Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/kTfesknR--iXywkoCftnc1lapYA.roa
File: kTfesknR--iXywkoCftnc1lapYA.roa (raw, json)
Hash identifier: f7gs22dnO4x3V0DDO+eGmQLpoymtmu2zrx4BtXMCLj0=
Subject key identifier: 91:37:DE:B2:49:D1:FB:E8:97:CB:09:28:09:FB:67:73:59:5A:A5:80
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 09E5411C
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/kTfesknR--iXywkoCftnc1lapYA.roa
Signing time: Wed 23 Feb 2022 12:50:07 +0000
ROA not before: Wed 23 Feb 2022 12:50:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209319
IP address blocks: 85.209.204.0/22 maxlen: 22
45.150.220.0/22 maxlen: 22
2a09:9f40::/29 maxlen: 29
2a0f:300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166019356 (0x9e5411c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Feb 23 12:50:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9137deb249d1fbe897cb092809fb6773595aa580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:04:30:b2:d5:59:ab:9b:31:a4:ae:9b:1f:
94:2a:d6:e3:9f:6e:4f:b7:21:89:8b:b5:dd:f8:cb:
a9:5f:61:30:37:48:0c:ae:ab:f9:62:75:02:59:68:
8b:ef:cd:fc:53:d3:60:b6:75:5b:15:9d:5b:f2:cb:
f3:3d:a3:34:96:e7:b5:cc:a7:22:cf:73:5f:80:a2:
b0:22:dc:49:70:33:fb:ef:e7:27:e7:07:a0:c7:84:
5b:2e:76:22:81:3f:47:9b:ab:82:1d:7d:e4:d1:8c:
de:0c:0d:0f:20:a2:d5:6e:ff:66:e3:a2:19:37:29:
03:1e:7e:87:f0:32:b3:e0:69:b6:fb:95:5b:77:22:
07:7d:d3:de:2c:45:00:dd:7f:b0:f0:88:9b:56:99:
e0:15:e0:48:e3:71:63:b5:4b:8e:85:bb:0f:11:b8:
75:c7:c6:1e:72:ba:50:e1:f1:6e:c1:82:3c:03:f1:
ea:9d:a8:3d:2e:86:70:3f:a7:fa:78:b2:67:03:92:
69:d5:b8:b1:ec:d4:8c:5e:c8:e5:c1:7f:44:a5:d1:
1c:c4:ae:76:38:5a:6a:57:66:21:c7:c7:23:a7:2d:
63:6a:b1:8e:1f:31:9b:19:db:71:db:63:0f:6d:ce:
63:7e:fe:27:c2:89:fb:06:31:db:9e:62:a6:02:c5:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:37:DE:B2:49:D1:FB:E8:97:CB:09:28:09:FB:67:73:59:5A:A5:80
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/kTfesknR--iXywkoCftnc1lapYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.220.0/22
85.209.204.0/22
IPv6:
2a09:9f40::/29
2a0f:300::/29
Signature Algorithm: sha256WithRSAEncryption
51:bc:26:77:64:8f:7f:1f:a3:ca:4f:93:50:fc:36:94:8b:d6:
5d:dc:e2:9e:b2:c4:87:2a:7e:f7:33:2d:a0:d7:29:c9:6f:c5:
89:60:e7:f5:5b:3d:6d:4e:7d:4e:81:e6:59:1d:db:55:d9:62:
1d:6c:ce:21:ca:c2:cd:1e:ee:01:05:74:5e:d1:e2:84:23:11:
47:c6:8e:da:27:4a:3e:6f:0a:03:6b:12:24:eb:b4:06:92:72:
eb:1d:a9:0d:b9:87:ba:70:5c:c5:7c:a2:67:fe:2f:54:16:d3:
dd:ef:f3:c8:f6:f4:e1:c6:1c:f8:ec:4a:ac:be:26:10:01:00:
47:3c:0d:45:64:fa:8f:a0:7b:80:3c:29:ca:fa:58:74:88:7c:
66:b3:7b:02:22:1b:67:b9:49:e2:90:ab:d7:05:4a:b9:75:a1:
31:62:d6:6d:0f:51:be:82:54:a7:9c:59:bb:cd:43:43:63:fb:
5b:ae:99:fd:fe:7b:c2:84:14:22:3d:60:f9:4d:43:f2:f4:11:
7a:8d:b4:f3:aa:b4:cb:00:ea:3e:8a:d8:be:49:66:af:ad:d2:
35:5c:fe:43:04:3a:2b:8e:33:6d:65:85:64:d7:06:2b:7d:1e:
8a:e2:04:d4:68:7c:94:cb:2e:88:ec:fe:b1:42:00:b2:e5:e4:
52:5d:f2:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org