Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K4cQ8EluqfJbjmOJehHqfAkwsvU.roa
File: K4cQ8EluqfJbjmOJehHqfAkwsvU.roa (raw, json)
Hash identifier: OTh88F4klIujs0ajkXUC3JElYIAfFC+X4m9KTKu+daw=
Subject key identifier: 2B:87:10:F0:49:6E:A9:F2:5B:8E:63:89:7A:11:EA:7C:09:30:B2:F5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184661155759A39EA4462672F5BBD9CC3DA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K4cQ8EluqfJbjmOJehHqfAkwsvU.roa
Signing time: Fri 11 Nov 2022 09:42:02 +0000
ROA not before: Fri 11 Nov 2022 09:42:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:11:55:75:9a:39:ea:44:62:67:2f:5b:bd:9c:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 11 09:42:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b8710f0496ea9f25b8e63897a11ea7c0930b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:2a:95:50:c0:1d:20:6e:44:40:07:a0:34:
a9:3d:42:24:df:f0:21:15:26:1c:a9:a8:16:3d:b6:
3e:2d:50:c5:b8:75:df:6e:83:a3:cc:bf:08:ba:2c:
ad:0d:32:34:82:62:3b:c5:60:42:2a:37:a3:c0:28:
89:df:c6:95:5a:60:4a:c8:b0:50:d1:e3:d0:67:63:
2c:a2:49:5d:ac:fd:1d:81:2a:12:7e:17:53:8d:05:
98:fd:b5:de:88:7b:14:5f:90:58:67:3f:36:c6:59:
ef:cc:65:39:a1:ef:54:75:e6:f8:5c:fd:4c:60:8c:
05:27:69:5e:70:cf:67:06:49:72:b5:60:9a:5d:ae:
92:3d:79:3f:24:90:8d:04:92:60:ec:4d:9d:ff:1d:
49:42:f9:bb:7c:f2:10:0a:4c:6b:de:23:c9:86:e3:
68:a2:b5:3a:fa:e3:34:8e:55:9d:4b:76:e7:9f:8d:
24:7c:0f:11:d4:1f:f9:82:10:af:90:0a:c9:8b:60:
95:f5:20:c8:91:77:47:eb:c4:20:4d:04:53:92:52:
79:10:03:bc:f9:5a:0b:b5:47:00:cc:3d:5b:63:ab:
fe:97:89:d3:1f:82:01:05:af:8d:72:29:46:c1:b6:
d5:95:96:ea:7d:68:e5:99:b1:8a:43:de:44:4c:0e:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:87:10:F0:49:6E:A9:F2:5B:8E:63:89:7A:11:EA:7C:09:30:B2:F5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K4cQ8EluqfJbjmOJehHqfAkwsvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
25:e6:86:1f:80:84:36:96:57:8a:c6:1a:af:67:02:4b:56:e7:
b7:92:fb:54:16:31:4d:88:f9:42:ea:1b:5c:99:70:64:5f:14:
7b:d4:5d:6d:fe:e9:ee:7b:17:ea:c1:c9:45:86:fe:89:92:59:
62:94:19:58:ce:fd:ab:6a:b6:9c:a5:05:02:45:b5:bf:98:a4:
c7:e2:08:da:64:c4:13:99:26:4c:e5:80:d0:59:29:9f:2e:eb:
dd:6b:00:8e:f6:57:fb:7d:93:98:7a:3b:33:29:f9:ab:33:b9:
4b:a5:05:c2:c7:2a:88:a6:c7:48:69:0b:94:66:61:33:c2:08:
8e:37:e7:54:b3:a2:1e:7d:3f:04:8a:77:af:0f:74:44:b4:01:
1f:a1:29:bc:5d:14:16:7c:a5:cb:2b:ba:d7:51:3b:9c:18:2c:
f5:6b:30:91:ab:21:3c:5e:83:54:30:14:ea:c4:d4:d7:30:9d:
6a:f5:f1:02:80:08:c0:51:ef:96:11:a9:7a:db:e1:01:dc:6a:
79:b9:d5:95:a2:24:c9:2f:e8:a9:f2:e1:a2:03:36:d9:4f:74:
16:ae:00:42:fa:85:dd:1f:fe:c7:7a:80:ed:05:01:80:92:8e:
d1:fc:e4:62:c8:ea:7a:29:b7:4c:b7:bc:d2:57:8d:c7:1d:5e:
cd:aa:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org