Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/u-rPbv9Z0hy8thoSPFYy3dDjJ00.roa
File: u-rPbv9Z0hy8thoSPFYy3dDjJ00.roa (raw, json)
Hash identifier: sriZDriDSXajraKf/9whIez/Tjg8r//ZVettC/o0d+o=
Subject key identifier: BB:EA:CF:6E:FF:59:D2:1C:BC:B6:1A:12:3C:56:32:DD:D0:E3:27:4D
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 0184F224ABC700DE2B72152A1FB172051F27
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/u-rPbv9Z0hy8thoSPFYy3dDjJ00.roa
Signing time: Thu 08 Dec 2022 14:30:00 +0000
ROA not before: Thu 08 Dec 2022 14:30:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 85.28.63.0/24 maxlen: 24
85.28.61.0/24 maxlen: 24
109.238.204.0/24 maxlen: 24
109.238.205.0/24 maxlen: 24
109.238.206.0/24 maxlen: 24
109.238.201.0/24 maxlen: 24
109.238.202.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
109.238.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:24:ab:c7:00:de:2b:72:15:2a:1f:b1:72:05:1f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Dec 8 14:30:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbeacf6eff59d21cbcb61a123c5632ddd0e3274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:bf:90:91:37:94:39:cf:17:b9:6d:4f:b5:
48:b8:2d:7a:e0:18:97:f6:02:0b:27:25:0b:88:55:
2f:2d:2b:af:39:d4:ea:be:be:35:21:52:aa:97:f5:
8f:de:66:ee:0c:34:3e:b7:99:5d:a4:0a:1f:18:03:
d1:48:e2:aa:de:9c:f1:5a:02:ff:b4:4f:69:c2:33:
37:b2:cc:1b:d0:4f:46:53:56:42:40:4d:a2:ba:02:
4e:18:b9:2f:a1:eb:58:17:43:27:26:e4:49:9d:5d:
8d:0c:3f:3a:a3:c9:ae:56:11:97:82:c6:fc:65:8b:
7a:66:7e:bf:50:52:e8:c3:ca:da:bd:ac:e8:8e:f4:
c8:60:10:8f:59:44:11:7b:76:6c:17:f0:0f:a1:ad:
71:4e:7f:5a:07:8f:48:01:ee:0d:7c:b0:eb:09:fb:
18:e8:ed:57:0c:c2:34:e4:a4:72:f3:c5:bb:cb:1f:
6f:56:bb:7d:99:62:a4:28:3d:a0:db:a7:69:43:0a:
45:9f:36:fe:10:a4:a2:00:0c:c9:fa:0e:9c:ee:e1:
55:b6:93:ef:08:93:3f:cf:96:c2:64:5b:1a:32:89:
df:bc:f7:21:f0:61:2d:ea:68:2b:59:f5:da:a7:3b:
60:64:8e:06:62:97:49:ea:01:a5:90:5b:39:f5:0b:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EA:CF:6E:FF:59:D2:1C:BC:B6:1A:12:3C:56:32:DD:D0:E3:27:4D
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/u-rPbv9Z0hy8thoSPFYy3dDjJ00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.61.0/24
85.28.63.0/24
109.238.201.0-109.238.207.255
Signature Algorithm: sha256WithRSAEncryption
67:b8:a2:9e:5b:fd:3f:ac:53:f5:a5:97:8c:cd:91:5e:15:aa:
62:d2:30:98:3a:fb:ba:11:72:dd:97:f8:07:3b:13:fd:fb:6f:
57:cc:31:4d:54:b4:68:69:f6:75:84:0a:ce:29:ea:72:04:be:
99:c4:ef:60:08:09:1d:c7:25:86:ab:5e:07:b5:0d:9f:50:b8:
5b:88:3b:0e:57:0e:89:73:b0:d7:ad:53:77:67:5a:6b:ec:93:
0d:32:38:03:52:e4:e9:11:aa:39:95:0d:61:7d:76:f5:e5:d1:
51:75:b3:cf:a2:63:44:cb:13:6a:09:e3:65:56:9f:94:37:d6:
05:e7:74:b0:e3:cd:41:99:64:35:a3:05:db:d0:6b:f0:1d:c9:
9a:09:65:db:4c:76:e9:77:b4:09:17:60:df:09:b0:d6:76:46:
bb:e6:82:33:f2:15:c8:e7:26:f9:ae:29:75:f1:58:21:0f:d3:
5b:c6:20:65:70:d7:ad:8e:4f:02:b8:17:9c:af:8b:97:5f:ce:
f3:cf:05:57:53:78:b1:d8:e7:a0:17:a5:1a:c0:b5:9e:75:e9:
29:92:93:84:ca:69:00:69:28:17:9d:af:40:fd:ea:61:e8:80:
ab:61:d6:30:cd:7c:70:cb:ba:53:1d:72:c3:53:a6:21:56:26:
77:5b:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:32 2023 by rpki-client on console-ams.rpki-client.org