Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XYuSy3xJKJODZbKVXVu-vSr174Q.roa
File: XYuSy3xJKJODZbKVXVu-vSr174Q.roa (raw, json)
Hash identifier: tePde2w/nOgPdc/Bbiu8GkpK1ny97iY4NCUbN9ciC4Q=
Subject key identifier: 5D:8B:92:CB:7C:49:28:93:83:65:B2:95:5D:5B:BE:BD:2A:F5:EF:84
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 38819EC9
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XYuSy3xJKJODZbKVXVu-vSr174Q.roa
Signing time: Sat 01 Jan 2022 05:54:18 +0000
ROA not before: Sat 01 Jan 2022 05:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42979
IP address blocks: 85.254.1.0/24 maxlen: 24
85.254.3.0/24 maxlen: 24
2a02:610:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948018889 (0x38819ec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d8b92cb7c4928938365b2955d5bbebd2af5ef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7e:c6:1e:77:4e:a5:a2:40:16:5e:e3:d7:9e:
cc:6f:5a:f2:1a:6d:a9:1b:4a:11:13:24:9c:ec:22:
31:c2:79:64:e7:a9:c0:e3:0d:5e:fc:8c:28:70:8f:
fb:3d:9e:cd:13:25:85:11:a2:45:61:5a:d5:06:e2:
cf:56:0b:fc:67:ed:4c:62:b0:13:35:c3:2a:85:ff:
3d:b9:e9:65:c6:a7:55:9e:03:98:fc:3e:af:e3:6e:
63:ac:f6:73:1c:84:34:cc:e0:b6:8a:8c:71:f5:a5:
6f:a5:e9:ab:ad:c7:74:a5:58:59:45:65:35:91:39:
1a:40:d1:11:dd:a7:6c:cc:ae:fe:43:ce:ce:63:7a:
6f:91:a9:ea:e6:36:6f:fc:e2:4f:f1:03:db:80:fa:
bc:2a:e0:1b:8a:03:15:b2:84:b9:40:01:b5:88:0b:
ab:83:49:e8:ab:9e:91:b5:a1:65:74:50:2d:17:d4:
ae:81:b3:1b:16:b5:49:93:84:c2:96:da:3b:3f:2f:
75:fe:56:2f:9c:9e:a6:3b:94:41:23:7f:e8:da:29:
07:80:96:aa:93:30:8c:67:9d:4c:2e:87:f6:b0:42:
f3:31:d5:be:89:b7:ba:c4:2d:c1:d9:87:07:f0:87:
31:eb:96:ae:14:cf:04:29:91:f4:91:2b:92:71:5d:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8B:92:CB:7C:49:28:93:83:65:B2:95:5D:5B:BE:BD:2A:F5:EF:84
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XYuSy3xJKJODZbKVXVu-vSr174Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.1.0/24
85.254.3.0/24
IPv6:
2a02:610:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9e:35:10:d0:cc:dc:51:65:99:cd:de:6a:a7:84:07:10:af:
be:d9:ef:21:7a:f8:f9:5b:99:7d:71:b1:ca:a3:b8:ac:c3:7e:
2e:00:62:cc:24:12:94:6e:7a:96:4f:7f:db:1e:33:86:72:ab:
6c:25:f5:5d:35:ab:52:a1:4c:6f:6f:e5:6e:a9:4f:14:f7:22:
22:a1:39:c1:57:09:0e:9a:bc:82:ee:ab:3e:c9:2e:e2:54:9f:
ae:37:45:17:5c:ad:7d:a9:6e:f0:79:5a:a7:e0:18:8f:4a:6b:
cd:8c:e2:00:4a:b8:46:c4:d4:a0:5b:94:c2:44:04:23:81:8e:
e4:6e:ba:1f:b5:07:6e:db:1b:52:f7:3a:a0:bd:8f:8a:23:6f:
c8:6f:ec:fc:d9:7f:47:65:6e:f7:49:e0:55:1f:41:c3:02:f1:
24:e6:be:c0:b5:12:e9:31:cb:5b:ce:3c:16:4f:31:a6:9e:df:
55:de:8d:3a:94:53:42:ce:92:2c:b1:14:c6:f3:6b:0b:45:65:
92:b9:50:5b:3b:e1:81:5a:af:fe:fc:9f:a3:6b:67:70:d4:34:
fd:8c:0b:d6:57:25:18:d8:24:22:f7:8f:27:10:9d:06:b8:44:
eb:60:90:3b:43:8e:27:0c:53:17:b8:43:55:f2:aa:b1:d4:54:
26:22:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org