Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/STCxDDOzEtwryByIN1hpPxAUrG0.roa
File: STCxDDOzEtwryByIN1hpPxAUrG0.roa (raw, json)
Hash identifier: aYhJro8byiVAFMniyjz5T8+EHg0yKE/SwzmFzJzkDwg=
Subject key identifier: 49:30:B1:0C:33:B3:12:DC:2B:C8:1C:88:37:58:69:3F:10:14:AC:6D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 106B8A44
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/STCxDDOzEtwryByIN1hpPxAUrG0.roa
Signing time: Sat 01 Jan 2022 06:04:14 +0000
ROA not before: Sat 01 Jan 2022 06:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43591
IP address blocks: 85.117.192.0/19 maxlen: 24
46.245.152.0/21 maxlen: 24
85.117.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275483204 (0x106b8a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jan 1 06:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4930b10c33b312dc2bc81c883758693f1014ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:9a:eb:e2:ce:eb:f5:68:c8:25:45:ff:4f:
dd:39:26:3b:16:a0:fa:a3:fe:56:5f:28:09:9e:c5:
ff:b8:f2:82:7a:ff:eb:9c:f0:aa:55:62:e0:3f:38:
00:db:4d:51:52:40:df:e5:19:7b:b7:5b:db:82:89:
22:59:ba:9a:a5:f1:5d:bb:22:dc:b9:a8:e7:5e:8a:
25:69:e7:e0:d4:f8:34:98:6a:2c:d9:43:79:0b:99:
7e:27:34:49:10:64:68:f8:a5:ad:68:b4:bc:4a:16:
95:5a:08:f3:8c:18:57:89:5c:63:06:2b:47:37:d4:
66:dc:54:99:44:c6:b0:6c:8f:71:5b:0f:89:44:4d:
2e:d8:58:95:eb:c3:5a:f4:55:60:6c:dd:02:64:40:
39:d1:a4:30:4d:33:7e:74:26:b6:40:a9:ae:a6:b9:
75:a8:43:b9:9d:6e:a1:24:32:00:f4:90:97:59:71:
4e:a5:78:95:9b:b0:07:0a:88:e6:33:83:50:86:db:
ed:59:3f:5e:e7:f9:15:c1:a0:cf:fa:f9:6d:d5:f4:
12:28:09:7c:6e:16:c5:f0:1e:79:9a:2c:8c:9a:5a:
e7:91:91:5a:fe:67:b6:2c:d3:f5:a1:a7:9a:f1:13:
83:0c:9e:0d:f3:32:c0:9c:3f:27:df:bd:dd:a6:56:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:B1:0C:33:B3:12:DC:2B:C8:1C:88:37:58:69:3F:10:14:AC:6D
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/STCxDDOzEtwryByIN1hpPxAUrG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.152.0/21
85.117.160.0-85.117.223.255
Signature Algorithm: sha256WithRSAEncryption
60:de:3a:f9:3d:23:1d:dd:a7:ae:18:5d:74:11:a2:29:eb:e1:
a6:98:73:b4:d9:18:04:f2:0c:3b:cc:88:37:6a:55:36:d3:98:
08:91:a2:7a:97:a4:47:65:c7:1e:d3:38:12:31:cb:6c:c1:85:
32:b9:14:a9:f5:72:48:87:9d:35:9b:68:5a:b4:dd:dd:d0:a6:
d7:55:e5:ed:d4:b8:2f:55:73:74:82:55:4f:5e:3c:d1:5b:bf:
26:76:25:bf:a7:bc:cf:05:e8:93:a4:bc:36:ab:11:2b:38:c9:
8d:ed:f2:41:d9:f6:d8:2c:e5:38:72:26:05:3c:b8:8b:4f:62:
57:22:94:fc:29:fe:b3:d6:5b:e9:fb:71:41:6d:80:14:02:d1:
41:27:71:bb:bc:3e:74:96:61:03:34:e0:42:2c:89:eb:95:d0:
b1:05:08:05:05:45:ac:f0:fe:a1:68:7e:a8:b1:66:36:4d:03:
02:51:38:0f:59:97:88:03:e2:60:a5:5e:5a:1d:84:be:29:02:
0e:c9:ac:25:b0:ee:bd:d5:ee:b0:ed:b9:b8:7e:9a:1b:2e:ef:
44:24:71:91:23:1a:70:aa:f0:76:4a:29:8b:0d:e9:b8:3f:68:
79:04:f0:1e:40:4e:73:d2:31:66:6e:5b:8e:8e:aa:67:df:be:
7c:5d:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:33 2023 by rpki-client on console-ams.rpki-client.org