Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7MTT1qJg9NNoqkZUogYUSzaYnN8.roa
File: 7MTT1qJg9NNoqkZUogYUSzaYnN8.roa (raw, json)
Hash identifier: cmnXSx3fsCmtwrxAdNj4W5djK0+x0ORPdZ/2aJoIa+s=
Subject key identifier: EC:C4:D3:D6:A2:60:F4:D3:68:AA:46:54:A2:06:14:4B:36:98:9C:DF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0183D6933B621B88B7E3AD7B93D4A32CDE22
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7MTT1qJg9NNoqkZUogYUSzaYnN8.roa
Signing time: Fri 14 Oct 2022 12:58:36 +0000
ROA not before: Fri 14 Oct 2022 12:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199513
IP address blocks: 85.120.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:93:3b:62:1b:88:b7:e3:ad:7b:93:d4:a3:2c:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 14 12:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecc4d3d6a260f4d368aa4654a206144b36989cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:9e:90:af:d7:32:51:25:eb:6f:2d:e6:9c:
06:78:8e:76:4d:02:5e:82:4b:b5:bf:46:e4:3a:01:
ea:5a:45:fe:20:f7:a1:9f:2c:d5:ed:15:b8:2e:a6:
46:9d:aa:5c:73:cd:cc:91:c7:05:16:81:c1:9e:d2:
f0:57:b5:68:88:7f:23:35:24:05:60:d2:07:8f:e1:
5d:6c:51:f5:45:89:8f:7a:9d:12:0f:eb:20:3f:8c:
84:74:a0:b0:e2:32:7a:33:54:34:1e:5d:12:18:0e:
3c:a7:d1:21:6c:7c:b4:98:fc:02:43:8b:43:fe:4a:
d5:4d:8d:24:78:ca:ae:2f:51:19:50:f7:86:fd:b8:
16:76:aa:5c:97:62:da:1e:aa:9a:7e:3e:d5:c4:63:
4c:d0:d1:84:bd:4d:68:14:d6:50:ec:ac:9f:b3:be:
19:b6:a2:e7:12:aa:fc:d2:64:fa:19:e3:3c:6b:18:
c6:93:7e:c9:32:fd:8a:35:33:77:6d:9a:86:fe:60:
98:21:d3:32:d8:ea:77:db:09:b9:01:7b:c3:27:88:
c1:e9:ed:f7:19:f4:91:89:ea:4f:c6:c3:f9:a7:ae:
13:3c:13:a0:ec:9f:70:3c:8b:89:f2:70:59:08:5e:
0c:d4:b4:4e:74:9e:3a:d0:08:9f:12:e7:98:ce:0f:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:D3:D6:A2:60:F4:D3:68:AA:46:54:A2:06:14:4B:36:98:9C:DF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7MTT1qJg9NNoqkZUogYUSzaYnN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:7d:60:42:12:ad:3c:15:58:5c:8c:a7:b3:56:88:60:e1:94:
a0:ab:a1:e3:dc:d6:07:94:c7:12:9d:83:46:05:1f:12:9f:5c:
c0:ae:59:fa:70:b2:11:a5:e9:dd:0d:6d:81:ab:de:79:de:92:
54:44:41:bf:69:b3:4a:10:0f:b1:33:32:fb:45:67:67:de:b0:
17:93:5c:49:c4:31:ea:5e:e3:e0:ee:26:ab:de:53:7d:30:ed:
4e:a5:fc:db:1e:f8:d1:c6:5d:b9:59:e8:14:ba:89:10:44:84:
f5:42:2b:9d:16:9b:49:c2:d8:c0:04:2e:c4:36:20:0a:74:07:
c4:cb:61:7e:9f:6f:97:08:42:20:22:73:d4:a4:5f:d7:62:70:
36:fa:29:27:ee:86:90:59:2c:02:63:6a:00:ad:0d:f9:42:e6:
c3:0d:38:d1:e9:56:49:d3:bb:6b:f9:d4:b9:7f:01:51:35:49:
19:af:55:05:e0:fc:e6:de:ee:84:ad:1e:2e:24:2b:d6:8a:7f:
88:65:07:dd:07:d2:fb:31:f4:9c:eb:92:2a:a5:0b:ab:c1:13:
b0:e3:c2:c0:2d:70:f6:c8:bd:d2:82:53:1d:a9:37:60:f1:aa:
32:1e:7d:2e:ba:54:b3:da:af:b0:38:35:49:13:48:c0:c8:9d:
a3:6e:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org