Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vYahGSTBkOxYNudbYPZgGB1fIu4.roa
File: vYahGSTBkOxYNudbYPZgGB1fIu4.roa (raw, json)
Hash identifier: Wn/UqEc/ZcChGPui09wh2c0XApN+j6/8mFOlqHFui1k=
Subject key identifier: BD:86:A1:19:24:C1:90:EC:58:36:E7:5B:60:F6:60:18:1D:5F:22:EE
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183D56C750F1C2C753D977887A52C2E1302
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vYahGSTBkOxYNudbYPZgGB1fIu4.roa
Signing time: Fri 14 Oct 2022 07:36:38 +0000
ROA not before: Fri 14 Oct 2022 07:36:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:6c:75:0f:1c:2c:75:3d:97:78:87:a5:2c:2e:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 14 07:36:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd86a11924c190ec5836e75b60f660181d5f22ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e0:c5:1a:0b:23:12:4e:0e:a3:e5:9e:ae:3f:
43:c5:69:e0:ef:dd:5d:c8:50:51:35:9b:95:45:4c:
ee:f6:48:c9:ac:eb:f0:fb:b4:a6:93:fa:01:28:49:
ea:ff:c9:f4:f3:36:f8:7e:67:41:46:9a:64:5f:ce:
d9:f8:ff:c8:35:39:09:e6:d2:86:42:92:87:3a:ec:
27:67:b6:25:fd:39:31:41:b4:6f:f9:91:ef:5e:c4:
a8:b1:9c:dd:61:83:14:1b:eb:a4:3d:06:7f:42:8c:
bc:ab:cd:e0:6c:ee:1b:e9:9b:9e:70:ea:a5:b8:9e:
dd:28:13:72:72:ff:2b:a5:69:c6:9c:7a:be:a4:55:
3c:37:bb:8b:46:06:ac:37:98:e2:7b:15:25:99:63:
8c:b9:8b:ef:25:3b:17:60:48:ff:0a:52:64:94:76:
7e:e5:ec:1f:fd:e9:bb:ae:dd:8a:2a:26:a3:29:b5:
53:08:5f:d6:22:a0:63:41:eb:0d:1a:2b:c9:b5:5a:
1e:66:b5:a8:94:40:84:4a:58:06:74:38:cb:0c:d8:
f2:a7:61:7d:1b:7b:ce:fd:ac:5b:6a:cc:39:0f:3b:
18:df:f5:c5:82:e7:2e:a3:2b:1e:a5:7e:7d:55:9e:
6d:29:b1:2d:50:bd:0f:b8:79:9f:55:67:3c:5a:d0:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:A1:19:24:C1:90:EC:58:36:E7:5B:60:F6:60:18:1D:5F:22:EE
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vYahGSTBkOxYNudbYPZgGB1fIu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.123.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f1:c0:62:c6:f3:11:5c:b5:cc:1a:13:4f:87:07:a7:a5:43:
51:ba:ab:7c:32:45:2b:5c:d3:66:ca:91:62:22:d0:4c:4d:e2:
ce:86:ef:74:7a:42:a1:35:aa:d0:99:e6:e2:52:e7:10:63:d4:
a1:f6:27:82:ce:fe:d5:ad:c0:3e:cb:da:26:df:8d:b2:a1:f2:
04:cb:2e:8e:21:21:35:24:08:05:1a:c2:35:79:71:f0:8d:8c:
64:29:d1:55:70:d8:32:42:51:21:ea:27:bd:8b:93:14:d5:2c:
91:01:6e:e2:e6:55:83:bb:bc:7c:e1:29:eb:4a:c2:9f:00:07:
c8:25:b8:ee:20:7d:c2:ac:72:d7:29:db:6a:6c:d5:09:9a:ad:
09:65:70:1e:28:a0:54:07:6c:67:04:55:4c:fd:26:9f:4b:35:
85:93:c3:fa:e4:b8:92:fc:e9:65:a7:04:31:a6:5f:c8:8c:b2:
6b:ee:4b:27:4d:0c:18:59:0f:14:da:3a:50:96:d4:b6:15:d6:
ca:7c:64:ad:b1:cf:53:a0:f0:89:f4:19:5b:33:57:8c:16:eb:
51:92:b9:75:0e:c7:a2:c5:60:db:76:04:a3:96:cf:b4:28:6c:
82:82:af:73:f9:e9:a5:21:dc:b7:cb:09:96:d6:8b:60:33:78:
db:da:06:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org