Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/4eYTQi0vhT0G0_8CMIyl4hxQxB0.roa
File: 4eYTQi0vhT0G0_8CMIyl4hxQxB0.roa (raw, json)
Hash identifier: sJCv4k5X2WzveZUlp3ICX0qu6kEk7Saugq5byO/Rfp0=
Subject key identifier: E1:E6:13:42:2D:2F:85:3D:06:D3:FF:02:30:8C:A5:E2:1C:50:C4:1D
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 056F8186
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/4eYTQi0vhT0G0_8CMIyl4hxQxB0.roa
Signing time: Sat 01 Jan 2022 15:07:22 +0000
ROA not before: Sat 01 Jan 2022 15:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135273
IP address blocks: 85.203.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91193734 (0x56f8186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1e613422d2f853d06d3ff02308ca5e21c50c41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:2d:0c:6f:45:92:d9:ed:10:92:1d:13:94:
bf:dd:ba:33:b4:de:5e:22:9b:8b:77:64:9c:2a:ab:
c4:95:c2:11:ef:c0:44:0c:72:d2:05:64:fe:68:b9:
a3:a3:59:08:3f:73:61:38:02:d7:d4:a9:da:b5:a9:
cf:86:84:80:84:76:3a:4c:4d:3c:15:1b:f1:d1:18:
52:cf:12:71:7a:4f:40:bf:04:96:01:94:4c:88:0a:
82:8a:6e:b0:73:66:72:55:15:e2:7b:4a:21:a4:05:
a3:9a:53:5b:c6:af:aa:97:40:0b:39:35:8d:1c:8f:
bc:bc:8f:cb:88:89:29:b9:4d:11:cd:ab:2d:15:d4:
ab:ea:0b:78:4c:f3:9f:6c:a7:35:a4:db:d1:ed:94:
80:99:e5:75:04:16:5a:02:33:82:5f:20:2f:72:72:
b7:2f:13:70:46:c0:cc:fa:b7:28:a2:b6:41:46:36:
78:51:92:63:36:f8:53:1e:9c:7b:5c:09:0d:32:b0:
db:dc:96:13:02:8e:b5:fb:89:7e:ee:ef:99:6c:37:
67:5f:6a:3d:6a:6f:89:78:3f:2d:78:05:de:01:9c:
4e:5e:d6:91:09:19:b0:13:65:04:3c:e5:ba:43:26:
cd:5a:fc:18:fb:72:7e:b8:04:b5:b6:b5:2c:40:ff:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:13:42:2D:2F:85:3D:06:D3:FF:02:30:8C:A5:E2:1C:50:C4:1D
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/4eYTQi0vhT0G0_8CMIyl4hxQxB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.47.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d1:08:09:c0:28:bb:21:52:58:66:ee:9b:5a:38:eb:b3:c0:
54:1a:4d:e6:b9:11:22:b9:57:a1:30:0b:1a:ec:34:1c:16:c9:
43:6b:8a:60:cb:d8:e1:c8:1b:ef:62:7e:69:24:62:eb:99:84:
c7:be:cc:56:fa:76:ec:7d:b3:86:f3:96:1a:99:5e:af:9e:21:
95:1d:2d:19:f3:82:f4:84:32:61:1f:bc:e5:a9:8c:69:bb:81:
ab:aa:70:66:b3:d6:78:fa:ce:a8:61:80:c3:59:74:0d:51:01:
95:4c:c8:c8:77:68:cf:8a:af:4d:0b:22:36:3c:7a:77:40:c3:
8a:ff:68:b5:4e:45:d2:2f:12:9e:3b:63:2f:d7:f7:94:ee:2e:
29:0f:e1:41:8a:84:0b:e1:fa:77:a6:36:2c:ba:62:85:6a:59:
0b:6c:eb:d2:94:84:9c:24:c6:5b:ff:02:91:cd:4a:0c:c3:7a:
c4:45:9f:6b:29:6f:c8:11:f7:4c:d3:e6:ee:c0:5c:32:81:06:
7b:b7:60:fe:8c:e3:20:29:83:46:6b:f2:ae:0c:a4:92:58:6c:
8f:20:5c:b4:c8:eb:bc:ab:37:3b:ec:32:2d:3c:4e:bf:d7:80:
95:2d:a0:44:56:b0:2a:17:d5:a2:88:2b:1b:b1:4e:8e:4e:3a:
8d:01:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:07 2023 by rpki-client on console-fra.rpki-client.org