Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RGuFULcAt9bY1VTatu_YaIq7g_s.roa
File: RGuFULcAt9bY1VTatu_YaIq7g_s.roa (raw, json)
Hash identifier: 5176oCWFleiAdWkQzHmS67jrgQj9caJNOkSf+iD3+OY=
Subject key identifier: 44:6B:85:50:B7:00:B7:D6:D8:D5:54:DA:B6:EF:D8:68:8A:BB:83:FB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B71903B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RGuFULcAt9bY1VTatu_YaIq7g_s.roa
Signing time: Thu 02 Jun 2022 10:16:20 +0000
ROA not before: Thu 02 Jun 2022 10:16:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42568
IP address blocks: 85.121.180.0/23 maxlen: 23
85.122.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460427323 (0x1b71903b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 2 10:16:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=446b8550b700b7d6d8d554dab6efd8688abb83fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:31:95:a8:18:3d:e2:05:f8:e6:17:ee:69:db:
ac:6d:73:02:67:64:8a:7f:aa:1c:e2:a4:5c:70:fa:
35:43:b9:19:ba:72:84:b5:11:f4:92:fc:bb:f4:3c:
e5:7d:09:d9:eb:cf:fa:a5:15:78:db:2c:de:68:d9:
ed:d8:78:dc:8e:12:ed:df:0c:36:36:b0:cf:b2:5e:
6a:55:54:42:32:29:de:30:a6:c5:73:79:e1:4a:a4:
13:ad:0e:ff:d2:a1:18:49:20:ae:7e:48:f5:e0:78:
c8:f9:a9:3a:dc:5a:e6:0f:8d:16:d1:c5:43:65:58:
a0:35:67:4d:7b:72:3a:8d:c2:60:e3:64:4e:5a:4a:
cf:83:af:ee:89:ab:c6:e4:84:4a:8c:60:e7:30:23:
92:ca:ed:8c:6e:33:16:66:5a:ca:cf:22:5c:81:8e:
f7:1b:8b:a7:4c:ec:df:bb:7e:19:1e:d4:68:14:49:
90:99:09:67:76:dc:bf:86:44:85:47:48:2b:64:06:
fa:47:a1:56:16:34:66:af:3f:93:e9:ed:26:52:99:
a6:2b:0b:1c:5e:43:88:36:aa:76:60:ff:98:55:1b:
ce:f1:b4:8a:08:f7:4e:62:15:40:03:1f:18:7e:c7:
8d:ac:bc:89:d7:81:37:b3:06:e9:cd:75:09:1b:08:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6B:85:50:B7:00:B7:D6:D8:D5:54:DA:B6:EF:D8:68:8A:BB:83:FB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RGuFULcAt9bY1VTatu_YaIq7g_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.180.0/23
85.122.44.0/23
Signature Algorithm: sha256WithRSAEncryption
10:82:a8:83:bf:9f:c2:61:91:fb:be:7a:6d:0f:7e:9f:57:38:
2a:8c:c0:bd:ee:e1:58:a6:f2:6f:2b:cb:13:5b:12:ae:6e:11:
82:79:d4:12:0a:b7:25:52:7e:8a:7b:cf:f5:50:68:24:8f:bd:
ec:1c:a2:5a:bd:d9:55:b0:13:b9:b5:ce:4c:1f:3d:76:12:04:
eb:6a:4b:ed:60:5b:d5:cd:f0:f4:41:55:a8:0c:09:89:52:e0:
e9:25:f2:f4:26:34:6b:71:98:55:00:6c:5f:ab:89:0d:df:80:
4a:e6:42:a3:e2:e1:d6:52:2a:53:ad:ca:51:8b:e0:cf:36:b0:
46:dc:25:8e:dd:97:63:97:8b:51:28:e2:3f:d7:9a:56:1d:42:
0b:cb:35:a1:8a:25:53:db:f1:f9:e6:9c:e8:bd:5c:c2:ea:1a:
67:a6:99:80:a0:3e:a7:18:47:43:90:26:84:5b:5c:54:a1:65:
2d:7a:ce:ad:63:8c:ae:3d:c2:fb:4d:cf:a2:95:cd:a1:2c:7e:
de:98:56:e2:36:7a:a3:24:31:a5:f7:d2:4e:79:25:46:8c:ce:
87:4b:6e:f4:d4:f5:2f:8b:29:81:a1:23:57:d6:64:c8:b0:bb:
b9:e7:e9:c9:32:60:2e:63:bc:88:92:57:89:59:2a:91:f1:ed:
67:a8:3b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org