Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/bYx7dq0mCH8SjjlLD5xeLHKXXVs.roa
File: bYx7dq0mCH8SjjlLD5xeLHKXXVs.roa (raw, json)
Hash identifier: 1SG17otPI1QRymyyUUvSw1dbA7K9vlG9k1niVxGqzB4=
Subject key identifier: 6D:8C:7B:76:AD:26:08:7F:12:8E:39:4B:0F:9C:5E:2C:72:97:5D:5B
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 0183A35D041EB8A90AD9EF3826DDE0919BE3
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/bYx7dq0mCH8SjjlLD5xeLHKXXVs.roa
Signing time: Tue 04 Oct 2022 14:18:45 +0000
ROA not before: Tue 04 Oct 2022 14:18:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 185.197.197.0/24 maxlen: 24
185.197.196.0/24 maxlen: 24
185.197.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:5d:04:1e:b8:a9:0a:d9:ef:38:26:dd:e0:91:9b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Oct 4 14:18:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d8c7b76ad26087f128e394b0f9c5e2c72975d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:92:2d:20:38:91:09:c7:f7:eb:3d:57:ba:
e0:6d:42:55:db:1e:56:0e:7c:46:a0:3b:5f:cb:16:
20:b7:ad:5a:08:7b:de:c1:61:9d:a6:10:1d:0a:57:
df:4e:fb:19:ac:77:f1:b8:84:eb:49:af:e1:19:2d:
3a:bb:40:57:bc:b8:32:7b:e1:4e:c1:d8:43:ad:3c:
82:52:96:a3:20:27:7d:c5:a2:51:68:bc:b4:3b:78:
c0:d3:1a:bc:a5:dd:63:05:df:7b:4b:38:b1:21:fd:
b1:4a:7d:00:77:d1:80:d5:c5:b9:cc:4e:a6:12:b5:
69:12:71:41:88:50:80:c8:e1:b1:3d:4a:b4:d0:31:
d1:3f:c7:33:c7:18:56:3d:9a:cb:71:9c:1d:58:56:
c2:62:5b:7e:0f:20:5e:b8:87:b0:2b:39:51:6a:66:
ae:81:d5:2d:82:d9:17:cd:69:90:08:56:09:29:8c:
68:d3:1b:b2:3f:70:9d:fb:c7:ec:f2:0b:9e:46:85:
20:8b:81:ac:b1:4b:a9:7b:e0:25:a9:73:54:c3:f0:
24:08:6e:62:b4:d8:e1:88:b0:9a:c0:0b:05:c5:0b:
16:a6:ec:f2:8d:d8:86:b6:d1:c1:75:b2:c2:5e:32:
e3:03:76:e6:d0:70:b8:8f:19:de:e6:6b:8a:6d:1a:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:7B:76:AD:26:08:7F:12:8E:39:4B:0F:9C:5E:2C:72:97:5D:5B
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/bYx7dq0mCH8SjjlLD5xeLHKXXVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.196.0-185.197.198.255
Signature Algorithm: sha256WithRSAEncryption
3e:3f:f9:3d:ff:65:3d:6e:4d:d5:f2:4d:3d:ea:e2:9a:03:f1:
f7:d6:90:fe:89:3a:19:d6:80:d1:70:cc:af:51:99:37:b0:19:
50:79:dd:38:f4:70:65:e5:de:c4:6d:7f:8b:6e:ef:3d:0b:26:
c0:11:42:49:15:ec:8d:5b:a2:8a:96:4f:fa:82:68:cf:e2:37:
25:06:c3:f5:c4:1f:36:bf:06:31:6c:ff:0f:88:f1:98:0e:db:
58:9e:95:8b:7a:0a:88:1c:00:a7:f2:88:8c:aa:95:75:2a:b8:
1b:3c:0e:81:93:2a:4d:81:8b:dd:d8:fb:ac:19:94:51:c3:95:
6a:d3:27:48:c9:3b:29:c8:ed:57:1d:65:b7:72:e6:1f:d7:87:
87:8d:ed:c8:91:e7:bf:23:21:25:98:35:1c:c4:51:9d:7c:3a:
73:d7:ec:87:b4:f1:7d:d7:50:4f:14:c9:bf:ff:1f:ed:ab:bc:
f7:f4:eb:f8:f6:90:7a:b9:38:77:15:d3:6d:6e:68:a3:c7:49:
4c:3d:41:f4:97:60:14:62:82:fc:66:2f:24:20:c8:50:41:14:
ef:8e:3b:91:0a:a9:a1:dd:de:84:aa:f5:af:3f:fa:d3:d9:ba:
b7:aa:86:22:39:2a:c4:87:d8:c5:73:04:e0:19:29:92:04:c6:
20:d4:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:33 2024 by rpki-client on console-ams.rpki-client.org