Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/sQisRprHk4yiWbODkgiMlsb3hjc.roa
File: sQisRprHk4yiWbODkgiMlsb3hjc.roa (raw, json)
Hash identifier: IEPUq4I0qbWARQHzS9Ctvvn686Qe91sIyEEY8chg2Dk=
Subject key identifier: B1:08:AC:46:9A:C7:93:8C:A2:59:B3:83:92:08:8C:96:C6:F7:86:37
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 01856D78A33CBBCCE6BCE4713DC52C0D5EE3
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/sQisRprHk4yiWbODkgiMlsb3hjc.roa
Signing time: Sun 01 Jan 2023 13:15:00 +0000
ROA not before: Sun 01 Jan 2023 13:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35361
IP address blocks: 89.239.0.0/19 maxlen: 19
85.119.88.0/21 maxlen: 21
2a02:4000::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:a3:3c:bb:cc:e6:bc:e4:71:3d:c5:2c:0d:5e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Jan 1 13:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b108ac469ac7938ca259b38392088c96c6f78637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:e7:5b:27:38:c3:2f:53:4b:af:fe:a6:d3:
cb:7c:31:79:79:3e:11:d9:53:6f:46:1b:d6:85:1d:
79:fa:d2:5f:0e:bd:39:60:bd:1e:70:6b:09:bc:10:
06:94:f0:ee:9c:af:f4:74:3d:e7:15:6e:6f:64:ef:
d3:41:e4:48:24:fc:d3:c1:86:d1:de:49:38:c3:30:
6c:99:73:d7:8f:60:e3:5a:90:13:dd:6d:36:24:1d:
bb:4d:9e:f4:74:2f:3a:f9:25:e2:b2:b8:54:3e:e2:
f2:df:f8:5a:7e:c3:a4:b7:51:ca:48:c4:00:de:83:
55:18:f7:66:f3:58:4f:d8:97:19:1d:1b:6d:e6:8c:
8e:37:d7:20:55:5b:09:76:5d:a3:81:ee:fa:d9:9b:
22:93:6e:c1:3e:37:ca:5a:22:e0:6e:5a:42:80:42:
01:f7:b0:df:b2:fa:6a:3c:4b:7a:21:69:7a:bc:15:
1d:52:35:9f:1d:e0:16:29:4f:8f:7d:ef:cf:f3:db:
a6:f1:89:89:63:db:50:95:2c:17:0a:11:95:86:2a:
83:2d:a8:f4:54:51:7a:ef:9d:13:e9:0c:ab:48:c0:
a1:ec:4a:07:07:cf:63:c0:7a:4b:f3:8e:1f:b5:51:
45:30:70:92:15:cb:4f:79:3f:b9:eb:e1:76:78:6c:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:AC:46:9A:C7:93:8C:A2:59:B3:83:92:08:8C:96:C6:F7:86:37
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/sQisRprHk4yiWbODkgiMlsb3hjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.88.0/21
89.239.0.0/19
IPv6:
2a02:4000::/32
Signature Algorithm: sha256WithRSAEncryption
65:49:e6:59:0f:22:f6:6d:8e:f7:43:9d:cf:22:f0:d2:6c:85:
3e:1f:ca:9a:c1:90:34:bd:1b:d5:84:54:17:e8:d8:7d:ce:8d:
f7:5b:15:98:f0:04:66:d4:73:0e:1f:9e:84:99:10:81:9f:0c:
18:03:39:0e:7e:39:76:b9:2e:6e:9c:65:dc:2b:18:66:0b:db:
25:13:20:5c:9e:55:c4:fa:70:43:e8:63:b9:94:c1:21:39:44:
10:bf:2c:43:17:d5:00:3e:82:39:b2:b2:b9:d4:64:ee:6a:be:
7f:ff:a8:92:95:64:a5:1f:94:30:81:ba:07:3b:c5:ba:b8:2c:
64:1e:c6:0e:c7:2d:8a:4d:61:28:27:d3:37:db:29:1f:44:f0:
9f:8b:7d:aa:32:42:a6:b3:39:63:fb:3e:7a:40:24:ae:01:f6:
ac:5d:92:9c:20:35:70:5d:fb:f6:90:c4:83:1f:c4:94:ce:fb:
7f:28:36:da:e4:fc:3a:27:6b:2d:61:7e:25:ce:5a:b8:52:da:
e4:9c:e1:6f:c7:93:98:42:81:81:98:1b:7c:6f:36:aa:c8:78:
47:cb:0c:26:f7:50:6b:f6:d6:96:ae:69:9f:cd:5b:27:72:12:
57:63:b3:57:82:b0:d6:18:a1:5e:55:95:63:d9:ad:a7:2d:8d:
0b:d8:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:30 2025 by rpki-client