Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4jna7i4HoArgXFMuOrSvinm3h08.roa
File: 4jna7i4HoArgXFMuOrSvinm3h08.roa (raw, json)
Hash identifier: Z87K1WeGzc1rwQWaB6q/B+NrxBDZKGxjCc7misf7eB0=
Subject key identifier: E2:39:DA:EE:2E:07:A0:0A:E0:5C:53:2E:3A:B4:AF:8A:79:B7:87:4F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B008063
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4jna7i4HoArgXFMuOrSvinm3h08.roa
Signing time: Thu 05 May 2022 18:59:22 +0000
ROA not before: Thu 05 May 2022 18:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44106
IP address blocks: 85.121.56.0/24 maxlen: 24
85.121.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453017699 (0x1b008063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 5 18:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e239daee2e07a00ae05c532e3ab4af8a79b7874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:8c:45:4b:8d:75:e5:91:01:4f:aa:a2:5e:
0f:37:dc:ca:32:cd:80:e1:02:e7:78:f7:58:8e:5a:
d8:81:d6:cf:b1:a1:e9:00:7f:a2:9e:c3:8c:ad:74:
02:14:3b:48:dd:a4:44:43:a7:53:5b:69:3c:ba:ef:
2c:26:a4:cf:fa:84:6c:07:81:03:d7:b9:cd:15:de:
8c:43:f5:db:7e:74:68:f0:a4:93:27:d3:32:80:a3:
8e:25:1d:1b:9f:da:37:1a:23:78:28:3e:e9:6e:05:
d8:be:99:3e:cd:3c:00:68:c7:98:84:1b:6b:9d:40:
0f:07:d6:ae:a2:4f:2c:70:54:c1:ca:bd:58:57:dc:
26:d2:e1:c7:9f:4f:24:81:30:f2:7e:2a:8a:c8:e6:
f3:1b:45:d0:78:13:ab:76:47:63:e8:19:e0:d7:22:
61:d1:72:20:79:82:ec:f6:eb:8a:cf:0c:e7:c4:8a:
05:4b:91:05:b5:20:ad:22:4e:a2:58:b5:2f:71:80:
0e:d2:73:3e:5c:3b:ea:6f:aa:8d:6d:5c:25:54:e3:
fd:a6:cc:bc:74:07:bb:4e:29:15:cd:ab:15:69:0d:
47:24:50:45:b5:e1:39:53:4f:61:a2:e2:c2:e0:56:
cc:2f:55:3c:c4:1a:08:e3:71:b7:45:2d:a4:10:a9:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:DA:EE:2E:07:A0:0A:E0:5C:53:2E:3A:B4:AF:8A:79:B7:87:4F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4jna7i4HoArgXFMuOrSvinm3h08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.56.0/24
85.121.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:d2:33:e8:79:a2:f4:07:95:86:75:5f:75:dd:e8:19:e8:43:
b6:5e:71:61:c1:a5:0d:65:61:3f:09:40:a7:ed:83:c0:4a:64:
a9:e9:63:2a:81:f1:6d:b4:4b:8e:e9:d8:84:8f:aa:fe:8e:10:
03:93:3b:08:74:83:90:95:87:88:6f:4d:6e:ff:59:9a:40:82:
b8:4f:7c:a9:ff:3c:c1:6c:23:e5:a1:3f:1e:80:8e:8e:02:dc:
09:ca:b4:47:a9:0b:9c:72:fc:38:3a:dd:5a:27:98:a5:7c:b1:
1e:39:01:12:a8:d4:ad:2a:c0:61:11:e4:28:73:04:f2:41:12:
e0:3e:f7:18:5e:e9:a2:29:0a:05:a3:89:77:2a:9a:29:0c:66:
61:6e:8d:3f:0a:a8:10:b3:5a:fe:ea:13:a2:d8:86:c1:ed:5d:
31:1c:23:b5:c7:bb:97:5b:fe:51:4b:da:b7:ee:7c:bd:5b:60:
f2:32:61:fd:6e:d8:29:81:ee:c2:01:6b:48:19:d9:24:24:5f:
5c:e9:20:2f:26:03:78:c5:4a:73:fc:25:0e:fc:8e:53:95:9b:
41:9a:ba:de:bf:76:4e:f0:39:99:36:f6:74:34:ec:3f:d2:0f:
37:08:2c:17:36:7d:12:2e:9e:88:f0:58:e2:81:6b:19:4a:9c:
c8:eb:57:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org