Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9BnFd2jhzFbaLqF87XPolmkQuAs.roa
File: 9BnFd2jhzFbaLqF87XPolmkQuAs.roa (raw, json)
Hash identifier: 3ue2YIDJofFf0Q+5VaU2hDlPz8Sha71p8mANjR63RCE=
Subject key identifier: F4:19:C5:77:68:E1:CC:56:DA:2E:A1:7C:ED:73:E8:96:69:10:B8:0B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1ADA0EF4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9BnFd2jhzFbaLqF87XPolmkQuAs.roa
Signing time: Thu 28 Apr 2022 07:12:20 +0000
ROA not before: Thu 28 Apr 2022 07:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44148
IP address blocks: 85.121.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450498292 (0x1ada0ef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 28 07:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f419c57768e1cc56da2ea17ced73e8966910b80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:b4:10:3f:64:0e:e3:d5:fe:b7:8f:00:1e:
f7:86:9e:79:e7:6d:fe:73:ff:d3:61:97:5a:4d:5c:
62:11:47:db:7b:33:49:93:ae:4c:cf:3d:c5:8c:51:
f8:d2:81:05:06:cf:17:25:6e:ed:e4:61:08:57:94:
3d:c3:5a:1d:0f:75:7a:8b:22:40:e1:92:cf:97:db:
33:bb:a3:a2:a0:30:11:40:63:65:0d:64:64:0b:ff:
9f:15:5e:7e:9d:16:3b:dd:3b:bb:ec:dd:d1:67:dc:
21:b8:53:65:eb:97:66:c4:7c:dd:ed:13:24:fa:b1:
8a:c7:a1:53:f3:b1:89:ae:63:96:7c:c7:f7:7f:a4:
76:9a:d2:a5:35:c2:3b:a3:04:89:a9:d4:a6:53:6f:
dd:63:ca:2f:0a:8c:17:9e:0b:48:da:da:a1:52:08:
04:ef:20:b0:ae:d6:df:7d:b5:c9:06:55:6d:60:60:
6c:ad:76:fe:ca:7b:db:a3:e2:1f:4d:44:ca:61:1b:
53:82:aa:ab:73:e6:1a:04:7d:3c:be:2d:76:4d:8d:
b8:39:24:58:b8:d8:6d:85:ba:4b:35:f8:55:70:80:
01:55:6f:5f:46:8c:7f:5e:74:f6:b1:31:51:f6:39:
d1:f3:59:8a:7e:2d:55:6d:51:04:e4:0e:3f:7d:81:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:C5:77:68:E1:CC:56:DA:2E:A1:7C:ED:73:E8:96:69:10:B8:0B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9BnFd2jhzFbaLqF87XPolmkQuAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:90:ec:5f:75:1d:08:58:b5:f7:01:09:2a:22:85:2c:04:21:
1b:96:29:4e:53:9c:01:06:18:63:7c:59:ea:6b:ab:dc:2a:70:
47:af:fc:d5:f2:e4:c0:c9:ea:52:b8:0a:40:ae:8d:c9:e4:eb:
9d:cf:3b:bc:0b:f2:db:e7:9d:20:a8:b4:82:a0:60:12:99:7e:
e3:0c:e6:b8:15:ee:da:20:63:47:0c:c2:cb:14:6f:d8:3e:3b:
26:d1:65:df:f3:4a:27:f2:37:66:8f:4f:fb:a3:e8:ce:35:11:
bf:21:b5:9f:6a:57:55:b2:76:71:50:bd:21:92:d0:95:dc:44:
78:c8:9a:69:fb:b0:7b:64:b7:c3:b5:ec:12:46:24:2d:c1:67:
11:48:b1:d6:de:c9:fa:e5:bf:8d:d6:93:4b:98:d4:55:04:ba:
44:16:6f:2b:2c:c4:1a:d9:07:be:d8:2f:76:86:72:b5:8a:92:
7d:0c:da:a5:44:a3:77:a1:79:6e:dc:26:31:96:47:76:71:e3:
3a:48:64:70:7a:db:58:5b:d2:90:4c:9d:89:90:9b:9a:33:76:
75:86:76:ee:7d:c2:d4:05:e8:fd:3d:5a:d7:a3:69:8c:1a:18:
35:62:01:ac:7d:b9:6e:fc:04:fa:50:3b:f1:26:6e:97:cd:23:
79:4c:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org