Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/68YmEw5hTAzFFbfmvdywIgDmCvo.roa
File: 68YmEw5hTAzFFbfmvdywIgDmCvo.roa (raw, json)
Hash identifier: K+3tpphFGq7mbQiAW4eYOyRRDqEJV7cTTv9gL15Ro7k=
Subject key identifier: EB:C6:26:13:0E:61:4C:0C:C5:15:B7:E6:BD:DC:B0:22:00:E6:0A:FA
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0181ECB84C6EFF45A495CAF95CF3806EC6B0
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/68YmEw5hTAzFFbfmvdywIgDmCvo.roa
Signing time: Mon 11 Jul 2022 10:05:09 +0000
ROA not before: Mon 11 Jul 2022 10:05:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210644
IP address blocks: 89.185.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:b8:4c:6e:ff:45:a4:95:ca:f9:5c:f3:80:6e:c6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jul 11 10:05:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebc626130e614c0cc515b7e6bddcb02200e60afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:96:c9:b9:0b:b9:72:2d:f2:a8:d5:e7:84:
1f:d6:d1:31:87:ea:24:42:5f:9b:ac:b9:95:73:45:
90:f9:3e:20:c3:b4:7a:bd:89:6c:12:1f:19:a9:ff:
89:ef:4f:8b:c6:40:59:e7:01:73:85:14:ab:0e:96:
59:fc:c5:62:9d:cb:6d:2d:08:6e:d5:b3:b7:f8:03:
e7:51:7a:d8:50:62:a2:5b:6b:b2:91:74:09:b3:59:
75:db:20:66:92:ab:33:28:cf:43:1b:98:29:aa:1e:
57:f5:1b:1e:c1:59:d4:68:f7:6d:00:a6:c2:97:aa:
c8:e1:db:53:36:dc:e9:9b:a5:b6:26:00:b8:3c:12:
6a:09:b5:a4:b6:47:16:e9:c9:3a:57:5d:34:04:d2:
da:d3:f3:8d:a6:0e:69:63:f5:86:6f:d5:c8:77:0d:
fa:c5:83:70:7f:a0:b0:51:ee:3f:19:2c:c2:e2:b0:
7f:1e:0d:0c:7e:b4:e6:01:ef:ad:e9:cc:1a:3c:8d:
ef:09:ee:4f:83:6c:a9:61:0e:e0:eb:e1:1c:16:9c:
6a:cc:45:ea:ea:b4:3a:3f:5a:54:e7:f1:16:4f:d2:
8a:a4:0e:34:c3:03:67:b7:aa:22:2d:6c:8d:34:4d:
ea:c8:28:ae:b4:6c:6c:30:8f:dc:cc:d7:83:79:42:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C6:26:13:0E:61:4C:0C:C5:15:B7:E6:BD:DC:B0:22:00:E6:0A:FA
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/68YmEw5hTAzFFbfmvdywIgDmCvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.85.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e8:57:dd:fe:d9:25:52:f0:58:5f:06:1a:a0:ca:ab:9d:36:
e0:c7:7e:77:14:68:95:f3:7f:45:51:65:12:d7:74:55:9b:c8:
e2:83:bf:b3:28:8c:0b:5a:32:f5:e2:9d:dd:51:60:5f:4c:a2:
2b:d8:7b:33:8e:69:b2:b3:b6:ef:a0:20:9f:59:02:65:97:2a:
98:3e:63:c9:3d:c4:ec:a3:43:24:f5:3c:9a:71:21:22:64:a6:
87:5a:87:77:59:91:c7:7d:aa:3b:2f:6b:67:a9:b6:e4:5f:88:
d5:94:62:07:bf:4f:9d:b3:12:30:34:9f:87:02:21:99:65:cb:
1f:f5:a8:ca:15:5c:bb:89:32:b0:20:a5:97:62:cd:0d:35:1d:
be:f5:e8:48:16:ad:89:64:68:d2:67:a1:c6:34:98:fe:a9:42:
db:c9:8e:4c:fa:99:36:b4:1d:c6:0b:f7:bc:af:01:79:cf:ca:
d6:df:f5:7a:87:82:8e:6b:04:4c:96:02:49:45:57:70:a7:17:
95:76:1b:19:63:36:4f:26:36:ce:52:ef:ef:11:43:02:96:98:
56:5a:a0:3c:f4:7c:f5:3e:ab:88:f1:bd:92:6b:6c:0a:3d:94:
04:31:11:5d:c9:fe:7c:b0:e5:2f:f1:90:f1:30:46:e6:bd:3c:
5c:cb:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:14 2023 by rpki-client on console-fra.rpki-client.org