Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/yO_3IOtVqEGw3bCbMNHQUZ7sANQ.roa
File: yO_3IOtVqEGw3bCbMNHQUZ7sANQ.roa (raw, json)
Hash identifier: a4n+IjY1xqXpqF5xy7ZCWVv6c+kaM9TRqS6r4tTC4Zo=
Subject key identifier: C8:EF:F7:20:EB:55:A8:41:B0:DD:B0:9B:30:D1:D0:51:9E:EC:00:D4
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01834559CE4CF41CB476B3DF754AD9C7FC68
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/yO_3IOtVqEGw3bCbMNHQUZ7sANQ.roa
Signing time: Fri 16 Sep 2022 08:10:56 +0000
ROA not before: Fri 16 Sep 2022 08:10:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 85.28.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:59:ce:4c:f4:1c:b4:76:b3:df:75:4a:d9:c7:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Sep 16 08:10:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8eff720eb55a841b0ddb09b30d1d0519eec00d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:6d:ca:3a:be:7d:28:fa:68:ed:97:67:35:
c2:06:86:ae:36:c5:a9:d3:58:87:f9:e3:39:f9:21:
d2:4b:5e:e8:ad:50:92:91:76:dd:23:ca:82:44:7f:
31:a9:c7:14:e9:c0:c8:0e:b2:78:17:3f:43:18:93:
1c:02:a7:5a:16:e3:c3:6b:7c:ca:b6:c3:9c:24:e9:
33:52:5e:c8:44:eb:82:ae:bb:ec:e9:82:fd:8e:b3:
05:f8:ec:1a:ed:08:4d:c8:fa:43:d6:5a:d0:a4:75:
1e:e7:e7:32:7f:39:e1:b6:95:99:0a:f9:66:a0:cf:
71:ea:92:e4:8a:ea:73:1a:61:d0:03:8f:9a:30:13:
7d:39:28:d8:52:25:97:b3:4c:fd:33:5b:9f:f1:e5:
94:fb:e0:5d:b0:d5:12:1d:08:aa:be:7e:a0:9c:78:
5f:a1:1b:9c:d9:d8:13:76:d5:dc:6e:f5:7c:6a:cc:
ba:27:38:b2:a7:1a:47:f4:97:83:20:f4:da:b7:b8:
e5:6b:13:bd:b5:ea:f7:0d:8a:e7:5a:94:8b:60:b9:
ab:02:a4:25:24:75:11:84:7b:a6:3a:f1:67:49:b5:
14:c0:dc:0b:f9:0b:ef:31:c3:e9:51:8f:12:f3:52:
d2:91:9b:dc:57:33:93:ac:37:9c:dd:c0:f5:a7:39:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:F7:20:EB:55:A8:41:B0:DD:B0:9B:30:D1:D0:51:9E:EC:00:D4
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/yO_3IOtVqEGw3bCbMNHQUZ7sANQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.60.0/24
Signature Algorithm: sha256WithRSAEncryption
43:48:ac:67:9c:d6:1f:10:2f:84:44:f5:8c:f7:42:20:a8:ef:
b1:1e:75:68:f3:52:41:9b:fa:97:84:ba:0a:48:ed:fa:d5:c0:
3e:b7:f2:1a:55:0b:9a:03:d1:87:f7:5e:0c:49:96:9d:72:6e:
6f:49:64:46:40:19:7c:09:fa:c4:62:47:8c:39:2e:3a:51:17:
b1:52:47:6f:ef:66:eb:65:ee:33:3f:ae:75:cf:bf:27:9f:47:
50:be:0d:85:70:e4:6f:a4:28:a2:e2:75:58:17:70:0c:03:93:
a4:0c:04:d6:4a:3f:1f:1c:e0:6b:e2:21:4d:dc:41:b4:8c:a5:
2a:7e:ba:ea:dc:fc:8d:2d:73:25:e4:ea:d2:fe:12:9d:a7:b5:
6b:f7:b6:66:41:98:c6:2f:ea:11:a1:00:5d:b2:1f:95:3c:db:
11:d1:36:a5:09:4a:67:b0:22:d3:5e:16:4f:e2:bc:15:79:24:
a5:14:0c:63:42:bd:8b:c8:a9:e3:50:ce:df:4f:ed:a1:e0:bd:
52:25:09:34:94:f2:3b:59:48:15:60:06:14:a6:18:97:33:b1:
70:8d:b6:64:db:98:d8:d4:4f:a2:fc:03:33:85:dd:b5:7c:80:
d5:7b:09:b5:7c:16:2d:dd:67:82:c7:e2:d1:7c:bd:39:11:78:
c7:f8:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:38 2023 by rpki-client on console-fra.rpki-client.org