Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/BtcG5PZCAqMiT16wuiuFyos6GOM.roa
File: BtcG5PZCAqMiT16wuiuFyos6GOM.roa (raw, json)
Hash identifier: YY3LLjGOYIEurj32X31Upz/oWyUWMuS11M4Tj+61vao=
Subject key identifier: 06:D7:06:E4:F6:42:02:A3:22:4F:5E:B0:BA:2B:85:CA:8B:3A:18:E3
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 7045F3
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/BtcG5PZCAqMiT16wuiuFyos6GOM.roa
Signing time: Sat 01 Jan 2022 02:56:23 +0000
ROA not before: Sat 01 Jan 2022 02:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.95.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7357939 (0x7045f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Jan 1 02:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06d706e4f64202a3224f5eb0ba2b85ca8b3a18e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:e7:7e:a0:83:79:ee:1f:52:5a:b3:09:82:
25:e8:3c:e8:b9:95:58:c1:73:c4:1f:7d:11:7c:ec:
1b:5a:cb:1e:48:5c:fd:bf:19:3d:44:26:e8:8e:65:
a6:4f:9a:76:e2:20:06:bb:fa:61:0b:95:55:ac:d6:
9d:dd:5b:79:5a:9c:5c:11:c7:35:bd:3a:1f:0b:aa:
02:35:73:9a:51:b2:4d:03:2a:5f:a4:a7:2d:d5:61:
4b:7c:8c:e6:53:30:64:82:ff:a1:4f:a1:22:7a:41:
c1:66:31:e9:66:96:25:2a:66:da:bf:29:a9:3f:af:
00:af:ee:b6:4e:3b:cd:13:e8:a6:98:83:9b:ee:c8:
0a:76:01:7d:1b:af:2d:04:19:b9:fd:6c:00:29:f0:
bb:5f:50:61:00:fd:37:fc:a9:da:06:27:73:18:5e:
be:89:4a:d5:72:1d:f4:84:5b:18:6f:f8:d2:d5:94:
97:93:99:ef:7c:b2:68:71:70:3e:4a:97:2c:17:12:
84:f0:7c:84:2e:c8:76:18:e0:da:1c:70:46:a2:c2:
e0:be:f6:04:73:28:db:80:85:10:af:a9:b1:25:8c:
92:a9:2a:42:82:d4:12:cd:c8:4e:bc:ac:19:3b:d2:
ba:91:ff:c7:7a:ec:38:5e:6c:4e:d2:53:ba:97:cc:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:06:E4:F6:42:02:A3:22:4F:5E:B0:BA:2B:85:CA:8B:3A:18:E3
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/BtcG5PZCAqMiT16wuiuFyos6GOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:11:67:95:9a:f5:25:52:21:bd:61:56:e5:6d:c2:d6:cd:68:
85:fd:b3:ce:8b:3e:3d:75:4f:63:66:f2:4a:cd:c9:09:9c:81:
54:7d:ce:25:9f:e7:32:2c:38:13:57:8b:8d:83:b4:a5:bb:6d:
cf:24:10:2f:97:6a:63:73:e5:78:e2:af:a8:b2:98:f4:6b:01:
0b:35:4d:50:98:dc:49:f0:80:43:ea:34:e2:3f:fd:46:f7:8d:
ee:8d:68:b7:eb:77:71:bd:02:5f:55:5b:12:2b:0f:0a:8b:65:
28:3b:9c:8e:24:b4:45:6d:1f:49:0d:3d:64:36:50:12:2a:bd:
01:83:c8:79:cc:c7:cd:ed:da:d5:66:4c:70:69:1b:6a:eb:0e:
80:94:1f:55:0b:77:84:d7:8f:d9:bb:8b:01:52:ba:05:56:03:
90:4d:db:13:5f:f8:d1:bb:82:59:93:27:15:8c:12:0f:30:4a:
48:f2:b4:64:3f:f4:58:86:1d:c0:e5:c5:5e:3e:4b:73:7a:19:
2a:ba:a0:19:65:85:ef:e6:f9:5a:a6:3b:e0:4d:58:c7:d7:a9:
07:a5:80:31:ff:0c:d5:48:d1:11:a4:46:5a:97:24:79:70:71:
06:5f:f5:fc:04:5a:c4:c5:6f:fd:47:84:0c:6b:ed:16:45:79:
71:8b:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org