Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/iAqrILhuv7YN2HP_FQsfEd6sgFg.roa
File: iAqrILhuv7YN2HP_FQsfEd6sgFg.roa (raw, json)
Hash identifier: aPWxnB7rw2Wpm00Q2JdbZYUWjpUedtZJf+S+sBQdB/g=
Subject key identifier: 88:0A:AB:20:B8:6E:BF:B6:0D:D8:73:FF:15:0B:1F:11:DE:AC:80:58
Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial: 0216C6
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/iAqrILhuv7YN2HP_FQsfEd6sgFg.roa
Signing time: Wed 26 Jan 2022 12:17:04 +0000
ROA not before: Wed 26 Jan 2022 12:17:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209302
IP address blocks: 85.209.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136902 (0x216c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
Validity
Not Before: Jan 26 12:17:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=880aab20b86ebfb60dd873ff150b1f11deac8058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:ae:bd:31:9b:57:ce:0c:e7:d2:e5:8c:b5:
07:40:cb:b6:3f:c4:79:30:9b:c0:2b:c3:ff:3b:be:
66:e3:a4:8b:7e:1e:54:bc:4d:29:58:6b:bb:e1:5e:
9d:40:3c:b9:b2:9d:a6:88:e2:2b:d3:ba:3d:bd:56:
a2:1c:1b:fb:e0:3f:5e:3a:65:b3:bc:b9:c0:56:01:
d3:c8:58:4c:36:c8:aa:5c:18:78:fc:d1:e5:26:e0:
d1:c0:ab:e9:a2:71:b9:69:68:a1:53:d8:df:d4:e1:
7e:3b:7c:f9:c4:3c:3e:3f:e6:a7:b5:85:3b:2e:12:
89:2b:f0:36:35:fb:b7:71:b0:91:ef:70:94:0b:95:
de:0e:78:08:7d:11:b4:f6:93:52:ea:ef:ec:84:ed:
c6:34:6b:29:17:bf:a1:4e:94:95:fb:84:55:74:e5:
19:ea:c6:0e:53:cf:a9:7c:3b:4a:83:4e:87:74:fc:
51:e6:39:28:09:1d:56:20:d0:8e:53:b9:86:55:cf:
28:fc:5f:b0:3c:1d:61:1f:e4:4b:47:7a:f7:c1:e0:
b9:a6:19:aa:8b:28:fe:f8:a4:92:d3:49:93:8e:b1:
0e:1d:42:11:0e:ec:5b:28:0c:ba:f3:58:f8:35:92:
55:18:c3:fd:84:9d:b1:4e:9d:7c:46:a0:75:e2:a3:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:AB:20:B8:6E:BF:B6:0D:D8:73:FF:15:0B:1F:11:DE:AC:80:58
X509v3 Authority Key Identifier:
keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/iAqrILhuv7YN2HP_FQsfEd6sgFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.248.0/22
Signature Algorithm: sha256WithRSAEncryption
43:19:2e:c6:27:28:2b:0a:d2:2b:eb:1c:3c:0e:4c:6f:6c:02:
c6:4f:89:bb:28:20:d0:b3:1a:81:1c:23:11:62:70:72:41:e9:
87:f7:bd:c5:fa:fe:e2:a5:4b:7f:ee:ac:d7:8d:ee:0a:bd:59:
d6:68:f8:c9:88:3e:5e:50:65:ba:e9:50:1b:df:c0:21:5a:81:
15:80:60:a9:e8:4a:9f:df:84:c2:11:02:46:39:e4:ed:b3:d3:
5e:bf:62:68:a7:24:5d:44:aa:f9:6b:a6:0e:7c:17:6e:cf:3c:
19:f3:38:ff:57:5e:9f:df:f6:d9:43:3f:5a:74:4c:34:ef:4f:
b7:c3:cb:ad:2c:a3:5f:5a:cb:0d:01:cf:e3:04:94:eb:65:64:
3c:25:65:2a:08:e6:d5:e4:4f:b8:72:25:bf:8a:ae:0e:58:ed:
62:8e:de:42:5a:7d:8e:0b:a5:4b:7d:11:39:6a:2c:25:81:84:
4c:60:34:fb:dd:2c:8a:4e:20:d9:6b:69:b1:4e:b3:28:38:e7:
24:43:a7:2b:4b:9c:4c:c9:f1:e8:a1:cc:11:3d:84:8e:b2:67:
05:6d:05:37:50:27:a6:c3:43:2c:f5:a0:d9:2a:e8:73:0f:9a:
a2:b5:eb:bf:81:9e:25:74:91:6f:ad:5a:8f:d1:1a:aa:2d:cc:
b5:d1:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:24 2024 by rpki-client on console-ams.rpki-client.org