Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B7nyOGEZMEAibPFLTcjCYAmIX10.roa
File: B7nyOGEZMEAibPFLTcjCYAmIX10.roa (raw, json)
Hash identifier: AH0F6zFWGGfZlG/Bg0pPGs0NoMFNTQY1Sv41Vak9HZw=
Subject key identifier: 07:B9:F2:38:61:19:30:40:22:6C:F1:4B:4D:C8:C2:60:09:88:5F:5D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1ABA27C9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B7nyOGEZMEAibPFLTcjCYAmIX10.roa
Signing time: Thu 21 Apr 2022 18:06:06 +0000
ROA not before: Thu 21 Apr 2022 18:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39081
IP address blocks: 85.120.56.0/24 maxlen: 24
85.120.55.0/24 maxlen: 24
85.120.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448407497 (0x1aba27c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 21 18:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07b9f23861193040226cf14b4dc8c26009885f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:12:e9:36:2a:f8:97:60:67:d3:99:08:93:
65:18:44:49:97:9c:5e:c6:4c:6c:a0:a6:54:23:c9:
14:28:db:bc:48:09:4b:75:7f:f1:98:9c:c8:41:04:
36:7c:7f:47:ce:a7:14:43:53:24:fb:49:2d:46:4e:
eb:8c:02:aa:62:e8:32:61:a1:5a:a7:27:4e:56:f9:
79:0e:96:85:dd:fa:69:18:f7:68:b8:72:ab:06:23:
49:24:8b:2f:40:9d:4b:23:b7:4a:d7:eb:1f:4f:34:
12:c2:19:3a:48:dd:93:33:17:af:ce:2e:57:bb:75:
8c:b1:f6:f7:4b:29:b1:7e:54:c4:e5:a0:4e:28:c9:
e2:b5:59:ad:17:00:48:51:9e:da:dd:bc:a7:7f:55:
e3:18:c5:f0:a3:bb:0c:57:e4:81:15:2e:85:dd:7f:
d9:1c:23:d3:14:b9:12:7e:31:e6:0d:24:80:77:9d:
69:52:d8:03:3b:8e:7d:39:30:c8:2e:82:7a:b4:eb:
5d:be:43:fb:3a:0b:e3:34:c5:af:0c:6d:5c:35:88:
8b:45:c4:f6:65:12:e1:b3:9d:be:da:d6:29:2e:21:
bd:88:7d:4f:7c:72:e7:74:58:18:bf:2c:ad:29:9c:
05:6d:49:c3:84:00:c3:c7:db:48:ad:d7:fa:25:e4:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B9:F2:38:61:19:30:40:22:6C:F1:4B:4D:C8:C2:60:09:88:5F:5D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B7nyOGEZMEAibPFLTcjCYAmIX10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.48.0/24
85.120.55.0-85.120.56.255
Signature Algorithm: sha256WithRSAEncryption
b7:e8:f9:92:f4:8d:c8:38:8e:b2:13:18:b2:49:37:1e:01:1b:
d3:44:5c:0e:2a:e0:b8:c1:14:9a:9c:71:af:af:79:c5:7d:98:
19:33:0d:3c:5b:b6:66:29:82:5b:a9:44:d1:33:81:eb:89:cb:
1c:7d:c3:73:db:50:f8:c7:ac:1e:c3:dc:ab:88:bf:58:a2:e3:
d8:d2:f7:b7:02:5e:9a:32:8c:d0:5b:f9:a9:ab:83:3f:c9:ca:
ba:da:3b:11:10:44:c6:39:36:15:f3:02:d0:fc:7b:62:11:e6:
86:2c:fb:61:b6:a3:e6:b2:98:1d:f8:7d:52:d6:fb:f3:5d:3e:
b2:6f:6e:73:f3:a5:76:87:6d:99:77:60:3c:7f:3c:b9:ca:2d:
27:42:24:30:d4:ae:96:67:87:31:56:1a:83:8d:e9:23:19:b2:
8c:2a:97:f2:00:76:f7:e3:26:2f:6c:0f:6f:af:5c:7e:a8:09:
e3:4c:36:49:18:75:79:a2:ed:7f:7b:34:2b:4f:0a:23:2c:85:
21:9a:f1:3c:83:be:70:59:30:7f:f9:70:40:a1:c6:44:2a:b9:
68:db:3b:9d:54:d0:2b:cd:5b:57:f4:88:1b:78:d3:e5:97:25:
f5:e5:a9:d2:57:46:2f:5e:82:f4:e1:ff:7c:47:b6:99:e5:5f:
dc:76:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org