Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ky5h27LkT4YgGEgVlQgGGeN1b4Q.roa
File: ky5h27LkT4YgGEgVlQgGGeN1b4Q.roa (raw, json)
Hash identifier: gIGJaAE3RyaisTwhc5INY+cLWhR2ggUt0HPNlvgGNO4=
Subject key identifier: 93:2E:61:DB:B2:E4:4F:86:20:18:48:15:95:08:06:19:E3:75:6F:84
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1A65EC3E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ky5h27LkT4YgGEgVlQgGGeN1b4Q.roa
Signing time: Fri 25 Mar 2022 14:07:34 +0000
ROA not before: Fri 25 Mar 2022 14:07:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12310
IP address blocks: 85.120.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442887230 (0x1a65ec3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 25 14:07:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=932e61dbb2e44f862018481595080619e3756f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:7c:ea:36:1a:4f:11:fa:5c:40:e4:18:85:
51:fa:cf:67:a6:90:9a:fe:e2:ff:8a:f1:33:04:0b:
d8:60:2a:17:b0:9a:27:a7:2f:a4:8f:66:27:69:49:
79:ce:06:e9:3c:e9:de:bf:ff:6c:70:05:53:86:a6:
fe:02:61:7b:43:53:3c:2f:93:c2:5b:34:f4:5a:bf:
0f:d9:61:6e:b1:6b:48:41:54:93:c4:56:b0:81:d6:
6a:50:24:99:64:4f:b7:74:8b:54:1a:23:78:4a:18:
33:e8:bf:5a:81:c0:96:c3:9d:b2:17:4f:66:eb:5d:
e8:72:b4:24:84:c7:57:c8:41:91:76:0e:0f:ea:38:
48:31:16:d8:df:3a:cb:08:66:96:71:6f:e7:14:d1:
d2:76:c0:ef:6e:a1:c3:da:9b:da:7f:2d:49:e1:c9:
37:bb:5b:5c:14:aa:84:11:bb:4b:d3:f6:14:05:9d:
7d:bb:3f:3c:52:ae:c9:97:01:bb:c3:f8:2f:ab:33:
62:10:51:2e:eb:e5:df:18:53:68:fe:36:30:2f:0e:
47:f5:1b:75:92:3a:a0:22:41:6a:da:99:67:0c:6b:
c8:93:f9:20:62:01:17:09:a7:03:a9:b3:a4:92:95:
bd:f5:2b:08:dd:f3:41:4f:f9:7e:43:30:0a:3f:2e:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:61:DB:B2:E4:4F:86:20:18:48:15:95:08:06:19:E3:75:6F:84
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ky5h27LkT4YgGEgVlQgGGeN1b4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.152.0/23
Signature Algorithm: sha256WithRSAEncryption
90:61:83:78:07:03:9a:e0:b8:a0:65:8e:3a:3e:fa:e9:1b:bb:
63:af:7f:65:f8:7e:79:9c:f3:90:9f:65:63:78:ec:b3:8a:4f:
b7:7b:4d:b9:7a:a2:a5:e8:0f:72:8c:b1:54:db:23:93:08:82:
51:ad:fe:5c:70:aa:66:20:be:fc:c2:e1:9c:da:3c:55:5d:73:
a6:74:72:f1:c6:d1:f0:fa:3a:64:de:cb:fe:23:9e:9a:97:8c:
46:0a:6e:7c:d3:61:f3:e0:64:41:0f:d6:3a:ea:cc:ed:b2:a0:
5a:34:92:06:ae:48:2b:53:a2:c7:36:a8:23:49:46:eb:ca:9f:
0a:a5:a7:6c:e2:8f:d0:45:64:92:67:c1:f7:41:02:7a:eb:6c:
38:0e:63:7b:21:7c:15:54:2a:94:30:66:ec:5f:76:95:0e:6f:
84:b9:aa:b3:5a:2d:d4:5b:16:bd:ac:8b:01:e1:03:96:5c:fe:
26:8b:76:ca:6e:a4:11:bd:ae:10:bd:2f:c4:20:21:c8:e4:f9:
f8:c5:7c:8d:3b:99:6b:8a:13:3e:46:08:1f:6a:94:43:33:4b:
2b:95:25:6e:c8:cb:c6:c6:16:b9:3c:82:ca:d8:96:ff:42:00:
c1:44:ab:76:00:b9:4d:dc:94:0b:5a:c7:0a:87:01:d0:d8:e2:
ea:7a:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org