Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/4E-0xAFgSzJXtpd18nciVBpJBNI.roa
File: 4E-0xAFgSzJXtpd18nciVBpJBNI.roa (raw, json)
Hash identifier: UWMYtYZdb000aQ20tCONpVnA1sN5BI3zws1L9OFqFDQ=
Subject key identifier: E0:4F:B4:C4:01:60:4B:32:57:B6:97:75:F2:77:22:54:1A:49:04:D2
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 0B813983
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/4E-0xAFgSzJXtpd18nciVBpJBNI.roa
Signing time: Sat 01 Jan 2022 12:05:55 +0000
ROA not before: Sat 01 Jan 2022 12:05:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211631
IP address blocks: 85.112.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193018243 (0xb813983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Jan 1 12:05:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e04fb4c401604b3257b69775f27722541a4904d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:33:59:19:74:80:22:7d:f6:0e:b4:ef:3e:
8b:dc:29:84:db:4f:c3:a5:7a:a4:39:76:80:a8:80:
05:e8:cf:4e:90:5a:8e:b6:ec:85:33:ac:c5:5d:ee:
98:c7:49:f3:57:a9:bb:c7:16:03:84:3d:dd:47:dc:
3d:22:0a:d4:76:b8:d5:b0:b3:3d:97:1a:d2:83:ae:
19:85:4c:31:1e:8a:79:c9:98:27:68:e4:ec:c8:b6:
b4:5b:66:43:40:7a:88:02:a9:cf:65:4a:f2:74:42:
07:e0:71:8c:c7:d3:67:ee:94:89:af:a1:6a:ff:f7:
82:24:c5:d0:de:72:5a:64:d6:8c:06:3f:c7:83:bc:
06:fb:fb:1b:fc:db:48:f7:dd:80:5a:49:c4:44:3f:
d7:f5:d0:4f:35:dd:51:5f:f9:6f:30:1c:7f:20:d1:
10:f5:2e:5b:63:5b:e5:de:1f:23:2a:6d:5e:fe:91:
e2:1e:d3:83:47:6f:9c:a6:4e:ef:63:bb:a6:40:29:
b0:82:2f:93:21:4d:13:26:46:67:f6:19:2d:06:06:
6c:09:58:5a:ca:d4:d7:cd:85:26:8a:0e:3a:26:d3:
e0:a6:80:aa:c9:1b:8b:25:af:23:d9:ab:c4:89:0a:
c0:53:32:70:a1:e2:27:82:97:1c:4d:c7:e7:a5:86:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4F:B4:C4:01:60:4B:32:57:B6:97:75:F2:77:22:54:1A:49:04:D2
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/4E-0xAFgSzJXtpd18nciVBpJBNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:8b:59:63:64:b2:68:8f:10:2f:e5:9b:32:8f:05:73:49:da:
63:18:12:0d:47:0f:a4:08:18:0a:b7:0c:53:29:5b:e5:82:81:
da:d8:b3:8a:d4:6c:e6:9e:06:1c:69:b8:6e:33:2f:69:aa:41:
d1:dc:7e:59:a4:2e:38:60:5b:df:9c:77:80:5e:2d:da:d3:71:
cb:df:a4:e0:b8:6c:3f:ca:74:70:e6:46:c8:e0:9f:f4:4e:21:
1b:1e:b7:8a:16:dd:71:bd:1a:5c:5e:70:f9:05:55:59:5d:a3:
fc:1b:d3:8f:ee:11:c6:dc:cb:ab:06:80:9e:10:06:ec:8c:8f:
e5:13:46:79:e5:85:b1:53:53:df:82:95:29:73:6d:c3:1f:da:
41:75:6a:5c:ca:66:65:ac:a8:a7:75:a9:a4:94:41:aa:7f:b1:
8e:3c:3a:8c:31:57:3c:cc:3d:76:4f:7a:31:49:de:66:b7:82:
6a:08:4a:11:4c:42:0e:4b:d5:43:6c:b8:f5:ef:67:9e:03:51:
76:32:21:8b:c8:02:9c:3a:fe:9a:31:c1:3f:79:51:2a:d0:a9:
fb:ca:4c:db:6a:bb:08:d2:d3:91:d0:92:e0:16:d7:e9:1d:92:
7b:e1:28:27:73:46:6f:bb:fb:57:ca:d8:1f:8b:77:60:11:69:
d7:1d:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:53 2024 by rpki-client on console-ams.rpki-client.org