:de:1f:ab:6c:63:bc:fb:f6:22:63:
4c:d3:00:12:37:23:17:3f:48:28:e7:98:bd:6c:4b:8e:39:9b:
9c:79:81:c8:99:61:70:bb:bd:1f:23:be:23:65:73:d4:a2:aa:
8e:ea:f5:4d:86:96:06:cc:f6:f0:14:9e:0a:55:9d:9f:5d:3c:
16:3a:3d:75:3c:e7:bd:27:81:e6:13:4a:47:18:2b:21:13:71:
67:74:ec:1a:5b:5e:32:0a:28:55:f0:67:76:51:a8:83:1b:a7:
0b:2f:48:8a:93:7a:4a:3e:76:8d:24:9d:2b:43:19:5d:c7:fd:
7f:16:03:51:7c:38:b8:8f:8a:7b:6e:89:9b:bc:66:16:ce:d9:
73:eb:d4:2f:28:05:f0:95:73:77:48:fb:e3:4f:f2:3b:b2:db:
a0:9d:8b:eb:be:ac:d0:48:6a:e0:21:9b:2a:67:13:33:06:41:
15:75:e1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org