Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/8RbNKlTBKtee1WIZ6M1RJ20nrzA.roa
File: 8RbNKlTBKtee1WIZ6M1RJ20nrzA.roa (raw, json)
Hash identifier: qPemyRLWCfX+hTlmJSL1NF4obNlFPR1yfIhhqLADWDY=
Subject key identifier: F1:16:CD:2A:54:C1:2A:D7:9E:D5:62:19:E8:CD:51:27:6D:27:AF:30
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 3D50B7AD
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/8RbNKlTBKtee1WIZ6M1RJ20nrzA.roa
Signing time: Sat 01 Jan 2022 06:55:13 +0000
ROA not before: Sat 01 Jan 2022 06:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31100
IP address blocks: 85.93.69.0/24 maxlen: 24
85.93.72.0/24 maxlen: 24
85.93.77.0/24 maxlen: 24
212.40.190.0/24 maxlen: 24
85.93.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028700077 (0x3d50b7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 06:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f116cd2a54c12ad79ed56219e8cd51276d27af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:59:c6:55:78:8c:04:c8:5e:aa:78:dc:95:
58:48:e6:88:9c:bc:f7:23:c3:87:87:24:14:f6:c7:
1e:c6:39:7a:92:34:49:39:cc:40:74:79:58:12:90:
d5:c5:c7:75:04:a6:28:c0:db:c7:b4:6e:88:81:3f:
3f:00:a7:ac:82:26:6e:a9:7f:c6:70:5a:f5:61:f0:
9e:f7:25:29:ae:32:2c:38:3a:b5:7d:78:07:0c:08:
5b:63:d2:bf:e5:a8:8e:a6:fb:a7:c7:a9:79:98:b7:
64:ca:e5:a4:dd:a8:02:8e:52:78:e6:4e:df:0e:f7:
1f:c4:57:67:bf:a4:f5:fd:c8:91:c1:8c:25:6a:23:
c2:fc:7d:52:22:0e:8b:b0:f9:6b:ae:1a:83:1b:b0:
22:80:b8:82:9d:04:6f:34:74:1f:f7:1c:a9:01:ab:
36:5d:a8:8b:67:0c:75:56:e6:43:02:f1:24:5f:49:
7d:c9:3f:33:07:38:83:1d:56:af:9c:76:b8:cf:7e:
97:9f:c3:92:11:19:f9:cc:75:76:d3:76:92:ce:65:
eb:c6:cd:2e:55:03:9e:d2:ae:4e:98:53:c8:e2:bf:
02:7b:81:cd:ef:70:fd:fc:d2:9c:1b:1b:cb:25:e1:
49:a0:92:21:cc:f7:c9:f0:58:6d:38:66:96:75:7d:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:16:CD:2A:54:C1:2A:D7:9E:D5:62:19:E8:CD:51:27:6D:27:AF:30
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/8RbNKlTBKtee1WIZ6M1RJ20nrzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.64.0/24
85.93.69.0/24
85.93.72.0/24
85.93.77.0/24
212.40.190.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b6:df:0c:c7:53:f1:7c:b8:84:a8:8d:54:76:59:9c:ce:85:
8a:98:3b:2d:a2:5a:66:56:d2:33:3f:86:9b:3d:20:83:59:88:
16:a3:48:3b:32:f5:71:b5:d6:f0:65:d7:63:f8:43:e4:fa:c1:
5f:b7:d2:ec:8c:ff:55:f2:d5:bb:42:13:c2:07:8c:bf:61:b8:
73:88:ba:9a:5e:8e:90:bb:c0:19:55:21:a2:95:9f:2c:dd:1b:
07:b3:3f:2a:93:b9:8d:6e:4b:f6:ea:8e:e6:5e:95:7f:72:fa:
cf:76:4a:47:ca:50:85:f6:80:b3:fa:6a:b3:57:db:76:84:8b:
2d:a9:b0:e3:49:bb:c9:8e:8e:0c:e4:7e:bf:dc:1d:73:38:0c:
9d:26:25:bf:85:ef:d0:b2:64:6a:3e:2c:46:3a:7a:b1:2c:2b:
33:e1:3f:a8:87:42:dc:c3:41:da:36:d3:0b:50:70:16:66:76:
0b:e2:ed:6a:78:a1:78:cb:89:7b:de:e9:92:5f:cd:2e:cd:66:
8f:f2:eb:62:7a:f2:43:2a:a0:95:94:47:e3:3d:0a:78:88:03:
a3:9a:1b:fd:5b:77:b6:64:c3:11:48:dd:36:db:5d:fb:75:1c:
e3:05:3e:33:30:45:cd:82:0b:a7:8f:5d:3c:27:ab:7c:74:d7:
e4:aa:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org