Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/sVIIv63cVgdcR9sgj0IrNM7rNZw.roa
File: sVIIv63cVgdcR9sgj0IrNM7rNZw.roa (raw, json)
Hash identifier: mSx1N65dwiAfiFYwZFDBhNrbfG5MfPNLxIKdq9tolgE=
Subject key identifier: B1:52:08:BF:AD:DC:56:07:5C:47:DB:20:8F:42:2B:34:CE:EB:35:9C
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 16877307
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/sVIIv63cVgdcR9sgj0IrNM7rNZw.roa
Signing time: Sat 01 Jan 2022 06:01:55 +0000
ROA not before: Sat 01 Jan 2022 06:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207461
IP address blocks: 85.208.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377975559 (0x16877307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 06:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b15208bfaddc56075c47db208f422b34ceeb359c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:e3:e0:5e:57:b6:3b:d8:30:0e:ed:5d:5c:
38:5e:34:58:08:f8:9b:6c:ed:58:52:da:66:22:92:
28:5a:f7:68:20:cb:63:0e:cb:e9:ec:21:f1:b7:16:
99:dd:6b:cb:06:85:f4:cf:4e:73:12:ee:32:22:c8:
aa:f6:64:5d:f0:0c:f8:74:99:55:32:d5:60:3e:a6:
8c:c9:ce:48:ae:40:29:df:74:f9:a4:cc:58:eb:b2:
1b:04:8f:e1:7c:ee:84:5b:9a:07:2c:40:c8:a8:1f:
db:87:a3:2c:f5:07:ca:14:3b:26:5f:34:fc:54:c8:
8c:c6:f4:56:56:c0:d8:27:a1:67:1b:ba:a8:2f:e8:
e4:8a:cc:73:b2:ea:90:df:65:ca:7a:be:32:c3:75:
e4:dc:d2:e9:d6:3c:67:39:e7:d0:4e:a8:10:ef:9a:
06:57:c6:9a:ec:32:24:5a:b9:37:b0:de:7c:64:53:
71:5f:f6:e6:ba:d9:43:03:a1:4d:c1:d7:20:06:ee:
db:62:07:bb:52:e0:e4:a7:50:98:0c:da:5b:be:ff:
c4:69:eb:5a:99:32:3b:ef:b4:d9:f5:03:cd:0b:d6:
ae:da:9e:6e:d8:92:9f:80:59:7d:eb:73:fe:28:07:
fd:ab:17:79:9a:3b:e7:e0:79:2c:cc:fb:12:b6:b0:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:08:BF:AD:DC:56:07:5C:47:DB:20:8F:42:2B:34:CE:EB:35:9C
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/sVIIv63cVgdcR9sgj0IrNM7rNZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:67:26:db:d0:97:5f:ce:4a:59:a1:49:e7:12:81:f6:e2:0a:
a5:39:a1:e7:bd:08:78:db:33:68:7b:f0:98:9f:88:81:9c:ef:
b7:9e:54:18:0b:ad:da:ff:1a:4c:49:b3:3d:5c:77:ba:c8:56:
b2:41:9b:b6:6a:27:70:c1:49:69:6d:b7:44:41:14:f8:d0:f7:
00:5d:a8:71:a9:f4:a3:7d:b0:29:e2:a1:11:35:7e:9c:09:eb:
2f:8a:c2:a8:c3:61:c7:46:d4:11:fc:97:d1:ad:7d:45:fa:eb:
c8:d1:fc:b2:2f:55:59:fd:9c:99:8a:36:82:60:0c:a4:be:c2:
b1:41:1e:80:d3:ef:9a:ad:cd:ae:70:e4:57:5b:fd:73:9a:b1:
b2:23:20:e6:b7:4e:a8:1d:5b:81:5d:d9:d4:30:54:d2:56:d6:
fc:1a:a4:ef:14:a4:ff:93:98:0c:b2:06:1f:26:1e:c1:be:ea:
1a:f1:6d:dc:9d:e1:24:d4:81:0e:2f:5e:2a:5a:97:98:ee:51:
14:90:28:e5:ef:4f:95:8d:6d:79:b6:64:e4:a4:50:cf:22:fb:
a8:ff:c8:bd:6a:48:f5:b2:be:63:1b:30:40:ea:11:6a:67:3f:
31:cf:5d:ea:a0:02:46:24:a5:b9:93:aa:f0:d1:ed:07:4c:dc:
5a:03:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org