Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/g7tMQYEXimzmEaEGmOoX3s1Bi28.roa
File: g7tMQYEXimzmEaEGmOoX3s1Bi28.roa (raw, json)
Hash identifier: GGVTVU4oVXJkN67K8kO/zhF+Sgxesp3bDVolm7oqHFU=
Subject key identifier: 83:BB:4C:41:81:17:8A:6C:E6:11:A1:06:98:EA:17:DE:CD:41:8B:6F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183FF17B65B4F3219FBDDD15A58C810F261
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/g7tMQYEXimzmEaEGmOoX3s1Bi28.roa
Signing time: Sat 22 Oct 2022 09:48:07 +0000
ROA not before: Sat 22 Oct 2022 09:48:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 85.209.120.0/22 maxlen: 24
2.56.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:17:b6:5b:4f:32:19:fb:dd:d1:5a:58:c8:10:f2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 22 09:48:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83bb4c4181178a6ce611a10698ea17decd418b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:ad:39:4d:34:a5:81:fe:1a:8b:09:ba:81:
31:66:73:4a:72:90:06:7f:d8:a5:17:92:d5:a9:eb:
1c:e9:0c:4e:ec:84:aa:80:ce:71:1b:36:a5:2c:df:
0c:66:15:e1:c4:f9:f9:76:48:8e:a5:50:fd:38:20:
d6:53:86:a1:ce:a5:82:43:0d:a0:9e:51:56:f4:01:
2c:48:ec:ae:f9:2a:fc:77:8e:21:3a:10:35:4a:51:
40:5f:19:e9:84:2e:3e:06:0a:fe:0e:e4:11:d4:c5:
19:81:ee:5d:02:a2:b7:38:11:ee:cf:8e:f3:46:8f:
89:73:86:74:43:01:9e:29:55:0d:33:75:f5:e2:24:
23:af:d6:ce:cd:fc:3a:5b:e6:15:1d:c0:d5:b8:6b:
47:e2:92:97:f8:82:d7:fa:9e:80:52:2a:f2:7b:15:
19:32:09:2e:46:83:19:ad:47:7f:ed:38:1e:58:0c:
c3:28:9f:7c:d3:e6:3e:3e:41:b2:b2:d9:03:07:a2:
9d:d7:31:3a:bc:b5:af:e3:39:04:d9:1a:90:f2:5e:
15:61:e2:fb:28:b1:6a:b8:bc:5c:88:71:d9:59:2b:
6c:54:58:d0:c6:9c:c2:d1:f7:bc:35:89:80:03:bb:
60:f6:e1:ac:04:40:43:4e:4e:88:63:8a:02:6c:fc:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BB:4C:41:81:17:8A:6C:E6:11:A1:06:98:EA:17:DE:CD:41:8B:6F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/g7tMQYEXimzmEaEGmOoX3s1Bi28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
85.209.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c2:7d:40:ef:ed:85:1e:bf:35:c4:4a:17:14:3b:cb:0d:44:
c3:06:ee:13:f2:65:c4:93:9c:48:c9:74:8f:7d:1f:ca:f1:ad:
b0:3c:d7:76:83:cf:51:be:0f:c5:46:2e:44:c2:15:35:4b:be:
55:63:06:2f:ad:1b:70:32:e1:34:dd:69:f1:79:47:7f:3f:7a:
21:c5:97:c5:6d:46:82:2d:40:91:8c:25:38:34:76:cc:b4:ee:
b6:dd:72:a9:84:34:68:8c:19:be:b6:c8:43:67:34:33:d9:c8:
d6:16:f5:f4:37:fc:d4:9a:0a:7e:9f:04:ac:33:77:14:4e:1f:
1b:03:aa:41:bc:58:08:67:0b:f7:2a:aa:84:29:58:bf:5d:cb:
e3:88:e2:0d:d8:05:d5:1f:74:d5:f5:89:ef:c0:be:a3:17:6f:
f1:a4:8e:7d:01:06:7f:9a:3e:d4:27:a5:a1:7c:d8:25:77:fd:
47:db:44:d6:58:70:c6:7b:7c:50:0b:99:f2:7f:ce:3e:b7:f1:
66:c8:9c:84:3f:a1:2a:19:1c:65:0e:da:66:b4:1c:42:07:c1:
a7:0e:a7:26:b6:6e:29:44:06:cf:b3:13:37:1d:59:cf:f1:3a:
67:b6:4d:36:2c:db:93:49:c1:9d:96:e5:05:50:cd:7e:24:f9:
07:18:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org