Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/aIx7SrB8NQi5u4sqdlA5JqZmbwM.roa
File: aIx7SrB8NQi5u4sqdlA5JqZmbwM.roa (raw, json)
Hash identifier: CF44hV0KXJq6nG2kfivv0d8XmVdTbpL0TXIgR4ZVPos=
Subject key identifier: 68:8C:7B:4A:B0:7C:35:08:B9:BB:8B:2A:76:50:39:26:A6:66:6F:03
Certificate issuer: /CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Certificate serial: 0818D93E
Authority key identifier: EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/aIx7SrB8NQi5u4sqdlA5JqZmbwM.roa
Signing time: Sat 01 Jan 2022 07:01:30 +0000
ROA not before: Sat 01 Jan 2022 07:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210099
IP address blocks: 85.117.237.0/24 maxlen: 32
85.117.236.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135846206 (0x818d93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Validity
Not Before: Jan 1 07:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=688c7b4ab07c3508b9bb8b2a76503926a6666f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:43:a1:e8:f6:3e:a9:4e:ee:31:90:ad:37:
0a:20:41:58:2b:0e:39:c1:02:d0:9f:0e:0b:27:7b:
e0:1d:28:9d:d7:94:c4:e7:6d:cf:2b:15:2e:03:df:
40:ae:6f:c4:14:c5:eb:f7:b3:3f:63:df:00:32:67:
7a:5a:7e:de:bf:01:6f:97:a7:b0:7d:fa:fb:c0:95:
a9:f7:f5:d2:e5:d6:c6:ad:df:b7:5d:09:8e:8d:2d:
4b:93:b8:ba:c1:da:7e:d1:87:65:c4:34:6d:b1:a0:
e7:ce:c3:42:55:26:77:89:c1:ab:69:4b:a7:be:19:
57:11:8d:11:7c:e2:73:ee:97:ae:24:b9:3e:e2:a1:
ba:9d:d1:c3:34:45:ff:4a:37:64:cb:24:cb:b5:c6:
e4:44:60:74:a8:e1:99:d1:05:a3:5f:e5:f9:6e:49:
96:d9:91:48:67:f9:48:4b:28:d8:fb:b6:aa:d8:d8:
3b:0e:d2:df:54:a4:13:d0:db:66:e2:7e:2a:c0:32:
4a:78:71:e0:e4:c4:a2:36:c2:a8:12:d5:40:e7:8d:
5f:ff:22:38:d7:9a:2b:0d:e8:ed:47:0b:c0:e4:17:
16:6c:9d:3a:4e:6b:c3:28:a6:dd:37:b1:f4:94:70:
7c:70:e9:bc:00:68:15:c7:c4:06:38:7f:bf:e3:71:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:7B:4A:B0:7C:35:08:B9:BB:8B:2A:76:50:39:26:A6:66:6F:03
X509v3 Authority Key Identifier:
keyid:EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/aIx7SrB8NQi5u4sqdlA5JqZmbwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:14:fe:80:38:cc:4a:21:b5:44:fe:c5:32:ea:e6:e0:de:bb:
88:92:98:ac:02:b0:2b:a7:6f:be:f8:b9:51:e9:2f:dd:91:e5:
38:ee:5e:f4:e0:d7:f5:60:32:a1:5a:08:96:67:f0:ff:e6:e1:
55:f6:e2:24:58:2a:66:a3:3f:59:43:78:11:33:91:67:5a:e5:
08:4a:79:89:f3:6b:eb:be:e7:4e:f1:4e:64:3c:be:5e:4d:e9:
a5:04:7f:24:76:43:9a:77:9d:e1:e4:df:32:f3:72:92:e8:0a:
b3:60:62:9a:d8:0a:d5:3c:88:1e:f0:d3:3d:50:25:77:d2:40:
80:2d:76:6d:28:a5:e7:d8:a5:41:bf:32:4d:9a:1a:20:2d:7c:
b5:57:93:14:0b:49:36:69:0e:57:a5:9b:fa:9f:ee:f0:9b:48:
c9:6c:5c:a7:b1:e3:6f:24:6d:1e:53:82:25:50:cc:a3:b6:99:
42:8f:89:60:bb:c9:b2:37:c5:9b:23:81:88:a6:7c:9a:b9:ba:
d5:b8:7f:23:1e:18:18:cf:98:db:96:09:39:ea:32:f4:a0:53:
1d:ae:36:55:f3:f5:ea:df:21:d7:55:46:58:d5:59:ce:41:53:
ca:e0:9f:0b:39:1c:14:08:99:8f:27:10:02:f7:c2:06:ab:8c:
a3:99:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:26 2023 by rpki-client on console-ams.rpki-client.org