Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/b74igBbsHlfBQmdcj93zaKBNL_g.roa
File: b74igBbsHlfBQmdcj93zaKBNL_g.roa (raw, json)
Hash identifier: 9Lvu9AE/tVpHlqn75ZELh4lBnloFyFue/u/9COVjUfI=
Subject key identifier: 6F:BE:22:80:16:EC:1E:57:C1:42:67:5C:8F:DD:F3:68:A0:4D:2F:F8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01830DC6CACF469EE7DF77EF0824FA97B80A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/b74igBbsHlfBQmdcj93zaKBNL_g.roa
Signing time: Mon 05 Sep 2022 13:11:15 +0000
ROA not before: Mon 05 Sep 2022 13:11:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 85.122.112.0/23 maxlen: 24
85.120.12.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:c6:ca:cf:46:9e:e7:df:77:ef:08:24:fa:97:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 5 13:11:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fbe228016ec1e57c142675c8fddf368a04d2ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:99:d7:e9:f1:fd:2c:9e:d7:55:44:b3:c8:
f4:56:8d:f8:51:d0:69:05:5f:58:0f:96:57:62:c3:
04:b0:37:78:fa:1a:38:ae:b5:05:b1:d9:b6:3f:1e:
df:00:2d:0d:de:de:da:d1:97:ad:13:6a:f9:e4:72:
12:7f:77:0c:14:5c:65:a9:16:b8:88:27:b0:bf:7d:
c3:b9:04:bd:0b:0b:10:80:76:dc:2c:c3:f2:72:28:
c3:89:c7:4a:e6:6d:92:d4:59:95:83:b6:54:c2:9f:
02:f8:f4:80:5b:bc:11:49:c0:2a:ed:aa:ae:25:6b:
41:b1:8b:5f:7b:a4:23:ce:c4:d1:0b:e7:e1:00:42:
3c:d2:ec:c5:53:c9:fb:6f:b8:60:2e:35:89:47:58:
a9:8c:d8:f5:fc:58:6f:cb:31:3f:dd:f2:e7:19:b2:
03:e3:98:41:ce:23:ca:6c:5e:8d:4b:2e:c0:e1:64:
a2:e5:4d:1f:dc:28:35:6a:cb:0e:dc:d9:10:1b:52:
a0:a7:1e:42:c3:78:5d:ee:c2:94:aa:c6:7d:48:9d:
9f:a9:85:61:58:c4:6f:a0:06:69:98:dd:7e:c1:37:
1e:e5:07:bc:19:89:35:1b:e1:71:e5:ce:54:68:3f:
2b:e9:89:ff:6b:df:58:53:a2:ea:ed:d8:8b:ad:84:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BE:22:80:16:EC:1E:57:C1:42:67:5C:8F:DD:F3:68:A0:4D:2F:F8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/b74igBbsHlfBQmdcj93zaKBNL_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.12.0/23
85.122.112.0/23
Signature Algorithm: sha256WithRSAEncryption
65:ed:ec:57:da:ee:a6:1d:2a:3a:d3:db:a7:50:4f:5f:28:89:
36:7a:ad:cb:ce:c5:2c:a0:8a:54:12:b8:7b:51:08:69:17:25:
c3:3e:f3:bf:ff:d3:fd:c1:54:9e:a6:ee:9b:5c:4e:98:d9:94:
70:cc:ac:52:61:7f:2c:9a:46:e6:84:41:f1:58:32:55:db:c3:
b6:a0:07:28:a2:bb:de:44:72:5a:cc:97:e0:3c:fc:d5:68:9c:
94:7d:bc:c1:43:04:c3:9a:af:a8:75:0a:f7:27:f8:5a:89:9d:
4d:42:d7:44:dc:83:ca:a2:fb:59:e2:49:d6:98:4c:6e:d6:68:
34:90:5b:f6:a9:14:c1:75:1f:3d:7d:23:10:5f:e5:e7:13:b3:
14:3f:52:61:5f:50:b7:d9:a8:3b:1c:03:52:bd:42:f0:69:4f:
47:0e:d2:0d:4c:82:80:44:74:8b:7c:e3:3c:b1:bf:8c:66:ab:
9f:32:54:d8:60:c4:59:dc:52:56:d7:bc:73:33:6c:5e:2f:74:
dc:0f:65:8b:1b:db:59:ac:73:27:53:73:de:cf:35:df:9d:0b:
07:6f:b5:bb:9f:0c:02:f6:83:c3:75:f9:05:cf:40:bd:87:b9:
f4:51:8b:82:10:35:1d:86:da:15:a0:36:f3:f4:f6:8f:60:92:
3b:b4:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org