Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/bxBPnpnQt4xMy1R2NwFJ2RlBsYo.roa
File: bxBPnpnQt4xMy1R2NwFJ2RlBsYo.roa (raw, json)
Hash identifier: HPtdMAdR61Qf/HKGdECNiwssNuV9TZnyoQ7pN58+hH4=
Subject key identifier: 6F:10:4F:9E:99:D0:B7:8C:4C:CB:54:76:37:01:49:D9:19:41:B1:8A
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 3574A259
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/bxBPnpnQt4xMy1R2NwFJ2RlBsYo.roa
Signing time: Wed 01 Jun 2022 17:23:20 +0000
ROA not before: Wed 01 Jun 2022 17:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 185.84.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896836185 (0x3574a259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jun 1 17:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f104f9e99d0b78c4ccb5476370149d91941b18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:2a:5d:71:dc:21:74:65:60:ec:2a:10:e3:
e0:91:af:8e:ca:17:46:7a:29:3a:f2:d8:6e:e7:8f:
c0:2b:a6:ae:21:c3:c7:6e:fc:95:4f:df:a1:5c:bd:
e3:3a:60:cb:ba:53:71:62:3c:8e:dd:e0:a6:79:fc:
a8:ce:29:29:82:e8:16:52:e1:69:33:99:58:e5:af:
4e:4d:c0:f1:72:63:11:9c:31:cf:9e:6b:44:4e:53:
a4:4f:3a:d4:9b:e6:1a:90:dd:f2:41:c6:96:1b:8d:
94:b8:4a:f0:ad:52:2c:3f:fa:85:c4:d0:e6:51:1b:
03:ff:ae:ca:a6:68:72:9a:6c:24:68:19:f4:bb:c1:
bb:6b:41:6a:8d:1e:b4:cd:30:e3:df:b0:6e:2b:93:
7c:7a:1c:f4:40:7a:c7:ce:a7:90:12:08:6a:d0:9a:
03:84:b0:c4:77:59:35:dc:fe:fd:77:05:38:e4:5d:
25:08:da:d1:e3:e1:fe:7f:22:de:9e:8c:ff:27:e3:
d1:59:b2:20:10:d3:ab:b3:7d:08:38:8a:f8:8b:b6:
65:de:44:39:e6:8d:7d:4d:d9:f4:b5:b5:65:97:7e:
19:43:a0:fe:31:6a:02:ff:7c:59:ad:3e:d9:34:e0:
a9:02:c2:8b:c2:57:1c:68:cc:b2:93:90:2d:ac:ef:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:10:4F:9E:99:D0:B7:8C:4C:CB:54:76:37:01:49:D9:19:41:B1:8A
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/bxBPnpnQt4xMy1R2NwFJ2RlBsYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.160.0/22
Signature Algorithm: sha256WithRSAEncryption
41:a8:7d:79:5b:f7:47:3a:f9:c8:69:b4:6f:bb:a6:f5:62:82:
68:36:82:07:7f:49:ef:0c:d6:10:52:18:65:20:76:fe:11:fd:
c6:0a:9d:40:4f:60:da:3e:85:b3:c0:60:73:ba:5e:76:a8:a0:
f4:ca:cb:5d:39:93:95:92:de:a2:06:f8:dd:89:60:05:f7:1d:
f2:e8:4a:e8:1d:33:14:19:20:cf:0f:c3:c9:53:6d:31:03:ee:
20:ec:3d:f7:ac:2d:71:f2:ce:03:0f:d9:c5:35:5c:c9:f9:c3:
71:6a:ac:ac:d7:b7:b3:32:15:0c:92:f5:80:34:ee:2e:35:80:
24:1f:8e:28:7c:a9:00:fb:eb:75:80:fa:d3:4a:79:80:b6:a5:
d6:b6:37:fd:de:ad:40:fa:dd:74:45:0a:ea:1a:a5:19:98:e8:
a6:8d:f2:89:76:20:ac:09:81:11:1d:39:5f:03:f3:3d:ad:5c:
49:d2:56:ef:a8:98:a2:b2:d7:0a:5d:40:5d:45:5c:12:8e:90:
99:51:ae:7f:fd:51:97:7a:0b:9b:75:3d:98:46:7e:e0:8a:af:
c6:16:4d:b8:71:7f:2f:3c:65:b5:80:2a:29:da:5a:2e:d0:61:
96:83:b0:3d:85:1a:87:c0:ec:82:4b:d2:0a:cc:90:19:cc:60:
65:40:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org