Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sgr_h2Jd10qJp_EGheXrmDrliWs.roa
File: sgr_h2Jd10qJp_EGheXrmDrliWs.roa (raw, json)
Hash identifier: k0TrYgbVL9Ejm1vYOZOSkualKEJsyc17aQ0T2jiYStU=
Subject key identifier: B2:0A:FF:87:62:5D:D7:4A:89:A7:F1:06:85:E5:EB:98:3A:E5:89:6B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0182AABE4FCDBE6222D55B63C2D99E99FB68
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sgr_h2Jd10qJp_EGheXrmDrliWs.roa
Signing time: Wed 17 Aug 2022 07:39:35 +0000
ROA not before: Wed 17 Aug 2022 07:39:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:be:4f:cd:be:62:22:d5:5b:63:c2:d9:9e:99:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 17 07:39:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b20aff87625dd74a89a7f10685e5eb983ae5896b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4c:d9:2a:64:0a:17:fb:62:b5:b5:90:b8:d3:
5e:96:6b:50:e9:35:b6:a4:48:72:c8:33:2d:0d:88:
fc:11:20:ef:34:a1:fc:02:7c:4f:1e:d3:71:b7:6e:
ad:e4:48:97:c7:c8:64:1f:fd:a3:e6:26:8f:85:54:
53:df:26:54:e2:d3:f9:5f:d9:81:cb:55:91:8d:1e:
48:dd:b3:ab:bc:d7:43:a8:44:33:0f:6b:4d:37:6d:
e7:2a:22:d7:78:39:fb:1f:76:11:58:0e:d8:87:32:
8d:86:d2:2f:5c:f8:9b:e9:b8:03:9d:5c:db:b4:d6:
b5:cb:6d:97:92:17:b9:aa:53:71:47:02:f2:2d:48:
df:d4:9f:4a:f2:48:e2:fa:9f:04:a2:1b:ce:ec:9d:
35:c5:46:9c:7e:df:eb:3a:91:c3:db:31:38:ea:9c:
9e:2b:3f:fb:65:e7:46:39:e5:2d:c3:b5:32:df:86:
96:29:df:f7:67:45:2c:53:bf:0e:8b:6f:0b:e0:9d:
31:09:4b:45:f8:43:c3:07:bf:ef:60:70:db:54:76:
cc:fe:50:2f:9e:b8:24:de:9e:e2:21:6f:b8:c7:02:
63:b6:b9:26:84:2b:16:61:3f:5e:fe:74:d3:61:f5:
6d:38:97:90:64:c3:ca:1a:0d:41:fc:ca:51:f2:a8:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:FF:87:62:5D:D7:4A:89:A7:F1:06:85:E5:EB:98:3A:E5:89:6B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sgr_h2Jd10qJp_EGheXrmDrliWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:1e:7e:29:54:9c:27:d3:07:19:47:40:d2:5a:f9:b1:d0:d5:
de:6c:b5:4e:52:2a:2c:10:d3:59:85:b1:e1:82:d9:0a:86:a5:
f0:43:91:5a:2f:f8:25:60:ac:a2:38:41:68:e1:0e:10:17:24:
2d:72:01:2d:2e:87:df:dd:b1:fc:3d:e1:df:ca:4d:dc:26:14:
c0:62:70:99:65:95:5f:d2:9d:5f:e5:3f:76:f8:4e:b3:53:ec:
3d:9e:57:c6:72:f2:ab:6d:ec:41:cd:e5:18:bb:b4:db:47:8e:
05:fa:b6:09:77:e7:cd:07:6f:be:54:f8:cd:2d:0f:c4:63:ad:
d9:77:60:af:5b:54:73:80:2a:2d:36:df:c4:a8:21:65:ef:6a:
bd:b6:df:7a:6b:df:75:df:ea:8c:09:d0:50:98:86:2c:24:fb:
eb:34:0e:4c:36:ff:43:52:32:d6:96:37:8c:07:23:5e:6e:d1:
4e:17:0c:2c:7c:82:10:a5:26:2b:fd:72:e2:ba:62:9f:18:c9:
c3:10:97:94:1e:17:f5:83:5b:ee:f4:d4:97:47:b9:e3:cf:72:
c3:e0:90:4a:e4:35:6f:5d:e7:f8:65:33:4a:25:84:ff:b5:7d:
1d:68:21:1e:44:63:0a:f2:e2:d1:88:6e:e9:2d:84:24:08:cf:
c4:20:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:23 2023 by rpki-client on console-ams.rpki-client.org