Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/bRyy05fVSIlc-nNecfBchVWcHlY.roa
File: bRyy05fVSIlc-nNecfBchVWcHlY.roa (raw, json)
Hash identifier: K9sJ2fVQdJxdF+yAbeh/l4Za/3fS77I069sbrau3+vo=
Subject key identifier: 6D:1C:B2:D3:97:D5:48:89:5C:FA:73:5E:71:F0:5C:85:55:9C:1E:56
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 0223E17B
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/bRyy05fVSIlc-nNecfBchVWcHlY.roa
Signing time: Sat 01 Jan 2022 08:02:56 +0000
ROA not before: Sat 01 Jan 2022 08:02:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203537
IP address blocks: 185.130.28.0/22 maxlen: 24
193.163.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35905915 (0x223e17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: Jan 1 08:02:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d1cb2d397d548895cfa735e71f05c85559c1e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:89:02:06:bc:a6:90:5e:2c:2b:04:3f:c8:
c9:d8:db:10:c3:92:41:f6:8d:1f:2f:86:f9:fe:0b:
28:e1:8b:bf:78:ef:1e:24:30:91:66:2d:eb:f9:ff:
1e:28:c1:27:42:c2:1d:15:e5:45:8b:46:6a:bc:a6:
4b:f9:b7:ab:ac:44:56:9f:7e:fc:bf:42:fa:23:0e:
84:26:65:4b:f3:58:e5:34:da:0b:78:c3:4d:be:e4:
a3:f0:41:a3:b7:3d:b9:93:06:a4:b9:39:c5:3d:5a:
d6:41:ca:d9:41:4e:17:61:88:07:d5:49:85:50:f8:
1a:e3:49:03:d8:de:dd:f3:97:83:89:9f:9b:9a:14:
0c:35:9a:0f:41:3c:c0:ca:63:64:94:64:b7:91:f9:
80:9d:8a:44:4e:fe:27:31:ef:0b:75:f4:fb:b1:63:
f3:79:43:1b:ed:69:36:b4:d5:19:ba:66:e8:cc:6c:
3c:c3:d2:eb:19:64:44:30:6d:2c:b7:03:6b:94:23:
8e:a9:88:be:91:82:ec:63:17:81:51:81:63:f5:44:
3d:fd:1a:c8:02:81:1a:0f:4d:74:de:0c:db:33:e2:
d4:6a:1d:f7:75:a7:ac:8d:83:92:ce:f6:e9:84:15:
c9:0d:72:29:82:4b:b8:b6:d9:27:ec:5f:49:04:e8:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1C:B2:D3:97:D5:48:89:5C:FA:73:5E:71:F0:5C:85:55:9C:1E:56
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/bRyy05fVSIlc-nNecfBchVWcHlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.28.0/22
193.163.126.0/24
Signature Algorithm: sha256WithRSAEncryption
54:83:2c:e9:73:21:d4:d5:d4:3a:e3:5f:98:89:7f:6b:f8:df:
54:6d:32:65:ad:84:09:3e:49:65:04:61:1e:5f:3c:97:42:3f:
6b:4e:9d:85:6c:e1:ba:eb:f3:ce:af:d4:3e:47:50:96:39:7d:
6d:07:9c:6a:59:25:7b:65:35:55:a9:94:23:ab:6b:32:c5:85:
b9:50:15:51:1c:f7:f8:18:56:52:47:0b:6d:78:54:31:42:f0:
57:99:00:36:14:30:2e:19:8f:c1:3e:e4:5f:01:4f:a9:77:a9:
33:57:03:36:00:fa:80:1c:5e:5c:75:e2:8e:b6:8b:35:8b:19:
f9:66:a0:0e:ea:bf:f6:ad:e3:7a:f3:f7:d1:1b:71:86:d7:30:
4c:25:25:15:70:61:37:92:f2:a7:a0:49:ed:3a:b5:a0:01:e3:
c9:fc:35:4d:81:9c:f9:c4:f3:1c:b7:0d:ef:85:55:47:1f:37:
df:ef:f7:aa:b7:08:5d:9f:d3:a7:b1:d5:5f:b0:d0:2e:e2:c0:
61:cd:4d:6b:a4:da:73:32:0d:95:19:af:dd:d5:80:0e:df:63:
de:d0:0f:8f:73:1b:0b:16:5f:32:6a:2d:78:dc:fe:ba:eb:f6:
2c:c0:ef:34:cf:ba:1a:7e:10:b3:5f:00:d2:a6:d6:4a:11:65:
e0:ac:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:15 2024 by rpki-client on console-ams.rpki-client.org