Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/4WjZLuid2pWLEXgoDulqK81JI1M.roa
File: 4WjZLuid2pWLEXgoDulqK81JI1M.roa (raw, json)
Hash identifier: gl9Bi9aWBmBa/MSOWmLxPpu8PqNG8nQvZywSoFIV/LY=
Subject key identifier: E1:68:D9:2E:E8:9D:DA:95:8B:11:78:28:0E:E9:6A:2B:CD:49:23:53
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 106C99D3
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/4WjZLuid2pWLEXgoDulqK81JI1M.roa
Signing time: Sat 01 Jan 2022 06:04:14 +0000
ROA not before: Sat 01 Jan 2022 06:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202891
IP address blocks: 85.117.192.0/19 maxlen: 24
46.245.152.0/21 maxlen: 24
85.117.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275552723 (0x106c99d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jan 1 06:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e168d92ee89dda958b1178280ee96a2bcd492353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:62:c2:f0:09:b9:77:68:dc:60:85:19:b0:
0d:4d:f7:a4:5a:d6:d1:fb:bd:9b:b8:e5:34:c8:e4:
57:d3:50:51:2d:5a:93:42:14:28:61:9b:47:e8:2c:
2f:74:1d:8e:0f:30:5e:e8:d3:7c:27:ac:a9:86:27:
29:99:6e:37:74:20:2e:1b:05:3e:47:5f:4d:03:c4:
3b:3b:d8:1f:5d:68:fc:bb:19:4a:d7:dd:b8:7b:ab:
4f:05:93:ac:73:23:76:26:f9:0c:59:87:87:72:7a:
55:f4:8a:55:9c:03:56:d9:1b:a4:9f:aa:75:5b:13:
81:8f:0f:92:87:0a:dc:d5:f2:75:ce:8c:0b:3e:ef:
66:3e:44:d6:54:02:51:3c:46:e6:ab:8f:6a:51:e0:
e7:44:98:6f:20:91:2e:ad:c4:97:ba:61:30:87:aa:
99:c4:df:c1:76:0f:1a:bd:9b:b7:c3:bc:bd:0e:94:
32:2d:98:37:6c:5e:ed:11:5e:67:bf:92:b0:a4:df:
48:56:2f:3c:f2:ed:02:1e:a9:a4:4e:f0:62:09:40:
21:1c:4c:68:4f:b9:54:41:07:cb:d5:2a:af:c5:30:
d3:05:56:b4:33:be:09:7e:20:1f:da:32:61:20:0e:
d5:c1:42:f6:da:0b:70:cd:80:7a:f1:66:ee:90:48:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:68:D9:2E:E8:9D:DA:95:8B:11:78:28:0E:E9:6A:2B:CD:49:23:53
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/4WjZLuid2pWLEXgoDulqK81JI1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.152.0/21
85.117.160.0-85.117.223.255
Signature Algorithm: sha256WithRSAEncryption
4a:52:12:9b:00:3a:5c:cc:0a:89:5e:45:8e:b4:82:e8:00:1c:
5c:be:07:21:49:e9:c1:94:61:87:26:dd:a3:48:30:22:97:da:
85:75:5f:bf:36:4f:65:d4:98:70:ad:a1:52:16:74:e6:bf:81:
ef:78:a4:a1:ee:cc:8b:49:5e:e0:63:f5:3c:f1:a0:54:63:43:
dc:69:93:a7:b1:a0:a8:ca:d7:de:c3:89:0b:04:ac:9f:fd:3b:
27:11:c1:3c:77:d6:e7:bf:fe:0b:b7:f4:1b:f0:2d:23:de:05:
c2:d5:37:1d:80:c6:6e:8b:b9:6c:ea:4d:d8:73:4e:ca:5e:d5:
6f:fd:28:79:97:a0:fa:4d:6c:c7:5c:66:16:c4:6b:e1:22:48:
b4:92:e2:ae:3e:9e:b3:e1:13:c0:dd:c5:b3:17:19:f1:6e:f0:
8e:63:51:c4:cb:89:ba:86:ae:d3:6e:88:93:57:08:35:b0:43:
3a:3e:6e:f5:58:aa:f0:55:1c:b6:bc:77:5d:ba:cb:56:4e:67:
6b:4f:7e:4d:45:bf:69:09:3d:bf:25:81:17:92:83:09:eb:fe:
0f:b8:bd:8d:fc:8f:ea:6e:8d:48:6a:bf:48:c7:fa:1d:03:2f:
8e:25:6b:97:36:b9:e8:ed:fd:7e:3f:d5:ce:73:b1:8c:e3:27:
44:69:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:50 2023 by rpki-client on console-fra.rpki-client.org