Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/BmF_FpbIS1Kr6bT16iJkkd8Wvc0.roa
File: BmF_FpbIS1Kr6bT16iJkkd8Wvc0.roa (raw, json)
Hash identifier: 767iEXPBLc8af1L1OdZqfXWoRmhKDyADxHSOqEaLxeY=
Subject key identifier: 06:61:7F:16:96:C8:4B:52:AB:E9:B4:F5:EA:22:64:91:DF:16:BD:CD
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 03DCAB7E
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/BmF_FpbIS1Kr6bT16iJkkd8Wvc0.roa
Signing time: Sat 01 Jan 2022 07:58:30 +0000
ROA not before: Sat 01 Jan 2022 07:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 185.171.54.0/24 maxlen: 24
185.171.55.0/24 maxlen: 24
185.171.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64793470 (0x3dcab7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Jan 1 07:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06617f1696c84b52abe9b4f5ea226491df16bdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:72:13:58:d1:b6:89:31:98:01:aa:18:14:
36:7a:a0:29:b0:ea:42:e8:1e:21:f0:52:e8:95:bb:
58:a8:8d:7a:65:cd:3a:95:a2:c1:53:68:5e:81:66:
f3:7a:35:48:4f:a8:ad:cc:ba:33:92:46:b6:da:0d:
e2:57:ba:27:d5:a4:52:7f:c8:5e:1d:0e:96:51:bd:
25:93:9c:19:96:cc:b9:2e:06:d0:12:ff:94:06:5d:
f6:ab:e7:1f:f5:c6:ce:56:f8:54:b6:c2:7f:43:ad:
e5:fd:72:d9:ee:0d:10:a3:b1:23:ea:56:ad:eb:a2:
ea:40:6d:e8:e2:4a:48:b2:54:a0:f3:34:c4:f5:7e:
92:bf:3c:ba:59:4c:8c:20:b9:5d:66:26:78:6b:06:
d3:68:50:dd:ec:67:be:3f:4e:2b:ce:44:c3:ed:20:
73:4c:a7:82:82:2e:86:0c:5d:c2:9d:cc:ab:84:36:
ba:7c:3b:68:63:28:8f:97:98:1c:ef:63:1b:41:7b:
a5:bb:bb:36:ee:27:a1:1f:9c:ba:63:d0:a0:ac:85:
9e:2f:d0:e5:04:a7:4f:8a:7b:01:cf:1d:08:e8:61:
a1:ba:d9:98:e1:4b:85:a0:44:32:03:d6:63:dc:81:
91:ce:48:0f:4b:b0:ab:3e:8f:e3:89:55:a6:30:f0:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:61:7F:16:96:C8:4B:52:AB:E9:B4:F5:EA:22:64:91:DF:16:BD:CD
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/BmF_FpbIS1Kr6bT16iJkkd8Wvc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.52.0/24
185.171.54.0/23
Signature Algorithm: sha256WithRSAEncryption
36:d4:b6:1b:ed:17:da:8c:3b:1a:3a:1e:10:4e:9e:32:bc:a7:
dc:8e:6a:45:86:cd:da:ef:72:a0:7a:e7:6f:b5:53:5b:99:23:
d1:92:48:82:7f:24:6f:89:bf:7d:c2:11:fb:a4:24:be:10:e4:
91:0e:ba:c8:01:b2:cb:80:d8:de:4d:03:a4:7b:2d:2e:2f:0c:
fa:a1:ca:f5:7c:f3:25:f9:ab:ec:25:bf:99:9b:a7:b3:01:cd:
cb:f6:a0:4c:fc:c0:27:7a:aa:ae:27:63:23:e9:1c:06:18:bb:
33:0e:b3:ba:b6:dd:40:4b:31:fd:56:98:ba:86:e0:d6:71:b6:
ec:ea:b1:20:9d:fc:50:e8:89:59:b2:43:19:38:80:cd:35:fc:
54:4e:03:af:6e:d0:3b:68:83:d4:ca:92:4e:c7:15:d3:d7:f8:
65:f2:85:13:e5:83:16:42:29:89:5c:d9:82:d4:5b:bc:df:23:
2f:7b:41:f1:ab:cd:db:3f:21:99:80:24:84:37:bc:fa:f1:db:
10:62:40:f7:c3:52:dc:0f:d4:10:e2:a4:d4:94:97:47:f3:78:
e2:45:02:17:b4:51:bb:d3:22:25:e6:b8:f3:d7:a8:63:3c:71:
8d:08:1d:b0:d7:86:9a:33:88:f4:e0:28:a1:ac:2c:f3:85:b4:
93:9a:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org