Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SyRSFimyn075-EBsuSqOj1ZCat4.roa
File: SyRSFimyn075-EBsuSqOj1ZCat4.roa (raw, json)
Hash identifier: XTNvBgQQxqXlMxn5xZjo3DO354pwpov3Ld9LCCQqC9w=
Subject key identifier: 4B:24:52:16:29:B2:9F:4E:F9:F8:40:6C:B9:2A:8E:8F:56:42:6A:DE
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 38940928
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SyRSFimyn075-EBsuSqOj1ZCat4.roa
Signing time: Sat 01 Jan 2022 05:54:26 +0000
ROA not before: Sat 01 Jan 2022 05:54:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202221
IP address blocks: 85.254.31.0/24 maxlen: 24
85.254.146.0/24 maxlen: 24
159.148.174.0/24 maxlen: 24
159.148.173.0/24 maxlen: 24
159.148.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949225768 (0x38940928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b24521629b29f4ef9f8406cb92a8e8f56426ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:3f:e3:14:f2:c3:bb:e9:33:99:17:ee:45:
9a:5f:e1:8c:36:9f:ee:0f:6b:f7:bd:68:a1:02:da:
b4:77:b6:7b:cb:e9:5b:c9:f0:fb:1c:ca:0e:30:24:
14:0f:f3:89:63:bc:dd:7f:da:6e:d8:8e:2e:54:cd:
7a:d5:67:2d:6d:3b:9a:d9:f9:b1:f8:44:61:a8:80:
d0:fe:ac:0e:04:8a:85:93:26:8d:65:2c:fb:a5:36:
a0:37:7b:48:08:40:9f:94:d4:3b:e4:63:5a:63:96:
53:da:55:3e:12:7c:27:b7:64:ec:01:61:b4:e3:db:
73:c3:f7:16:a4:33:e4:fb:63:d4:66:b4:00:66:4e:
6e:3f:a7:42:25:43:12:d8:80:72:72:80:3f:8b:a8:
f8:4d:e0:82:a7:b3:76:b9:a9:eb:17:17:83:e3:08:
b5:38:d8:f2:f3:06:60:ca:b6:da:04:cb:cc:bd:9d:
a6:39:4f:27:4a:64:db:6b:55:de:c2:22:38:e9:5a:
51:32:b4:d4:33:f3:47:73:90:3d:44:54:43:8b:16:
54:57:34:de:55:d4:be:7f:ce:2d:74:19:4e:c2:85:
8f:67:0f:90:e7:a8:99:ae:68:6f:50:a4:ff:d0:9f:
0d:49:84:fe:2c:56:c1:ef:db:d7:36:b0:a4:84:fd:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:52:16:29:B2:9F:4E:F9:F8:40:6C:B9:2A:8E:8F:56:42:6A:DE
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SyRSFimyn075-EBsuSqOj1ZCat4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.31.0/24
85.254.146.0/24
159.148.104.0/23
159.148.173.0-159.148.174.255
Signature Algorithm: sha256WithRSAEncryption
67:d6:e9:69:07:67:1a:f9:83:fe:af:e3:e4:26:02:71:23:1e:
1b:2f:3b:0a:81:72:71:31:bb:d6:11:23:0c:96:40:24:ee:d9:
7a:5b:e9:f5:15:87:95:17:20:6a:34:03:f1:d9:54:ad:f7:8c:
3b:1b:ef:aa:65:f1:a1:e5:bf:90:ae:b7:41:99:7b:0f:ec:99:
8d:35:3a:fb:b1:08:9c:e7:c5:cd:3f:7b:b7:fb:cf:c4:2e:d4:
ea:a8:a8:3b:39:3c:96:07:b5:6f:bf:7b:84:ac:bf:17:e8:98:
a3:5a:a6:78:cb:54:c7:d8:fb:d3:8b:73:74:b8:19:bb:7e:01:
39:eb:ba:d8:d4:a6:3c:fd:41:0c:f5:8b:d7:be:b8:3d:77:ee:
60:82:5d:7d:ad:03:72:ce:17:f2:c7:ea:84:4e:7c:65:23:50:
49:9a:32:4c:2a:0b:72:bd:9f:82:bd:b6:9b:b3:44:47:71:d5:
8b:51:e3:2d:f2:20:95:3b:be:b3:ed:ef:8e:ee:40:3a:8c:c6:
c8:89:81:ff:b3:9e:82:06:09:b4:1a:ef:0a:11:4b:93:7f:19:
44:6d:c8:31:3d:d8:01:1d:79:9f:8d:e7:6e:ff:48:fc:fc:23:
1a:b6:33:17:39:b4:af:ca:89:ff:a4:0c:9e:72:a0:01:08:b2:
2d:4b:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-fra.rpki-client.org