Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/obLEdPFRH6_1E9cLyzrSG5vYzqA.roa
File: obLEdPFRH6_1E9cLyzrSG5vYzqA.roa (raw, json)
Hash identifier: qQqMwiAlj79434PULuzG33fsYWncfPqYux7kbwhv26w=
Subject key identifier: A1:B2:C4:74:F1:51:1F:AF:F5:13:D7:0B:CB:3A:D2:1B:9B:D8:CE:A0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184005D6C512853CF011A6E3327A8880145
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/obLEdPFRH6_1E9cLyzrSG5vYzqA.roa
Signing time: Sat 22 Oct 2022 15:43:53 +0000
ROA not before: Sat 22 Oct 2022 15:43:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 85.209.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:00:5d:6c:51:28:53:cf:01:1a:6e:33:27:a8:88:01:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 22 15:43:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1b2c474f1511faff513d70bcb3ad21b9bd8cea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:2e:94:98:ba:7d:e5:9c:4f:55:7b:ac:30:
19:e4:1b:51:88:39:8c:85:81:dc:2e:db:19:bf:7e:
99:62:71:ab:d8:dd:3c:ba:81:7b:8d:e4:b3:13:55:
54:a1:e8:97:52:26:2c:d6:fc:a9:9d:ad:75:98:44:
33:57:9f:8f:68:0d:e3:b1:0a:78:ce:ec:5b:5c:a0:
de:c9:5a:f0:bc:ae:59:ed:58:6a:de:93:d9:7c:46:
d6:cc:6c:68:88:59:f5:42:42:38:a8:d1:dc:3e:4c:
52:2c:17:70:97:f7:d2:db:c8:31:0f:35:f3:40:f1:
c7:13:ff:53:5b:00:12:9b:d6:03:5b:39:84:09:d3:
ae:04:5f:64:66:23:99:ed:aa:55:f7:91:ba:d5:01:
69:5a:2a:2d:58:66:ab:9e:f5:bc:c0:45:47:d6:db:
35:d9:b1:af:45:5f:07:75:70:09:37:8b:af:05:5e:
80:30:71:91:05:fe:d5:2c:08:bf:4c:8e:77:40:25:
8e:43:e8:44:15:59:56:f0:3f:8f:da:4a:f0:62:f2:
59:a7:22:db:a7:61:2f:98:54:54:c1:4b:aa:f5:ae:
20:98:1f:48:6e:d0:9f:54:8b:29:9e:63:e7:d2:af:
bc:3a:68:f8:1e:66:95:eb:40:69:f0:10:c4:0f:a9:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B2:C4:74:F1:51:1F:AF:F5:13:D7:0B:CB:3A:D2:1B:9B:D8:CE:A0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/obLEdPFRH6_1E9cLyzrSG5vYzqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.120.0/22
Signature Algorithm: sha256WithRSAEncryption
76:92:2c:49:5d:f9:f0:d8:a6:49:6e:c3:16:bb:50:84:a9:d5:
ef:c1:b3:20:07:98:ec:30:cd:3f:a0:cf:9b:36:b1:89:c8:06:
03:99:e6:82:30:d7:84:ac:b2:1e:69:56:70:12:f5:f5:d2:30:
5c:99:0e:0f:12:d3:98:48:08:18:da:e3:e4:80:4b:2a:16:a4:
7b:78:0d:6d:93:31:e6:18:57:14:e1:52:87:bf:39:e3:14:6a:
a9:f6:76:60:be:58:4d:21:47:f2:6e:2e:81:c6:9b:8f:5d:52:
18:1e:3b:c9:9a:b5:c5:30:00:f9:41:e5:ce:ef:2a:c2:72:24:
e6:81:70:5d:c4:07:be:04:b9:79:0a:7a:3d:42:88:2c:58:95:
1e:30:fd:e7:25:1f:f1:0e:cf:9b:69:37:8f:58:8c:c6:ca:ee:
6f:65:08:f9:e6:7c:8e:c4:79:fc:aa:19:87:4c:b0:11:d4:1f:
2f:c4:80:07:48:85:fc:74:d2:1d:a2:69:36:a3:d7:67:07:c7:
ef:55:02:35:03:3f:84:43:2f:73:79:4c:53:b9:f2:cb:4f:ce:
04:28:6e:28:8e:19:5e:51:09:67:03:86:c1:e5:83:6c:ee:b9:
31:f2:83:8a:cb:ad:77:a1:8f:c5:ba:99:fb:b1:9e:8d:86:e1:
16:8e:2e:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQAXWxRKFPPARpuMyeoiAFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjIxMDIyMTU0MzUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWIyYzQ3NGYxNTExZmFmZjUxM2Q3MGJjYjNhZDIxYjliZDhjZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw4ulJi6feWcT1V7rDAZ5BtRiDmM
hYHcLtsZv36ZYnGr2N08uoF7jeSzE1VUoeiXUiYs1vypna11mEQzV5+PaA3jsQp4
zuxbXKDeyVrwvK5Z7Vhq3pPZfEbWzGxoiFn1QkI4qNHcPkxSLBdwl/fS28gxDzXz
QPHHE/9TWwASm9YDWzmECdOuBF9kZiOZ7apV95G61QFpWiotWGarnvW8wEVH1ts1
2bGvRV8HdXAJN4uvBV6AMHGRBf7VLAi/TI53QCWOQ+hEFVlW8D+P2krwYvJZpyLb
p2EvmFRUwUuq9a4gmB9IbtCfVIspnmPn0q+8Omj4HmaV60Bp8BDED6mKJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGyxHTxUR+v9RPXC8s60hub2M6gMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvb2JMRWRQRlJINl8xRTljTHl6clNHNXZZenFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdF4MA0G
CSqGSIb3DQEBCwUAA4IBAQB2kixJXfnw2KZJbsMWu1CEqdXvwbMgB5jsMM0/oM+b
NrGJyAYDmeaCMNeErLIeaVZwEvX10jBcmQ4PEtOYSAgY2uPkgEsqFqR7eA1tkzHm
GFcU4VKHvznjFGqp9nZgvlhNIUfybi6BxpuPXVIYHjvJmrXFMAD5QeXO7yrCciTm
gXBdxAe+BLl5Cno9QogsWJUeMP3nJR/xDs+baTePWIzGyu5vZQj55nyOxHn8qhmH
TLAR1B8vxIAHSIX8dNIdomk2o9dnB8fvVQI1Az+EQy9zeUxTufLLT84EKG4ojhle
UQlnA4bB5YNs7rkx8oOKy613oY/Fupn7sZ6NhuEWji6H
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org