Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/7HDxSPOtFGzB4GrF41FHDrGYnTY.roa
File: 7HDxSPOtFGzB4GrF41FHDrGYnTY.roa (raw, json)
Hash identifier: gUK0ohIh6V87fI3qN4j29hnaGztVnhI1rAFTfUe3MV0=
Subject key identifier: EC:70:F1:48:F3:AD:14:6C:C1:E0:6A:C5:E3:51:47:0E:B1:98:9D:36
Certificate issuer: /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Certificate serial: 361C8597
Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/7HDxSPOtFGzB4GrF41FHDrGYnTY.roa
Signing time: Sat 01 Jan 2022 02:52:42 +0000
ROA not before: Sat 01 Jan 2022 02:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34309
IP address blocks: 85.22.173.0/24 maxlen: 24
212.29.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907838871 (0x361c8597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Validity
Not Before: Jan 1 02:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec70f148f3ad146cc1e06ac5e351470eb1989d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:ed:d5:da:4c:4f:db:70:e1:b1:a1:10:a5:
cb:fe:8d:a4:e8:ab:4c:18:c2:97:8c:e4:a8:22:65:
88:16:a7:56:9d:bf:e1:48:9e:a4:15:96:0e:9e:8d:
17:5d:09:f3:61:eb:63:1b:fb:eb:bc:2d:a5:c0:75:
17:27:b2:b9:40:81:9e:59:ef:4f:55:82:8b:d1:ae:
64:ce:7d:da:96:e2:60:92:ec:41:cf:44:47:71:0a:
bb:27:7f:11:cb:9f:23:9d:e4:b1:99:6b:c1:98:46:
78:40:4e:7f:ed:46:d4:14:9f:1a:a4:dc:31:ff:1b:
7d:c7:01:69:6c:8c:b7:32:ff:73:15:e5:b5:04:17:
af:d3:9f:73:e0:a8:ad:e3:f9:e4:7f:7d:42:da:02:
a3:0a:10:16:e5:81:e4:1b:a2:25:7b:f6:b9:c2:f4:
36:e7:1f:7a:77:20:ad:d1:33:e2:1a:9b:f8:55:27:
64:19:0f:80:ec:f7:d3:b6:fa:54:3a:fa:0f:96:bf:
07:6f:ad:27:41:f7:2e:5e:8f:42:4d:55:12:65:61:
7c:06:62:b6:6e:ed:e1:20:a2:81:e2:c4:b1:52:72:
1f:ad:88:97:de:4c:29:00:da:11:1f:a7:04:f0:41:
66:91:37:bd:07:3a:02:9f:4b:c1:a4:1b:df:59:d4:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:F1:48:F3:AD:14:6C:C1:E0:6A:C5:E3:51:47:0E:B1:98:9D:36
X509v3 Authority Key Identifier:
keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/7HDxSPOtFGzB4GrF41FHDrGYnTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.22.173.0/24
212.29.39.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5c:1a:ab:99:c2:be:06:64:0a:8b:08:d6:ad:fd:3e:95:52:
bc:c9:38:5c:1a:1d:22:10:b8:b9:99:1c:64:69:4b:45:7f:91:
91:93:b7:28:8b:d3:8a:69:9b:c5:c1:c7:86:30:3a:4a:ed:36:
91:8f:d9:a5:db:23:7e:57:02:9f:d9:7c:40:1b:e8:19:f9:3a:
0d:d8:e0:25:35:31:84:c0:c2:b0:b7:05:c4:10:8e:07:ea:7f:
df:c5:88:40:71:68:d4:e6:41:14:6c:1d:f6:8f:bf:7d:10:40:
8d:7e:9d:3e:92:09:d1:30:c4:e0:01:43:e9:c8:ac:73:e6:7a:
67:0b:4f:e1:97:07:70:a4:a6:67:99:f7:7d:5b:f8:0f:2f:f9:
6b:d2:a2:15:29:fc:3d:7e:f6:3d:17:b6:de:bc:cc:f7:23:3b:
9b:02:6a:52:f2:df:d5:cb:c2:1d:9e:bb:11:3e:51:6f:13:c6:
9d:fd:03:6c:3a:16:28:4b:df:4e:28:98:60:e9:00:a1:86:56:
d7:15:8b:3f:84:81:cc:6a:33:85:de:2c:a6:2f:b3:68:8b:ea:
d6:24:e9:68:8a:64:70:89:be:93:b4:e1:b6:21:23:d8:83:07:
fc:60:9d:c6:a9:15:34:65:5d:50:c2:dc:ee:af:02:76:fc:76:
9c:6d:68:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:15 2023 by rpki-client on console-fra.rpki-client.org