Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YN0hZqsCSd2umnFpz5G9qZEJ-ms.roa
File: YN0hZqsCSd2umnFpz5G9qZEJ-ms.roa (raw, json)
Hash identifier: R3VdwfZhi8azEHuALrSuG7K9fzfno1J6KWqJV165iww=
Subject key identifier: 60:DD:21:66:AB:02:49:DD:AE:9A:71:69:CF:91:BD:A9:91:09:FA:6B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17D0464C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YN0hZqsCSd2umnFpz5G9qZEJ-ms.roa
Signing time: Sat 01 Jan 2022 04:54:32 +0000
ROA not before: Sat 01 Jan 2022 04:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138145
IP address blocks: 85.209.254.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399525452 (0x17d0464c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60dd2166ab0249ddae9a7169cf91bda99109fa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:30:fd:86:48:34:99:5b:74:52:cb:28:08:
23:71:92:44:16:ec:c4:e2:58:bc:b1:7d:f9:f8:3b:
a2:ff:a1:06:62:33:db:05:05:dc:75:57:72:80:84:
7a:5a:13:88:17:ca:f4:43:2a:48:9d:1d:e5:1f:41:
af:e7:69:bd:fb:76:c4:a5:5a:3a:eb:b7:0d:b8:d0:
bd:d6:39:e2:c3:53:ee:a8:bd:2d:1e:71:05:a2:79:
8e:ae:d8:8f:39:f8:42:7c:9e:58:cc:69:87:51:a6:
22:34:b7:ad:c2:8d:3f:0e:1c:d2:c0:9a:53:65:5f:
cc:ec:41:8b:41:8f:f2:6f:d0:63:72:52:52:7f:f3:
33:61:77:30:11:09:d2:7d:f1:67:97:99:93:cb:15:
ea:02:7c:4a:e3:02:5d:06:d8:53:79:a3:92:39:3f:
b0:2f:e5:cf:41:49:86:8c:be:97:3b:51:7d:1d:f8:
e8:65:07:3c:17:73:6d:9e:c4:df:f6:31:f1:be:1b:
e3:af:d3:af:70:dc:af:a4:7a:f8:bb:c8:f7:29:fb:
02:a2:cc:cc:55:0b:2e:29:de:05:c6:5e:f1:11:ce:
b7:be:67:c2:b5:48:43:cc:be:2d:14:34:40:e5:eb:
76:de:22:e9:b8:d3:5a:93:65:a9:6f:76:c1:e2:66:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:21:66:AB:02:49:DD:AE:9A:71:69:CF:91:BD:A9:91:09:FA:6B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YN0hZqsCSd2umnFpz5G9qZEJ-ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e7:6c:95:a0:a8:33:50:f9:d2:13:13:76:fa:01:9e:cb:34:
83:c9:56:c4:6a:ca:71:55:fe:bb:e6:21:50:ec:38:b5:17:f6:
3d:a2:82:bb:75:58:2c:6e:76:1b:09:87:86:e4:f2:ba:cf:3d:
21:85:0a:ec:32:3c:d3:8f:b7:f1:32:00:c5:1d:d8:82:94:c6:
43:bc:09:8c:d7:81:11:45:b8:2a:9e:82:b3:23:fd:c4:8f:2b:
f7:6f:df:ae:3a:ea:70:15:30:3f:71:ea:79:85:67:73:5c:1b:
46:b3:a5:ad:96:75:47:32:77:af:b8:6f:20:7d:34:81:9f:18:
96:0f:9e:0a:79:57:b9:9d:2e:f1:2b:10:1b:e3:62:b8:fb:b6:
99:87:da:40:84:a9:51:c0:8f:5d:50:3e:8f:29:1d:9a:62:c4:
19:bb:5c:16:50:31:a4:88:45:c0:40:19:f3:ff:71:b6:67:8a:
92:cb:9e:36:ab:7f:80:0d:e0:97:66:18:e4:75:31:2f:7f:41:
82:f8:e9:db:b4:c1:23:58:5e:d6:25:37:30:8e:2d:fb:e9:8b:
a6:d4:35:53:b8:a2:31:f5:26:c6:4b:d3:33:b1:2a:fb:bf:e5:
42:ce:1a:25:13:88:7c:6e:6d:2d:d3:7b:5f:07:0b:a8:0d:4d:
ac:4f:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org