Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/hTxZ7xy1wZDjwoXv2le_pAofkos.roa
File: hTxZ7xy1wZDjwoXv2le_pAofkos.roa (raw, json)
Hash identifier: eXcufrp2Nh0gBy/NKArresSN3Ln5UybYGs0QGIOwZ3o=
Subject key identifier: 85:3C:59:EF:1C:B5:C1:90:E3:C2:85:EF:DA:57:BF:A4:0A:1F:92:8B
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 7AEA6B
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/hTxZ7xy1wZDjwoXv2le_pAofkos.roa
Signing time: Sat 01 Jan 2022 01:01:55 +0000
ROA not before: Sat 01 Jan 2022 01:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209835
IP address blocks: 2.59.232.0/24 maxlen: 24
2.59.232.0/22 maxlen: 22
2.59.233.0/24 maxlen: 24
2.59.234.0/24 maxlen: 24
2.59.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8055403 (0x7aea6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Jan 1 01:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=853c59ef1cb5c190e3c285efda57bfa40a1f928b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:af:3a:87:e5:91:8a:38:e3:ef:8f:fd:56:
26:51:b7:0d:d8:92:13:22:a3:fa:c2:14:ce:f3:11:
3c:7f:e9:76:fc:10:55:aa:91:9d:f4:05:5b:49:91:
0a:64:0f:13:d6:9b:ae:30:80:15:8a:6f:88:89:6b:
9b:69:21:20:dd:84:37:33:10:21:90:6a:21:43:2d:
30:37:37:f3:95:93:21:a1:af:cd:4d:5f:f4:8e:16:
4b:57:64:58:04:18:95:b2:4a:93:02:dd:fe:ac:ad:
08:9d:18:49:d9:9b:04:53:61:88:6e:fd:11:2f:7c:
a1:d3:f4:e5:39:a8:cc:b8:6e:91:54:23:a6:df:48:
a7:6c:19:ca:a4:be:b6:ba:93:b4:9d:76:13:71:57:
6f:b6:27:d8:51:d1:70:97:2f:6c:72:55:02:83:e6:
7b:e0:af:f3:4c:67:13:8c:35:14:97:8c:b4:07:5b:
39:92:3a:40:4a:14:8b:1c:7a:43:d9:4f:6f:ee:59:
41:12:cd:dd:74:5c:41:b1:e6:cd:77:38:bc:e9:80:
35:14:0a:2f:a1:1d:49:97:09:9a:7f:81:a0:6c:1b:
a6:f7:f9:1b:82:a1:df:e0:d7:f6:2a:04:5e:cc:dd:
8a:df:dd:a6:58:43:69:5d:c7:a7:e7:3e:99:21:9d:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3C:59:EF:1C:B5:C1:90:E3:C2:85:EF:DA:57:BF:A4:0A:1F:92:8B
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/hTxZ7xy1wZDjwoXv2le_pAofkos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
83:c5:56:05:99:0d:58:6d:3c:b7:ce:c6:a1:fc:66:77:03:a1:
82:36:6d:c2:df:e7:11:a8:65:af:07:39:ff:18:3b:55:a5:65:
c4:a9:15:9e:38:b5:61:3f:a4:ed:e4:77:8e:fe:87:24:e6:d4:
05:a7:f4:fd:c1:64:b4:a0:f4:b9:44:c1:a9:ff:32:29:cf:d7:
b0:37:36:8e:ff:23:81:30:61:cd:29:02:da:bf:08:e6:fb:b6:
18:2f:6f:bc:d5:b6:ba:e9:90:11:e5:f9:cc:34:c3:85:b3:a3:
81:6a:52:13:40:d8:77:db:02:68:bf:cd:c7:c2:b3:10:02:8f:
c8:2c:09:32:7f:de:20:63:cf:cc:07:42:4e:7b:ad:5b:1a:45:
79:08:ed:03:80:83:84:c4:a0:ca:b9:84:26:1c:21:a0:ee:c9:
e6:28:d1:a0:c2:f3:8c:bc:11:90:97:2a:61:b8:62:48:64:07:
5e:43:2c:5b:12:09:42:a3:2c:a9:55:d9:1f:e0:7d:71:66:7b:
d2:ac:b9:3f:73:db:67:50:67:9a:8d:d0:63:76:19:e3:ad:ca:
ed:41:1a:0a:66:81:0a:ec:b9:10:72:77:9f:49:98:0c:a2:78:
37:e8:e5:25:b2:d2:dd:77:e7:12:89:65:86:a9:e7:0a:c1:5c:
7d:07:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:31 2024 by rpki-client on console-fra.rpki-client.org