Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/reBziEkybY_-i37ceLqcCDU6ntE.roa
File: reBziEkybY_-i37ceLqcCDU6ntE.roa (raw, json)
Hash identifier: J8pSFgaG06VN5SFUFhLciwPC3QOU/YR1RRTnLqcCBzs=
Subject key identifier: AD:E0:73:88:49:32:6D:8F:FE:8B:7E:DC:78:BA:9C:08:35:3A:9E:D1
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 0182C20F41FE31649E36E212478E1F1860B6
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/reBziEkybY_-i37ceLqcCDU6ntE.roa
Signing time: Sun 21 Aug 2022 20:19:15 +0000
ROA not before: Sun 21 Aug 2022 20:19:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209319
IP address blocks: 85.209.204.0/22 maxlen: 22
45.150.220.0/22 maxlen: 22
2a0f:300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c2:0f:41:fe:31:64:9e:36:e2:12:47:8e:1f:18:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Aug 21 20:19:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ade0738849326d8ffe8b7edc78ba9c08353a9ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:f4:27:d5:44:61:d4:d7:52:43:7f:81:b9:
6d:80:98:f5:cd:eb:04:51:f9:32:c9:4f:35:6c:cc:
63:ba:3c:21:be:0a:fb:a5:4f:77:7f:22:b2:f3:d5:
95:1e:36:c5:e2:71:e3:49:de:43:8f:df:ec:cc:a4:
61:d5:e9:e0:33:b1:b5:c9:64:39:db:ea:90:8e:58:
15:a7:48:94:a5:53:7e:ea:d0:54:ba:4c:0d:77:e4:
56:35:05:63:d2:fa:79:7f:8e:f7:77:bc:ff:53:34:
e6:0c:00:25:97:43:09:80:95:88:dc:65:c6:22:78:
6e:2a:8e:70:49:e2:ec:f2:3b:7d:65:ee:ce:83:b0:
17:dd:42:11:21:20:54:52:8e:b7:44:b1:50:3c:e3:
9e:03:57:17:8a:77:ae:27:8e:ea:84:b3:4c:de:34:
79:01:e5:a5:d1:08:a0:fc:4f:a3:73:60:40:c2:0c:
c8:2a:b5:9a:2a:c7:5b:e2:3d:3a:d9:c8:f5:86:84:
9b:ed:c7:eb:66:6f:c4:93:a9:12:24:de:34:c6:bb:
87:a5:07:f0:b0:14:97:7d:3c:2d:4c:2e:1c:36:5e:
6e:31:5c:98:cf:0c:f4:c9:4e:3f:fc:80:2a:a2:70:
2f:2d:33:6b:aa:de:8f:c6:6c:2c:91:87:a9:12:2f:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E0:73:88:49:32:6D:8F:FE:8B:7E:DC:78:BA:9C:08:35:3A:9E:D1
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/reBziEkybY_-i37ceLqcCDU6ntE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.220.0/22
85.209.204.0/22
IPv6:
2a0f:300::/29
Signature Algorithm: sha256WithRSAEncryption
54:08:e6:ea:33:12:ee:fd:1a:b3:56:64:98:64:e0:07:51:c0:
a7:91:18:d7:d1:17:d2:7e:ba:62:6e:6d:d1:90:60:a2:08:1a:
f4:5c:eb:a8:4b:91:06:89:61:4b:9a:dc:cc:88:b1:08:c1:55:
cc:23:e9:bb:11:d9:7b:ac:2d:f9:4e:44:ae:ea:14:10:13:0e:
ac:ea:62:1c:0b:1d:1c:2d:a5:5e:78:ca:1d:0f:35:4d:31:55:
fc:37:fc:fe:c7:4a:00:3b:62:5c:2d:46:af:08:bc:d8:9f:53:
5f:a0:0d:46:57:e9:7c:b1:8c:6e:75:c1:ae:16:92:e8:b2:88:
b8:cb:13:15:62:26:38:95:31:73:d1:0d:c0:f4:b6:bc:22:96:
86:54:e0:85:d4:f8:a8:69:f4:d6:83:a6:78:76:13:fd:0c:c1:
83:61:20:1b:cb:e9:4e:69:0a:48:fb:31:5f:3f:ca:12:71:14:
a7:d0:06:ec:fb:3f:e2:30:a3:ad:bc:90:2a:75:7e:b0:aa:68:
f9:e1:74:4a:43:c2:1d:f6:f6:2e:1f:c2:d8:71:5d:27:12:e1:
4f:fc:ed:a5:f7:a0:50:b0:7d:10:4b:47:ad:cf:d1:67:51:cc:
46:4e:98:b1:af:f5:9a:35:45:ac:d9:de:ee:94:9a:dd:22:1c:
75:8f:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org