Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/4N4XXM-b-JMLUkfb6Hutzm_HCAo.roa
File: 4N4XXM-b-JMLUkfb6Hutzm_HCAo.roa (raw, json)
Hash identifier: WZO4LBI8SRf3ZsLgSevFmq8zGx5ivTS737MGiqbNvh8=
Subject key identifier: E0:DE:17:5C:CF:9B:F8:93:0B:52:47:DB:E8:7B:AD:CE:6F:C7:08:0A
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0185152DB152FCFF218DDCDC2B531B450974
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/4N4XXM-b-JMLUkfb6Hutzm_HCAo.roa
Signing time: Thu 15 Dec 2022 09:46:34 +0000
ROA not before: Thu 15 Dec 2022 09:46:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 62.56.208.0/21 maxlen: 24
85.208.46.0/24 maxlen: 24
85.208.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:2d:b1:52:fc:ff:21:8d:dc:dc:2b:53:1b:45:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Dec 15 09:46:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0de175ccf9bf8930b5247dbe87badce6fc7080a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:c0:13:11:d4:77:ae:29:2a:20:3c:88:9d:
39:bf:a2:f8:cf:71:bd:3b:de:8e:fc:e7:a0:b1:15:
18:f4:35:4e:6a:52:2d:10:0b:d6:06:bb:cb:06:15:
60:82:4f:0a:00:c1:ba:6d:5d:15:76:63:fd:3a:ed:
65:6b:f0:1d:12:f1:f0:1c:fc:3b:e1:47:18:8c:06:
f7:b6:77:d2:96:52:ef:d4:68:1a:96:e8:42:b4:ce:
c1:80:60:ba:97:15:42:fd:26:e7:e7:e1:a5:ce:bd:
ea:69:e5:94:92:93:72:ba:f0:90:d7:f3:eb:09:90:
30:df:fa:2b:36:2c:f7:2d:6f:2e:b3:41:23:89:91:
58:3f:35:35:c1:32:37:91:60:50:cf:c4:97:8b:bd:
08:00:9c:d6:ab:56:77:15:fd:57:f2:2a:3b:ef:58:
0e:e6:b3:1d:51:5d:9f:4e:63:75:cd:41:4c:b4:75:
6a:16:9a:19:7d:b5:14:94:d5:f2:92:05:a9:e3:af:
89:73:45:4d:65:ad:54:23:54:45:22:8e:d1:cf:ad:
51:a2:81:b3:6d:fc:6c:a9:06:15:29:7a:69:f7:fd:
32:d0:a2:91:89:b6:95:95:9d:22:98:1c:a3:94:8d:
cf:17:76:75:8c:05:08:51:30:8c:6a:fa:74:b9:3b:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:17:5C:CF:9B:F8:93:0B:52:47:DB:E8:7B:AD:CE:6F:C7:08:0A
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/4N4XXM-b-JMLUkfb6Hutzm_HCAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.208.0/21
85.208.45.0-85.208.46.255
Signature Algorithm: sha256WithRSAEncryption
02:41:a4:18:b3:0d:c0:51:f2:96:6d:1b:f5:ea:33:87:ad:5b:
0a:c4:1c:2f:59:a1:f5:ea:d3:f7:08:b9:e0:77:44:4e:e9:95:
05:7d:57:ad:8c:27:73:c9:61:50:16:10:2d:90:fe:ac:6e:ca:
f9:4e:36:8d:51:2b:c4:4f:29:ce:84:7b:ab:fa:07:f2:7c:d9:
2d:1b:94:9c:17:1b:04:3d:ff:cb:e1:79:3c:fb:fa:38:7e:01:
6e:97:7b:64:9f:5e:91:37:ad:90:39:da:c9:40:b3:51:8c:ae:
72:1b:8d:ce:ec:5d:f4:af:f4:8d:1e:5c:3e:9f:99:73:bc:0c:
26:11:5b:89:cf:94:df:2a:49:bd:98:ac:25:86:45:7b:cc:50:
81:d5:48:1b:9d:ba:6f:6c:69:be:6a:65:79:e4:74:d4:c2:64:
83:1a:8a:55:0d:62:40:9c:81:49:71:9a:da:75:a9:dc:98:df:
95:bb:82:16:c3:4e:01:b1:8e:6b:0b:14:3d:fa:9c:0b:70:c7:
68:54:4f:0b:78:5c:fa:35:a8:f6:1c:7a:40:18:66:c0:37:2b:
24:a4:43:98:de:93:c8:08:7a:7a:d3:d3:3a:63:b7:ca:2f:63:
d6:e5:5d:b3:9b:d8:1a:db:ab:ef:56:6c:4b:4a:cf:cd:3b:03:
4e:cb:c8:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org