Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/FzMJjDplZwEDE24mRHC-NkNGJ6M.roa
File: FzMJjDplZwEDE24mRHC-NkNGJ6M.roa (raw, json)
Hash identifier: Bl7O3oq7KwfT91AjTgxHZCLItT9GWLt2uSrxwbFGJZU=
Subject key identifier: 17:33:09:8C:3A:65:67:01:03:13:6E:26:44:70:BE:36:43:46:27:A3
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 05B867B6
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/FzMJjDplZwEDE24mRHC-NkNGJ6M.roa
Signing time: Sat 01 Jan 2022 02:00:25 +0000
ROA not before: Sat 01 Jan 2022 02:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205067
IP address blocks: 185.230.185.0/24 maxlen: 24
185.230.186.0/24 maxlen: 24
185.230.184.0/24 maxlen: 24
185.230.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95971254 (0x5b867b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jan 1 02:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1733098c3a65670103136e264470be36434627a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:16:ec:4d:74:e9:61:bc:93:56:31:9b:0a:
fa:71:1e:80:18:ce:77:c8:1a:62:79:06:40:35:35:
2c:e0:01:2f:2a:b6:d9:33:93:04:af:e3:f5:95:84:
34:92:e6:7a:d3:f2:f2:64:8c:b7:7e:37:c7:30:29:
54:c9:e0:3d:93:5c:14:62:32:d4:01:08:85:ec:b4:
94:a5:ea:e6:75:e4:b0:09:09:b4:58:bf:18:12:b6:
c9:e8:c7:cd:ee:a2:c4:ed:ed:39:3e:a1:c2:7e:75:
bb:a0:15:da:51:f6:60:c5:aa:4b:1b:e4:57:f0:16:
f9:b1:0c:43:33:01:37:0f:d8:58:6b:7a:ed:d9:5f:
19:7b:05:1b:16:e8:b4:67:96:46:70:ef:f9:70:a5:
91:1b:45:25:d5:ae:10:75:1b:ab:cb:ac:a4:cf:cf:
03:da:1b:dc:50:e8:e6:ec:85:8f:72:be:75:b2:b6:
5c:86:a1:e8:c4:bd:77:ba:7f:04:50:2a:1b:29:7e:
53:8b:2e:81:50:c9:85:d9:af:1a:f1:4a:a1:f6:e8:
51:ac:a9:46:af:f4:93:14:e2:3f:fa:57:34:ed:34:
2e:b0:6d:25:fa:df:ad:56:40:4a:39:a4:eb:42:7b:
f8:f2:2b:a6:7e:c6:e5:5e:fe:1d:8f:6d:36:3c:b8:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:09:8C:3A:65:67:01:03:13:6E:26:44:70:BE:36:43:46:27:A3
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/FzMJjDplZwEDE24mRHC-NkNGJ6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:f7:a4:46:bc:8d:40:e7:07:94:2d:6c:be:5c:0c:30:ae:5b:
b8:a0:ea:7f:4d:1a:9d:2d:da:de:2d:4b:41:2e:be:81:a6:1b:
8e:35:da:dc:43:77:82:6c:49:43:68:d4:de:bd:33:4d:d6:2d:
8e:a4:96:41:8b:bb:83:b6:67:89:e9:e5:69:76:c5:57:31:05:
10:e0:d9:ee:df:28:ff:c5:15:f4:19:22:f1:08:26:90:26:52:
5d:6d:66:fe:e3:98:94:c8:7d:f5:e5:66:fb:2a:97:82:a7:9b:
b3:53:41:b4:bc:73:24:0f:96:e0:cf:a3:1d:59:2a:b7:b4:6b:
15:1c:93:2a:57:e4:b2:43:1f:20:e2:70:87:d3:96:f4:af:fc:
8d:ac:76:09:5c:c9:2f:17:c5:00:0c:ac:ab:b8:d0:da:ef:e4:
a4:04:42:e4:42:fb:61:23:63:d3:b4:05:de:76:ac:4e:c1:c0:
f2:6a:bb:9a:50:04:8a:01:4a:88:0f:93:0a:ea:23:d2:5a:cf:
d5:b9:03:ce:dd:77:a7:08:b3:5e:66:0d:09:53:d7:64:30:45:
b9:f9:a9:98:7e:ee:11:d8:1a:86:16:a6:e6:e6:1b:b1:e9:f8:
f5:c0:15:42:4f:09:5c:5b:31:b8:8c:f7:79:f4:f8:24:61:9f:
02:35:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-ams.rpki-client.org