Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-G2abwSqR2ElKbQ4crvpb7b9H-M.roa
File: 1-G2abwSqR2ElKbQ4crvpb7b9H-M.roa (raw, json)
Hash identifier: eVo7zGia5OIQX2yDnaWh2AY5RlpZLg4CpLQfsSQloqI=
Subject key identifier: F8:6D:9A:6F:04:AA:47:61:25:29:B4:38:72:BB:E9:6F:B6:FD:1F:E3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B4977CA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-G2abwSqR2ElKbQ4crvpb7b9H-M.roa
Signing time: Thu 26 May 2022 17:05:38 +0000
ROA not before: Thu 26 May 2022 17:05:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62445
IP address blocks: 194.102.241.0/24 maxlen: 24
85.120.246.0/24 maxlen: 24
85.120.244.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457799626 (0x1b4977ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 26 17:05:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f86d9a6f04aa47612529b43872bbe96fb6fd1fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:d4:87:1d:17:d2:28:7a:5a:9b:87:57:ad:
8d:27:a7:67:f7:8a:0b:23:8a:bd:84:67:12:ee:5d:
a2:28:27:c9:47:dc:ee:5c:2f:9b:67:75:03:be:8a:
88:ce:ec:0f:15:46:29:d0:1f:f0:0b:1c:66:10:0d:
5c:43:9d:6d:f1:e1:08:52:95:75:18:22:8e:0b:b9:
eb:b8:65:0e:7a:fe:4d:87:fb:4f:6d:ae:61:9f:c7:
04:2f:1d:88:ca:86:8d:ce:c6:d5:e6:5f:aa:f2:08:
54:57:8e:18:c5:56:6c:31:f1:8c:67:e6:72:b5:d9:
69:d4:9d:94:fa:1b:ee:b8:53:15:1d:af:90:96:09:
8e:ee:2a:69:13:16:3e:ae:49:d4:1a:44:7c:93:d2:
a8:f4:7c:98:c2:48:b0:26:69:99:d2:18:b2:e0:e3:
b3:bb:eb:e1:b3:77:38:87:8c:40:9b:61:19:cf:14:
6f:51:37:e4:ee:77:27:33:f2:ee:87:26:00:9d:ab:
41:53:a2:50:8d:0d:04:f5:8b:d4:80:5a:a6:93:66:
f0:23:ea:ae:f6:e9:d4:ac:a4:e1:c5:5e:30:3f:57:
b4:00:a3:1b:5e:47:94:ed:6d:23:ec:e0:df:1d:e1:
d8:29:c3:14:84:18:2a:b3:e5:86:01:f7:bb:89:5b:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:9A:6F:04:AA:47:61:25:29:B4:38:72:BB:E9:6F:B6:FD:1F:E3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-G2abwSqR2ElKbQ4crvpb7b9H-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.244.0-85.120.246.255
194.102.241.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b8:4a:a0:90:fe:79:80:1f:01:ce:b9:bb:59:46:03:ed:56:
0e:29:67:30:f3:bd:c4:1b:f4:24:72:40:94:65:1e:8f:71:ba:
8d:e5:aa:7f:41:3f:0e:48:cc:83:f4:3c:0b:5c:d9:55:1c:08:
ba:46:61:61:7e:66:b4:d4:90:43:c4:74:a4:8e:f0:e1:60:3f:
d2:75:91:8b:19:bd:04:ec:8a:10:1e:dc:3a:1a:32:9e:85:34:
f5:39:09:5c:da:91:f1:c6:22:48:0d:fe:0e:f9:bd:8b:9e:c2:
12:21:17:88:bf:dd:62:8e:d0:2f:80:76:1a:f5:2c:42:19:12:
b5:70:da:10:6e:24:af:19:32:e2:3c:45:34:c1:41:c5:07:ed:
7d:66:1b:67:87:29:4e:a3:a5:28:fb:34:19:37:5f:b7:05:ef:
29:a5:1a:47:ba:e3:a2:a9:84:31:24:b9:0b:8e:98:4a:cd:e6:
62:92:59:a2:b6:8b:4b:16:d2:ad:a3:5c:bc:1a:8c:7e:23:ba:
32:c7:e7:5c:5b:1d:07:4c:7b:6d:eb:2b:66:69:d0:d4:d1:40:
e9:a2:0d:5b:0d:12:92:05:3c:47:28:42:4a:25:3d:1c:78:86:
95:61:a3:6b:b4:d9:d8:44:9f:91:10:d1:72:d5:f5:c7:5c:ae:
fb:db:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org