Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/S73ggxmFUEt3vy0MzWSQv5UQZm4.roa
File: S73ggxmFUEt3vy0MzWSQv5UQZm4.roa (raw, json)
Hash identifier: qQjQcrm89vQ1xz89Fw4EAnJh3LQ6hyis5g+8Ako72zA=
Subject key identifier: 4B:BD:E0:83:19:85:50:4B:77:BF:2D:0C:CD:64:90:BF:95:10:66:6E
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0572EE3E
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/S73ggxmFUEt3vy0MzWSQv5UQZm4.roa
Signing time: Sat 01 Jan 2022 15:07:24 +0000
ROA not before: Sat 01 Jan 2022 15:07:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210979
IP address blocks: 85.203.17.0/24 maxlen: 24
85.203.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91418174 (0x572ee3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bbde0831985504b77bf2d0ccd6490bf9510666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:63:2a:ea:e8:be:66:1e:6a:4d:e1:c6:84:
9b:0d:dd:28:bf:99:fe:17:75:bc:44:b8:18:5b:60:
79:bb:40:b2:72:4b:52:a6:87:53:12:cb:26:33:c1:
ed:de:a1:50:94:4b:cc:d5:1b:83:33:e2:07:9b:bd:
3c:ce:3f:1f:10:78:0c:ed:55:ae:99:65:64:2b:27:
7a:43:80:01:5a:17:d3:d8:7b:51:1a:58:8e:70:39:
c6:0d:45:96:e6:25:4c:dd:26:8a:01:e4:96:12:80:
95:d1:67:98:6d:45:3b:39:e6:53:64:ef:68:95:3b:
b9:95:58:ac:26:69:7a:14:1c:24:54:47:ce:49:b8:
fe:04:17:1f:27:14:20:53:5f:9f:38:da:c4:82:2b:
ba:af:0c:46:30:5a:5f:d5:f0:20:c5:b3:94:c0:a9:
34:97:c6:70:c5:d9:27:2a:15:b2:12:0d:ff:19:ea:
14:46:06:b0:3e:3d:ba:fa:5c:15:47:db:89:28:b7:
db:d0:f1:a1:7f:14:24:81:f5:cf:3e:7a:05:11:92:
60:d7:cd:4e:3b:6a:4c:21:0b:01:fe:2e:46:d0:f2:
57:17:31:31:20:77:45:ca:fc:5f:11:1d:9d:d2:76:
4e:29:d1:a8:a4:7a:75:4a:93:ec:9f:e9:47:c1:36:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:E0:83:19:85:50:4B:77:BF:2D:0C:CD:64:90:BF:95:10:66:6E
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/S73ggxmFUEt3vy0MzWSQv5UQZm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.17.0-85.203.18.255
Signature Algorithm: sha256WithRSAEncryption
07:9b:f5:ee:85:58:c7:ee:04:b4:1a:14:f6:ed:1e:cd:e2:06:
e0:8e:62:b8:af:9b:54:4e:cc:75:96:f9:af:1f:4a:78:6d:1a:
ff:95:8f:a3:7d:ef:b8:cf:61:4b:69:1e:9b:57:2d:79:ce:d1:
04:0b:a1:84:4e:54:ad:56:ca:5e:5b:2a:01:1b:d4:07:d3:0b:
4e:75:9f:c4:1c:e6:05:7c:5b:9e:62:bd:48:54:a4:a8:93:09:
56:4d:14:98:b4:74:fa:32:a1:ee:2e:eb:91:bc:7b:4f:8c:89:
71:dc:04:4f:08:23:1b:6b:35:a6:b7:ca:9f:a7:31:76:81:e8:
7e:ab:3c:2a:1f:df:33:cd:56:94:be:bd:0f:6e:4d:91:b4:be:
9e:84:e7:ed:f1:4e:f8:6c:0b:a2:f4:47:be:58:20:c4:ac:80:
10:eb:4f:2c:52:f4:a4:7c:a9:b9:75:ec:67:78:52:c9:bb:b8:
5e:4e:9a:ea:9a:0a:bc:da:c0:f5:95:77:68:7f:a0:1a:bc:a7:
cd:be:8f:e3:d5:50:27:45:b0:b5:3b:90:cd:3b:10:03:55:20:
eb:ac:58:07:0d:bc:99:29:06:03:cc:1e:c6:02:e0:89:a3:80:
b8:9a:06:c0:24:d4:6d:69:df:a6:4d:5c:fc:33:e3:f3:7d:5f:
6d:0c:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:07 2023 by rpki-client on console-fra.rpki-client.org