Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/bEx5VRM9vmRT1uUW7GTg8AqUztA.roa
File: bEx5VRM9vmRT1uUW7GTg8AqUztA.roa (raw, json)
Hash identifier: Np88nvqCLDeBERzq7gVn3pwkNZ4B03W28B5KN6KJ1Ko=
Subject key identifier: 6C:4C:79:55:13:3D:BE:64:53:D6:E5:16:EC:64:E0:F0:0A:94:CE:D0
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 056C285F
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/bEx5VRM9vmRT1uUW7GTg8AqUztA.roa
Signing time: Sat 01 Jan 2022 15:07:21 +0000
ROA not before: Sat 01 Jan 2022 15:07:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54103
IP address blocks: 85.203.48.0/22 maxlen: 22
85.203.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90974303 (0x56c285f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c4c7955133dbe6453d6e516ec64e0f00a94ced0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:2e:68:f7:92:c6:a1:ab:25:14:a0:d1:76:
3c:04:d5:5e:75:7d:b1:6c:bc:ed:27:4e:59:89:1a:
67:ef:3d:58:c3:64:7d:06:a5:0f:2a:7c:c9:33:de:
42:03:69:66:de:12:49:f8:ad:a4:81:ca:ec:2b:c7:
87:54:dd:1b:db:72:ae:8f:fb:e0:93:f7:9c:1e:03:
fd:4d:ed:cd:46:f4:dc:03:81:b0:4f:68:32:83:9e:
12:1d:50:b8:52:05:9e:1d:4d:23:f3:36:9b:ce:13:
d6:c1:bf:75:6e:4a:0d:2e:33:44:a1:b7:ec:22:0c:
f0:de:b1:07:0e:1e:b1:f8:e3:42:d2:c3:16:ea:d4:
0b:15:ea:ee:c9:11:1d:6f:97:50:65:cd:ee:32:ae:
ea:06:86:fb:ed:1a:df:3f:79:77:84:0d:3e:67:50:
dd:5e:6c:92:bc:29:b6:d3:45:d2:3c:3b:38:6b:94:
62:68:b6:a2:51:ca:cf:39:4d:1a:b1:be:50:d1:ab:
1a:25:49:67:99:69:b0:f9:51:c1:60:de:3c:89:cf:
b8:85:29:55:3e:25:90:c7:08:99:c2:1f:5b:91:6c:
99:f5:25:2f:8d:24:2b:01:36:ba:f9:64:36:75:f1:
e9:cc:a5:8b:7b:79:5c:e0:96:35:64:6b:96:10:65:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4C:79:55:13:3D:BE:64:53:D6:E5:16:EC:64:E0:F0:0A:94:CE:D0
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/bEx5VRM9vmRT1uUW7GTg8AqUztA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.48.0/22
85.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:2e:b7:ba:71:76:aa:d8:67:ea:6a:3d:ed:21:48:69:2b:28:
d4:d2:d4:a2:82:01:54:d5:1d:94:1a:2e:8c:91:c4:0a:da:c2:
c8:77:03:c3:42:ff:79:d9:ad:b5:9a:f0:c7:83:62:89:3a:05:
ba:38:32:0d:a9:30:c1:58:f9:73:49:77:1b:64:96:9c:b9:04:
92:99:84:80:17:68:56:a6:e8:3b:02:80:e3:ae:57:cd:29:f2:
4f:a4:c5:c7:90:7b:40:b7:be:87:07:d3:a0:cd:f7:a2:25:9b:
36:d9:6c:8a:f1:72:aa:3f:86:a6:f9:b9:84:71:43:c8:1d:41:
99:2b:94:ce:6b:39:de:68:94:a0:eb:37:63:41:39:1e:e9:99:
ba:53:be:6c:6a:42:69:43:20:4f:5d:c3:51:5f:94:a1:19:17:
6b:ec:1e:f9:08:8c:bd:c9:eb:a1:31:fb:9b:61:5e:cf:29:65:
98:1d:3c:a5:1b:b0:b9:4f:d5:c6:d2:1e:5d:88:28:33:12:3a:
a7:b7:dc:f3:bd:c7:22:86:44:8f:36:b0:86:a4:cd:19:e3:a9:
92:67:e9:3b:cc:20:71:7b:b7:3a:fa:74:66:01:4c:8b:bf:5b:
09:7e:85:a6:61:e4:86:8a:27:94:f3:5b:48:e0:73:5d:7e:a5:
87:c7:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:07 2023 by rpki-client on console-fra.rpki-client.org