Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y7XHgoC8QWnhZXvUd8kOw7C8V-o.roa
File: y7XHgoC8QWnhZXvUd8kOw7C8V-o.roa (raw, json)
Hash identifier: 86+CG6rNS5CkWR6QoHgFHGzwB36zEsTqhQ/5VK833Z8=
Subject key identifier: CB:B5:C7:82:80:BC:41:69:E1:65:7B:D4:77:C9:0E:C3:B0:BC:57:EA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01845141B024E264D0B836EDD96D7E13DB86
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y7XHgoC8QWnhZXvUd8kOw7C8V-o.roa
Signing time: Mon 07 Nov 2022 08:42:50 +0000
ROA not before: Mon 07 Nov 2022 08:42:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5606
IP address blocks: 217.156.47.0/24 maxlen: 24
217.156.46.0/24 maxlen: 24
85.120.19.0/24 maxlen: 24
85.120.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:41:b0:24:e2:64:d0:b8:36:ed:d9:6d:7e:13:db:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 7 08:42:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbb5c78280bc4169e1657bd477c90ec3b0bc57ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:90:0f:bb:ac:6c:f4:36:9c:31:83:1e:ca:
d9:f8:85:a2:4e:7c:f8:4d:7f:b7:34:ae:7d:35:83:
f4:16:cf:c7:aa:80:88:4a:6a:ae:eb:25:7b:0f:de:
03:d6:e9:b9:70:bc:3b:bd:f0:d8:be:97:72:90:a3:
30:a7:7e:1c:10:08:96:22:82:08:3b:b9:cf:95:21:
77:fd:fe:39:5f:54:c7:ce:55:dc:7d:4e:23:60:41:
65:c0:c0:17:8d:2e:e4:96:4c:7d:26:fa:81:e8:c3:
fe:bd:7d:2c:f4:e8:8d:fc:41:4a:d1:39:b2:da:32:
68:a8:c9:3d:60:d9:aa:01:fd:86:1f:7c:7a:83:b6:
fe:13:3d:43:52:70:af:d0:6f:f6:5a:e8:60:1f:10:
2b:e4:c8:c3:b3:38:48:56:b8:98:2a:07:af:eb:b5:
e0:f1:64:3f:8d:e4:93:a0:40:4d:d5:66:36:33:7d:
87:e5:b8:3e:d6:9a:c2:2f:f5:0b:9e:bf:d2:e6:67:
65:b8:20:99:fa:07:3e:64:2e:14:cc:31:40:ca:a4:
87:ff:ad:61:d1:69:25:ff:18:7d:83:88:80:c2:a1:
82:dd:24:5b:93:06:e4:4e:e9:d7:28:23:91:eb:3d:
be:20:c3:d4:2a:87:5a:e0:90:94:8f:30:f7:4e:87:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B5:C7:82:80:BC:41:69:E1:65:7B:D4:77:C9:0E:C3:B0:BC:57:EA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y7XHgoC8QWnhZXvUd8kOw7C8V-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.18.0/23
217.156.46.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:5f:69:fe:58:1a:20:b2:67:4f:75:d0:24:f1:54:1a:9b:2b:
15:e5:07:97:2e:1f:60:96:f4:55:0c:1d:e6:94:d8:07:ea:41:
53:7e:9b:93:f6:af:0a:bf:a4:a7:ec:cb:fd:c8:35:4d:e8:18:
03:ad:6c:3a:e7:30:ba:89:7e:2b:66:fc:43:9e:53:26:40:26:
f1:65:1c:d5:70:ed:10:e2:5d:52:1a:99:fb:34:32:cc:bb:95:
69:a2:f6:ec:ad:34:e4:b2:97:be:b0:cc:28:20:3f:b8:69:1f:
28:4b:b4:3f:e9:22:23:76:0d:4c:65:49:68:28:7f:3a:40:86:
2e:e7:46:07:27:24:f5:da:94:c4:11:d2:d4:95:b6:b2:0b:ca:
af:43:0b:6b:a9:15:95:98:ae:66:db:3f:9a:17:f0:71:ea:cf:
11:9d:09:12:2f:16:7f:f7:83:a3:7b:8f:e6:f8:13:f2:41:25:
e0:8a:23:70:0b:96:af:e2:c5:71:dd:e5:2f:5c:7b:2e:a7:61:
f3:4a:c7:fa:51:6c:7b:25:4d:f6:4a:21:d3:90:3c:eb:6a:cd:
7c:61:ca:ad:69:ab:78:a2:6f:4e:1a:8a:c9:2e:6f:a4:c6:68:
8b:5b:7a:87:c0:8f:1d:48:f5:74:78:e6:ac:d7:19:91:4d:96:
45:c7:61:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRRQbAk4mTQuDbt2W1+E9uGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjIxMTA3MDg0MjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmI1Yzc4MjgwYmM0MTY5ZTE2NTdiZDQ3N2M5MGVjM2IwYmM1N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKQD7usbPQ2nDGDHsrZ+IWiTnz4
TX+3NK59NYP0Fs/HqoCISmqu6yV7D94D1um5cLw7vfDYvpdykKMwp34cEAiWIoII
O7nPlSF3/f45X1THzlXcfU4jYEFlwMAXjS7klkx9JvqB6MP+vX0s9OiN/EFK0Tmy
2jJoqMk9YNmqAf2GH3x6g7b+Ez1DUnCv0G/2WuhgHxAr5MjDszhIVriYKgev67Xg
8WQ/jeSToEBN1WY2M32H5bg+1prCL/ULnr/S5mdluCCZ+gc+ZC4UzDFAyqSH/61h
0Wkl/xh9g4iAwqGC3SRbkwbkTunXKCOR6z2+IMPUKoda4JCUjzD3Toc1iwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMu1x4KAvEFp4WV71HfJDsOwvFfqMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEveTdYSGdvQzhRV25oWlh2VWQ4a093N0M4Vi1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVXgSAwQB
2ZwuMA0GCSqGSIb3DQEBCwUAA4IBAQBqX2n+WBogsmdPddAk8VQamysV5QeXLh9g
lvRVDB3mlNgH6kFTfpuT9q8Kv6Sn7Mv9yDVN6BgDrWw65zC6iX4rZvxDnlMmQCbx
ZRzVcO0Q4l1SGpn7NDLMu5VpovbsrTTkspe+sMwoID+4aR8oS7Q/6SIjdg1MZUlo
KH86QIYu50YHJyT12pTEEdLUlbayC8qvQwtrqRWVmK5m2z+aF/Bx6s8RnQkSLxZ/
94Oje4/m+BPyQSXgiiNwC5av4sVx3eUvXHsup2HzSsf6UWx7JU32SiHTkDzras18
Ycqtaat4om9OGorJLm+kxmiLW3qHwI8dSPV0eOas1xmRTZZFx2H7
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org