Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/K59z5M4NQoMSn81srJ6wu5-XJ6Q.roa
File: K59z5M4NQoMSn81srJ6wu5-XJ6Q.roa (raw, json)
Hash identifier: kMiwgb6HvzGqi7FhFshCewOwL8QGATIhbsE49PzYvgM=
Subject key identifier: 2B:9F:73:E4:CE:0D:42:83:12:9F:CD:6C:AC:9E:B0:BB:9F:97:27:A4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01831902E3DD8BF046263FF4A367EAF13235
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/K59z5M4NQoMSn81srJ6wu5-XJ6Q.roa
Signing time: Wed 07 Sep 2022 17:32:43 +0000
ROA not before: Wed 07 Sep 2022 17:32:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204741
IP address blocks: 85.209.74.0/24 maxlen: 24
85.209.75.0/24 maxlen: 24
85.209.72.0/22 maxlen: 22
85.209.73.0/24 maxlen: 24
85.209.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:19:02:e3:dd:8b:f0:46:26:3f:f4:a3:67:ea:f1:32:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 7 17:32:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b9f73e4ce0d4283129fcd6cac9eb0bb9f9727a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:e8:42:8a:e3:5d:7c:f9:59:e3:79:69:48:
b4:3d:4a:1d:d6:1e:67:cb:f1:31:ff:53:2f:63:46:
20:6f:8c:bf:ff:be:e3:df:4f:1f:5b:27:37:38:2a:
81:11:75:33:c1:99:ba:10:57:73:fc:be:e8:51:71:
36:c2:5d:45:e4:44:67:f0:04:65:9c:f8:db:ed:e2:
48:5e:2a:62:ae:3a:ca:83:e5:9f:86:e3:98:3c:ca:
e4:0d:93:b3:ad:0d:fc:b6:a9:5e:ff:2e:24:c6:4e:
5d:c9:88:ca:44:ed:ee:df:69:ea:4f:17:ca:bd:b3:
36:ff:e9:3f:d2:11:25:9d:ae:71:16:04:70:d7:8d:
3f:87:1a:35:1d:c0:ca:7a:d3:f6:73:25:44:f8:8c:
ab:ea:19:ec:fe:96:9a:96:b1:76:5a:1e:60:51:eb:
9f:61:38:41:32:06:b8:36:17:4d:43:9f:e7:94:11:
c3:cb:78:28:43:2c:12:dd:92:7e:e3:06:e0:16:b9:
76:2b:53:1d:13:cb:79:e9:3d:07:46:13:8f:ca:d2:
66:c0:79:01:6b:bb:a4:e1:8d:72:4b:93:57:eb:5a:
c6:e4:5d:6b:91:08:67:35:2c:28:26:c0:12:cd:9f:
7d:a9:47:ed:f0:1f:e0:f5:77:50:10:8e:da:a0:25:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:73:E4:CE:0D:42:83:12:9F:CD:6C:AC:9E:B0:BB:9F:97:27:A4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/K59z5M4NQoMSn81srJ6wu5-XJ6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:db:8e:a6:fe:27:08:f6:9e:17:de:eb:74:cb:5b:ec:02:2c:
57:80:29:a9:c9:3a:ab:d6:e5:52:5d:85:fa:7f:06:9e:95:97:
3e:85:c8:9d:4e:23:7a:39:71:11:f8:77:84:ca:b0:83:e1:77:
55:a2:69:c4:a4:ec:52:10:23:8a:72:da:90:6c:86:4c:28:17:
2b:f5:7e:b1:a3:10:32:45:4e:86:f3:93:36:bf:df:4c:6b:3a:
f2:fc:e3:09:5a:18:b1:09:7b:14:cd:6e:cf:4d:b4:a7:cd:e0:
d0:e8:22:1c:57:a5:c4:27:44:71:5c:9e:1e:a0:d4:1a:03:80:
2a:21:f4:fd:0b:08:c3:98:9e:51:13:31:b0:0b:f4:4e:01:9e:
3d:bd:e4:dd:73:a8:54:70:92:8d:9b:45:ff:ca:ac:33:71:28:
41:78:37:be:40:7b:50:eb:8f:e9:35:71:a4:ed:76:29:04:5e:
4f:8f:a5:67:9c:56:41:a8:fc:f7:3a:4b:22:a5:41:78:a5:62:
b4:52:6d:05:3c:4a:be:8a:d9:e7:1f:ab:d7:76:54:d5:04:ca:
3a:b5:45:9b:84:75:78:5d:09:43:7a:34:d6:2f:e9:48:f0:ba:
f3:bd:78:b5:f9:73:44:7a:03:b7:bc:4c:94:b0:1d:65:4d:51:
d1:a3:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org