Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/_BYyKVyeSiVXJ0mtMJYOOLccjFI.roa
File: _BYyKVyeSiVXJ0mtMJYOOLccjFI.roa (raw, json)
Hash identifier: rd4n+mZGGTCAeq2wBrpRy5B5CzFA8nKCV024NueTRZ4=
Subject key identifier: FC:16:32:29:5C:9E:4A:25:57:27:49:AD:30:96:0E:38:B7:1C:8C:52
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 095FE46C
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/_BYyKVyeSiVXJ0mtMJYOOLccjFI.roa
Signing time: Sat 01 Jan 2022 03:55:19 +0000
ROA not before: Sat 01 Jan 2022 03:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 85.209.205.0/24 maxlen: 24
85.209.206.0/24 maxlen: 24
85.209.204.0/24 maxlen: 24
85.209.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157279340 (0x95fe46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 1 03:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc1632295c9e4a25572749ad30960e38b71c8c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:86:19:e4:e4:fe:14:a7:3c:4c:90:ec:6d:
40:2a:d4:bc:97:7f:83:6d:f8:1e:cc:7e:f1:27:e0:
1e:4d:50:dc:71:b5:97:f6:f3:1a:2f:44:b8:6a:60:
a6:56:bd:f5:85:86:e8:ea:c3:e6:e2:4c:78:b4:c2:
35:76:b8:fe:52:92:2f:81:e8:b4:0a:c2:60:0d:f8:
03:08:92:89:64:7e:6f:58:25:66:69:83:9c:37:64:
47:d9:c5:8e:80:d4:66:bb:61:68:5f:e1:90:2f:fd:
7c:3c:dd:19:00:d4:d1:0e:74:ee:ba:75:94:e3:bf:
8b:65:b2:90:0e:80:fd:cd:ca:10:e0:0f:3f:42:30:
b2:ba:93:97:83:96:08:2f:8f:6b:13:f4:e8:f3:1c:
54:d5:d5:d3:73:b2:79:7c:68:26:d6:34:ff:d7:3f:
c8:af:ba:b7:63:95:a1:aa:7c:b8:43:87:cb:7c:71:
d7:98:e2:77:41:6d:34:e5:de:5f:b4:c5:41:a1:0f:
bb:bd:e8:86:53:b5:2e:a4:23:0f:46:b0:7b:92:bb:
ca:10:86:52:bc:da:e4:37:63:ad:01:e3:d6:d8:d9:
60:20:4e:20:53:72:13:8a:d4:9e:21:b5:5c:0f:47:
17:fa:b1:da:96:b1:aa:7e:21:f8:38:c3:9e:85:2b:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:32:29:5C:9E:4A:25:57:27:49:AD:30:96:0E:38:B7:1C:8C:52
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/_BYyKVyeSiVXJ0mtMJYOOLccjFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.204.0/22
Signature Algorithm: sha256WithRSAEncryption
42:16:5f:12:92:9d:bf:b8:67:05:8b:a6:4d:a2:38:4d:9e:fd:
56:31:c6:96:f4:1f:45:ec:00:c4:d2:5f:59:19:cf:46:50:1d:
c3:6a:47:4e:f9:d7:d0:db:0d:d9:4b:fb:64:90:7f:e5:1b:cc:
f1:8e:cc:e4:b1:91:32:9e:a3:49:8c:8e:c1:2e:96:28:59:97:
2d:51:47:c5:69:73:8b:7c:6d:95:9d:c9:24:b7:cb:9c:3b:f0:
6d:84:d8:5c:b0:0e:5e:2c:ce:77:6e:95:2d:5d:23:66:c8:d3:
35:d3:4f:ee:4a:77:fc:c3:e6:6c:79:aa:fe:c2:8b:64:d1:e4:
5f:43:32:9b:ad:13:af:6e:8b:b5:fa:1e:eb:ee:8e:92:3b:ab:
16:ff:2a:86:3e:dd:f5:84:8a:28:7a:d6:21:30:20:0d:fd:ba:
e2:31:a4:0c:f0:4a:12:9a:85:36:06:59:1f:52:e0:73:7d:61:
70:4d:55:d7:55:57:3c:00:ad:fd:3e:4a:72:05:01:6c:3b:e3:
c9:3e:df:19:29:ae:ca:20:1b:e8:7b:40:86:b8:59:70:9f:00:
cb:ad:ca:6e:d1:f5:e7:6b:8e:87:92:b1:c3:12:d4:a2:e9:bf:
09:11:9c:d7:ac:34:08:ec:d2:87:8e:a5:c2:23:2d:5b:2d:95:
8f:45:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org