Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/roBHHYnSd6lib1zAd_sXC2QBGdY.roa
File: roBHHYnSd6lib1zAd_sXC2QBGdY.roa (raw, json)
Hash identifier: 1viUicdPBdJMO9FbBNFkvFJwMqY7oEMPExjlFKFwYpI=
Subject key identifier: AE:80:47:1D:89:D2:77:A9:62:6F:5C:C0:77:FB:17:0B:64:01:19:D6
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0184EC82B7DEBDC04349B1CFFFD3F03452B0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/roBHHYnSd6lib1zAd_sXC2QBGdY.roa
Signing time: Wed 07 Dec 2022 12:15:00 +0000
ROA not before: Wed 07 Dec 2022 12:15:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28546
IP address blocks: 85.92.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:82:b7:de:bd:c0:43:49:b1:cf:ff:d3:f0:34:52:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Dec 7 12:15:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae80471d89d277a9626f5cc077fb170b640119d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:02:1a:f2:45:6f:ff:62:46:f8:36:15:7a:
7e:7b:df:ee:98:83:5c:a2:f1:56:92:29:48:7a:f5:
f4:27:2c:c7:97:50:eb:9c:1f:25:ee:4e:ff:1f:2e:
b1:54:bc:47:d9:56:75:ad:b9:a4:96:31:7b:15:14:
35:f2:04:3b:92:95:90:11:78:b0:76:fa:04:93:41:
26:6c:02:ea:e3:53:b6:47:ec:c3:e6:09:2b:a2:b8:
0c:85:fb:bd:e4:92:72:b6:d1:4f:0d:61:95:03:f8:
84:a2:12:5b:48:54:9a:f0:b0:5b:69:38:16:57:ab:
d8:9d:4c:2d:c4:89:89:33:61:78:3d:4f:9f:e4:06:
8d:0a:51:20:1c:e0:ef:4e:89:b8:25:8d:8f:28:ea:
dd:7f:a1:8c:e7:b7:fe:0a:9c:a7:2a:ca:3c:41:d5:
e7:72:34:9b:3d:f2:36:1b:8b:eb:8c:65:61:6c:1b:
23:83:3f:6d:25:bb:b6:24:ac:0b:cb:e7:c0:ce:d3:
21:27:7a:da:00:8d:cc:c9:63:0c:63:9b:ca:42:d3:
fb:11:5e:c1:46:d0:04:ad:c7:e1:21:c1:8a:9a:cc:
9a:6d:f5:e5:bd:34:a5:89:39:51:7b:4f:37:ee:cb:
d7:db:de:11:cc:47:c8:22:5d:a6:d1:27:9c:13:db:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:47:1D:89:D2:77:A9:62:6F:5C:C0:77:FB:17:0B:64:01:19:D6
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/roBHHYnSd6lib1zAd_sXC2QBGdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:25:3e:3a:47:af:c4:7a:cd:e4:ca:6a:0e:57:d4:4b:50:e8:
d2:cb:c4:66:65:f7:9d:73:a4:f6:8e:6c:54:8b:42:46:d7:fa:
8a:1a:49:bd:01:55:c9:90:e9:f7:9a:6c:ec:9d:f8:78:1c:72:
34:69:b4:97:bf:27:20:31:9a:b2:74:37:38:67:8e:73:15:ea:
8f:e5:57:30:c6:ad:33:3c:73:23:13:58:49:d2:13:09:9e:02:
19:4d:d8:0a:b5:0d:d5:87:a4:6e:d4:06:ca:06:25:6c:3f:cb:
99:1d:54:a7:fe:d2:d7:95:09:36:76:d4:67:36:7a:37:c8:4d:
34:28:f4:88:fa:f5:f7:06:2e:56:61:9c:a5:75:4b:65:78:dd:
4f:9a:49:04:ee:38:56:49:f2:de:3b:7f:2b:f6:ef:6a:cb:30:
58:ec:bf:7b:3d:d7:46:1c:c8:d6:3d:ef:20:3f:ce:fa:d7:49:
7c:ee:db:46:63:e8:12:ee:28:b8:c5:64:ba:af:34:6e:2b:1a:
f2:50:8b:f9:06:ed:95:6e:7c:c3:23:f7:f1:27:15:6c:c6:2b:
e5:54:e1:ce:af:8d:9e:05:fb:ca:65:2b:e7:cf:8d:0b:af:ea:
60:47:f1:54:28:cb:c8:62:c4:7f:31:6d:fc:3b:60:0e:0f:b9:
30:c4:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:56 2024 by rpki-client on console-fra.rpki-client.org