Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/y8j70WNVFPd76WlB7cn1vmiXH6U.roa
File: y8j70WNVFPd76WlB7cn1vmiXH6U.roa (raw, json)
Hash identifier: 3yrvceQJR3LiA2vrK5N1KZ4jIoB4Z/9YOekyTCPRqS4=
Subject key identifier: CB:C8:FB:D1:63:55:14:F7:7B:E9:69:41:ED:C9:F5:BE:68:97:1F:A5
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 371B85AD
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/y8j70WNVFPd76WlB7cn1vmiXH6U.roa
Signing time: Sat 01 Jan 2022 10:05:42 +0000
ROA not before: Sat 01 Jan 2022 10:05:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42000
IP address blocks: 185.99.68.0/22 maxlen: 22
2a00:1790::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924550573 (0x371b85ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Jan 1 10:05:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbc8fbd1635514f77be96941edc9f5be68971fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:79:30:a1:7e:54:77:bb:15:6e:7a:6e:30:
0a:20:a0:0b:04:e6:b1:8b:17:26:5b:48:b5:01:e4:
4d:d8:66:ae:f9:f6:c1:33:4a:11:94:1c:5d:7d:f4:
61:cc:6f:08:52:ee:2e:5e:40:c2:60:74:8f:8d:76:
3e:67:ea:03:bd:a7:02:bf:bd:93:03:0c:fc:7c:31:
b7:6f:a8:05:41:fc:cc:01:af:e8:42:8d:fa:78:ad:
0b:79:bd:08:b7:7d:61:8b:f5:0a:4c:95:57:fa:bf:
70:0f:e1:15:70:b6:0c:71:6e:08:32:de:1f:b2:37:
63:7e:b4:72:0f:a3:18:d4:ec:ba:20:46:1b:44:a2:
25:38:5f:98:16:7c:d8:46:3c:b7:8f:e4:03:2e:10:
b4:66:31:aa:ec:62:d2:c5:e3:a6:82:c3:c7:af:f9:
0f:8e:56:9b:19:25:1e:16:a0:33:7d:0a:cd:94:72:
4a:e1:32:75:94:73:39:25:1a:f4:0e:c1:20:e1:a9:
b4:f6:27:ac:0b:3e:21:37:9b:ae:1d:77:7a:00:b2:
fd:1a:99:fc:f3:f3:71:dd:bf:46:ac:fe:c4:73:63:
8c:ca:09:1a:d4:1d:31:11:c4:3f:a0:ba:40:b0:0b:
c6:94:70:74:d5:85:12:d8:3e:8e:cd:84:44:b5:41:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:FB:D1:63:55:14:F7:7B:E9:69:41:ED:C9:F5:BE:68:97:1F:A5
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/y8j70WNVFPd76WlB7cn1vmiXH6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.68.0/22
IPv6:
2a00:1790::/29
Signature Algorithm: sha256WithRSAEncryption
7b:b9:f0:7b:86:2d:52:d7:af:09:8e:fe:95:8a:64:5f:c1:07:
c8:f9:62:3d:b0:a3:90:23:46:e6:c7:b4:67:8b:e2:7d:3f:d7:
19:55:b4:05:9f:17:1b:0d:0b:98:5f:8d:de:47:ee:3a:e6:e4:
0d:29:b5:cc:b3:df:50:89:4b:7f:dc:78:58:34:9b:e0:51:c6:
57:18:5f:4e:81:dc:aa:b0:50:c8:f3:93:74:40:77:67:48:38:
a1:d7:92:03:99:32:88:03:81:05:ad:d0:8a:72:9b:9a:89:11:
29:43:cc:97:2e:1c:15:a9:22:af:ab:1f:7d:07:0a:b2:ed:25:
08:35:89:f1:f4:f1:4d:44:90:8d:c3:be:60:6a:22:15:28:c5:
b7:e6:5a:b1:36:fb:15:e8:af:d6:ee:c7:02:78:02:24:29:78:
bf:76:60:67:7f:6c:86:4e:6d:ac:db:83:fe:fe:c3:a0:f7:be:
03:72:cc:60:ac:df:2d:7c:59:5a:5f:fe:34:39:2d:60:d9:52:
33:6b:b4:7e:e3:31:18:dd:53:e9:d7:71:15:90:04:4b:33:29:
f7:4d:f1:d9:12:8a:ff:68:10:5f:b3:96:14:e6:f1:3c:81:ac:
00:53:2b:24:c5:ec:c4:a9:2b:e8:7b:6b:34:f9:d2:0d:3f:83:
86:3a:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:47 2024 by rpki-client on console-fra.rpki-client.org