Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/90d6gK8UHCnmtRsdN5Gt1NHXPnU.roa
File: 90d6gK8UHCnmtRsdN5Gt1NHXPnU.roa (raw, json)
Hash identifier: 3NQcstNprk04gPfgYee5V5WZA0NTyrlcZ+DnZILx/b8=
Subject key identifier: F7:47:7A:80:AF:14:1C:29:E6:B5:1B:1D:37:91:AD:D4:D1:D7:3E:75
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09278006
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/90d6gK8UHCnmtRsdN5Gt1NHXPnU.roa
Signing time: Sat 01 Jan 2022 16:00:49 +0000
ROA not before: Sat 01 Jan 2022 16:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209401
IP address blocks: 85.202.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153583622 (0x9278006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7477a80af141c29e6b51b1d3791add4d1d73e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:ab:8d:92:2e:be:bb:7c:37:81:cc:b4:e1:
85:4e:d7:54:04:0a:2a:2c:fa:4b:dd:5d:92:34:af:
09:b7:bb:b1:90:29:08:05:d0:12:11:5f:04:75:89:
70:0f:93:54:01:b1:8b:44:98:cd:b1:2b:cb:c1:a8:
9b:67:39:8c:00:87:48:6a:0d:6d:e9:fc:88:1a:2e:
45:f8:c5:0f:52:c0:47:23:fb:28:74:57:93:7c:8d:
08:66:96:ed:66:51:84:1d:57:24:27:d9:2f:7f:56:
28:75:b0:61:4e:df:d4:1a:f6:77:bc:ba:4e:aa:42:
63:10:0f:8d:97:49:3f:90:28:bf:98:70:a0:78:9d:
e6:85:4c:02:f6:7a:13:25:de:62:2c:74:1e:98:42:
20:0a:fa:58:ee:72:fd:68:2c:60:54:19:8f:4b:ea:
88:4e:c2:c4:0f:eb:31:5b:c8:dc:a9:47:76:14:fa:
13:ee:b9:26:b2:d5:c6:ca:5e:53:76:6c:09:1c:c4:
be:9a:9d:6f:1d:18:6c:23:61:f3:be:5d:58:fd:05:
51:ab:8a:c1:22:3f:be:3e:00:45:59:1a:55:12:72:
31:c4:e5:ef:e2:62:a5:8c:8a:5c:ec:67:1d:8a:c2:
c1:8d:ab:2c:fc:91:d9:89:52:a7:0d:57:d2:71:b6:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:47:7A:80:AF:14:1C:29:E6:B5:1B:1D:37:91:AD:D4:D1:D7:3E:75
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/90d6gK8UHCnmtRsdN5Gt1NHXPnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b7:93:38:79:c0:1a:a3:0f:a9:26:87:62:8e:e2:dd:66:64:
6b:5b:9c:86:6a:6a:98:ed:71:ab:e1:cf:eb:33:60:b9:ad:56:
2e:4a:d2:94:cf:6c:1a:54:c8:9c:e9:2c:a4:b5:41:6e:b6:fa:
e9:60:8e:f7:84:0d:f3:b5:73:77:18:95:21:c2:5d:ce:d2:e6:
f7:46:42:5e:3d:e2:53:5d:31:a3:24:de:c1:56:ee:f3:7e:46:
f7:6e:0d:20:6a:19:36:59:20:fa:c0:87:fc:10:29:6a:b7:6b:
6d:d9:eb:06:c2:c1:37:68:55:11:f3:94:a7:49:ff:39:10:db:
3e:7d:81:7a:67:e9:68:ea:a1:d6:ef:f3:95:7f:15:6d:88:0f:
ab:f8:d9:18:f7:28:f5:b9:2e:aa:64:7b:f9:aa:0d:b8:81:96:
e3:ac:d5:e7:4c:cd:16:56:6d:d8:48:b0:3b:77:a1:c3:e5:a8:
e9:79:bc:8e:28:e1:ff:6e:b4:21:0a:8c:eb:7e:1d:b7:35:3a:
ac:c9:31:aa:16:11:3d:77:e2:30:55:e9:71:c5:95:68:18:f5:
af:77:28:0d:d7:32:36:a3:b6:e3:3f:ad:80:d5:51:b5:fa:d8:
77:15:72:ee:77:c3:81:96:4e:70:0c:b5:1b:36:f6:d5:1e:94:
ae:b8:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org