Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nyTXhzwsxcY7jgbH0mDacpLnSGw.roa
File: nyTXhzwsxcY7jgbH0mDacpLnSGw.roa (raw, json)
Hash identifier: s+n6TzAK5S3ZyZPV9rsQF56YfFudd47Q/PmRY0Yu80k=
Subject key identifier: 9F:24:D7:87:3C:2C:C5:C6:3B:8E:06:C7:D2:60:DA:72:92:E7:48:6C
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 174AB9A5
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nyTXhzwsxcY7jgbH0mDacpLnSGw.roa
Signing time: Sat 01 Jan 2022 16:03:50 +0000
ROA not before: Sat 01 Jan 2022 16:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44289
IP address blocks: 85.204.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390773157 (0x174ab9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f24d7873c2cc5c63b8e06c7d260da7292e7486c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:ae:16:a3:a7:2d:3b:da:ce:12:39:20:91:
bd:6b:ed:a6:a7:1c:8c:3c:e5:57:0c:e6:77:89:a8:
68:6d:0a:1e:38:8c:a6:bd:e6:0a:2a:1a:d6:3f:a7:
31:71:df:6a:18:4a:a9:6e:7e:5e:8e:4d:b4:42:aa:
3e:65:14:fd:ee:48:f6:8d:b7:43:85:3f:8d:4c:9b:
62:04:a6:62:a0:d0:3b:6a:9d:6c:00:21:3c:54:5c:
25:e2:f2:58:34:99:18:9f:43:e1:55:bd:bb:db:43:
b2:db:d6:2e:cd:73:e0:cb:e8:4d:db:72:12:80:cc:
49:76:d4:32:4b:4b:b4:97:b6:7e:ac:bf:ac:19:c4:
f9:b1:38:74:eb:d3:d5:e9:6b:95:1b:e9:8d:63:9e:
9c:09:eb:13:37:4b:ef:30:a4:99:b9:f6:23:4f:d8:
ee:58:82:7f:0d:16:1c:e7:1a:7c:4a:60:9d:e2:c0:
bb:1c:9b:12:34:ad:68:e1:07:cb:aa:0c:d5:0d:3b:
3c:bf:cb:5c:59:df:31:f7:7b:15:21:75:c8:bb:4a:
a2:ec:2c:59:ba:24:d8:99:49:a7:ad:f5:6d:50:8f:
af:e8:40:fc:2c:6c:be:d2:21:05:89:e7:28:33:db:
28:11:c2:f3:96:d3:ab:82:f6:fa:1a:1b:d9:1c:7e:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:D7:87:3C:2C:C5:C6:3B:8E:06:C7:D2:60:DA:72:92:E7:48:6C
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nyTXhzwsxcY7jgbH0mDacpLnSGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
37:47:91:75:87:31:0e:e8:f0:27:99:73:2b:15:8c:c8:89:0e:
08:23:1f:ac:79:53:38:26:36:5f:eb:0a:6b:83:e6:ca:fc:f8:
39:35:9e:27:9a:f9:79:fc:09:0b:d8:6a:09:70:b7:07:75:83:
0a:66:94:7a:88:5a:03:06:6e:77:6a:ab:f7:dd:61:6d:20:e3:
ba:83:02:11:55:fc:62:52:de:50:65:7b:f3:11:8a:99:33:ef:
6d:30:c6:40:eb:52:cb:be:87:ee:1b:ea:7b:de:be:6f:7a:fd:
73:36:c1:7f:76:26:51:00:0a:2d:70:e8:8e:14:71:bf:77:03:
e7:8d:70:2c:a8:55:1f:77:c5:40:a0:84:c5:56:cf:ae:a0:f5:
f0:52:28:28:27:bc:28:bc:ae:60:29:49:57:57:da:d0:aa:a8:
29:2c:0c:3b:af:b0:59:1c:2e:ec:92:ec:b3:73:66:b6:b8:8d:
4f:6c:8e:6b:00:3f:f9:d8:96:af:5e:f0:2c:40:46:74:2f:e9:
80:aa:39:9c:cd:8e:cb:14:50:57:19:27:1a:c2:66:39:92:94:
dd:42:02:a7:d7:e0:a7:d1:21:f6:7c:82:f1:c8:a0:34:29:f2:
dc:ff:8b:c5:2d:9b:84:2c:9b:f0:8d:78:ee:1b:6b:b8:49:58:
f5:dc:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org