Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qX2XfokdM-lGOcbz0VKu0ER9emI.roa
File: qX2XfokdM-lGOcbz0VKu0ER9emI.roa (raw, json)
Hash identifier: BsmpXm845k4XFUUqWzfTfTap/D7iEs3SemWI5JK1/l0=
Subject key identifier: A9:7D:97:7E:89:1D:33:E9:46:39:C6:F3:D1:52:AE:D0:44:7D:7A:62
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0185152DB2313BC8436992D2C7E0D2F97216
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qX2XfokdM-lGOcbz0VKu0ER9emI.roa
Signing time: Thu 15 Dec 2022 09:46:34 +0000
ROA not before: Thu 15 Dec 2022 09:46:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 85.208.46.0/24 maxlen: 24
85.208.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:2d:b2:31:3b:c8:43:69:92:d2:c7:e0:d2:f9:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Dec 15 09:46:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a97d977e891d33e94639c6f3d152aed0447d7a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1d:27:e7:dc:fe:f1:3b:fd:76:a5:30:4f:e7:
22:57:f0:61:91:72:43:e8:b2:b0:eb:00:ea:57:b4:
a0:d9:24:d7:e2:e1:db:3c:61:49:37:65:c2:5f:e9:
cc:4c:4e:15:78:87:ff:60:59:cc:fd:e9:5d:64:43:
24:95:17:c7:f4:82:95:07:52:0b:e9:98:7f:a6:b0:
df:91:5b:05:02:af:f3:e4:47:0b:96:3a:0e:a9:60:
7d:14:27:be:bb:a3:da:0e:0b:9f:61:a6:4e:36:ff:
8c:aa:a9:f3:67:b7:d0:66:63:c6:9e:06:86:47:d9:
9e:39:52:da:ea:29:6e:d9:ca:c5:e4:bf:80:9c:7b:
43:2b:8d:c2:78:56:77:58:a1:6c:5f:d1:f1:b8:4c:
5d:76:83:c2:72:0c:c6:de:33:73:29:49:84:4b:5d:
5c:8f:f1:b0:0a:12:bb:05:52:75:7c:c5:a1:c6:62:
f4:91:96:b9:e2:53:a3:b6:3b:0a:de:dd:60:f3:fb:
5a:fc:39:5d:2b:a4:00:8a:18:b4:33:58:0d:4d:a3:
65:3d:4d:93:cb:35:a8:ef:ad:11:e1:1c:f3:2d:82:
3e:d7:d8:66:e6:74:8c:a3:c1:4e:b2:a9:66:7c:ee:
e7:03:00:a3:0f:b7:98:34:9c:3e:fc:3e:06:97:d8:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:97:7E:89:1D:33:E9:46:39:C6:F3:D1:52:AE:D0:44:7D:7A:62
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qX2XfokdM-lGOcbz0VKu0ER9emI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.45.0-85.208.46.255
Signature Algorithm: sha256WithRSAEncryption
68:da:32:fa:df:56:99:7a:ca:cc:43:c1:68:af:6c:62:38:53:
1c:44:d0:a8:3b:d4:01:c9:9e:7b:26:c4:ba:bd:5d:b8:8d:92:
59:6b:52:e1:c7:f4:74:fa:ae:e4:e5:c4:5c:54:2f:71:42:1f:
f2:af:69:99:b7:c8:ae:3f:dd:c5:a8:17:57:26:81:12:59:49:
dd:58:c9:47:1d:90:37:22:c7:d5:18:21:d9:1f:3a:6c:28:c9:
8a:e1:4c:a9:50:2c:76:5a:ae:a7:a3:6e:02:4c:d9:04:77:52:
58:f5:05:5e:7e:0a:c9:9c:66:8b:8d:e2:73:7b:bb:fe:3b:62:
5f:cd:11:ec:17:f0:02:3c:2c:6c:b0:4b:1e:ba:bb:fc:8b:ad:
8a:7c:a4:e5:e3:d5:02:ef:23:7b:b5:47:31:4e:fa:d7:2a:35:
40:b0:e2:0b:4c:9e:78:32:a0:f7:95:f2:04:e4:58:eb:1d:85:
de:20:84:da:6e:55:7b:fe:f8:c9:73:3b:23:57:e9:df:d7:e9:
37:56:17:92:d6:60:3e:8c:05:16:74:4f:dc:af:c7:16:cf:a2:
4c:f6:3a:2e:d5:bb:a3:08:d4:d8:23:3d:38:87:d2:98:bd:7b:
01:bb:ee:b2:51:1d:15:39:56:a1:e9:77:f4:b6:be:a3:2d:86:
9b:7f:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org