Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/8HipcZaz9e8QMWy1P-gGlb9Av3U.roa
File: 8HipcZaz9e8QMWy1P-gGlb9Av3U.roa (raw, json)
Hash identifier: +2WlHPubcpervazCEM2xNQoznoz2EgVsmTjyJ/pja2U=
Subject key identifier: F0:78:A9:71:96:B3:F5:EF:10:31:6C:B5:3F:E8:06:95:BF:40:BF:75
Certificate issuer: /CN=6f0d7a0eb5ca549590a406bc693df1e8d2cbae04
Certificate serial: 01C95965
Authority key identifier: 6F:0D:7A:0E:B5:CA:54:95:90:A4:06:BC:69:3D:F1:E8:D2:CB:AE:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bw16DrXKVJWQpAa8aT3x6NLLrgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/8HipcZaz9e8QMWy1P-gGlb9Av3U.roa
Signing time: Sat 01 Jan 2022 02:58:48 +0000
ROA not before: Sat 01 Jan 2022 02:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.99.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29972837 (0x1c95965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0d7a0eb5ca549590a406bc693df1e8d2cbae04
Validity
Not Before: Jan 1 02:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f078a97196b3f5ef10316cb53fe80695bf40bf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:f2:71:c1:3f:da:8f:00:1d:df:a7:3e:e4:
09:1b:a8:36:55:d2:66:6b:39:c4:a2:bc:97:ad:a4:
a4:e8:6e:b2:00:51:b7:7d:60:e0:48:08:64:cb:32:
a3:80:1c:fc:97:54:ab:ae:e1:3e:95:55:44:91:87:
8c:3d:30:f9:9e:5e:20:18:e8:38:3f:30:e9:00:98:
60:01:cb:20:6c:30:fd:a6:85:55:ed:6e:55:d7:20:
6f:04:bb:f7:d0:45:0a:74:6d:54:ba:ce:ea:d0:4c:
67:56:45:31:73:63:f0:06:4e:29:89:e7:5f:1f:e2:
20:9a:61:db:59:43:4a:a1:be:79:e7:8d:9a:81:83:
63:e2:74:f5:00:d0:61:e3:da:9e:e8:fc:c7:7b:53:
b1:92:7c:91:2f:e9:1a:b4:22:db:c6:e5:2b:9c:77:
c2:fb:34:e5:ad:1c:12:5c:dd:92:a1:e0:79:b6:43:
6e:33:65:b6:fb:78:67:6c:77:5a:30:60:8c:74:74:
b2:09:43:b4:f3:6d:7f:39:a3:d9:a2:03:c2:3f:d9:
79:79:c8:a3:be:e4:95:aa:96:8c:23:6f:a9:9a:db:
c0:65:d0:e4:94:c2:cd:7d:f0:2d:28:e3:c1:41:97:
29:94:ad:7e:62:e1:05:93:ec:97:3f:e2:de:70:3e:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:A9:71:96:B3:F5:EF:10:31:6C:B5:3F:E8:06:95:BF:40:BF:75
X509v3 Authority Key Identifier:
keyid:6F:0D:7A:0E:B5:CA:54:95:90:A4:06:BC:69:3D:F1:E8:D2:CB:AE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bw16DrXKVJWQpAa8aT3x6NLLrgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/8HipcZaz9e8QMWy1P-gGlb9Av3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/bw16DrXKVJWQpAa8aT3x6NLLrgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.20.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4e:bd:e1:f3:0c:36:b9:5b:82:63:53:98:5e:9b:75:52:4a:
cb:93:ed:24:93:cb:5a:07:57:eb:f8:b9:72:40:4d:6b:15:59:
a6:b0:1b:e9:dd:ab:b4:38:d0:19:db:bb:a9:d9:a9:48:cd:1f:
af:04:b1:66:04:31:b8:ca:bb:3b:34:4c:84:cf:60:2d:f5:bb:
04:df:99:97:20:e7:85:48:fc:ab:6c:ab:40:f2:a5:c7:45:42:
40:11:f6:29:8c:d4:e4:26:9f:88:27:10:dc:d1:7d:a2:ef:6f:
9e:b7:e7:a7:cc:99:5c:f9:57:aa:f5:0c:79:6e:e7:c5:57:7c:
08:d0:ed:2c:57:b0:e3:45:79:85:4d:c1:59:e6:c0:90:07:2c:
77:00:fa:8d:17:9f:6a:3e:79:2a:2f:bd:54:aa:b3:d8:08:5e:
1c:04:57:34:c4:47:35:e3:2e:80:fa:f3:04:51:d5:ed:fd:79:
a8:24:f2:cb:53:21:02:e8:a9:d4:8d:55:a2:90:fc:3e:27:30:
59:c1:08:28:07:df:b4:40:a8:3d:d4:e8:90:55:fb:59:66:19:
25:0a:d7:08:68:0d:fb:89:5e:2c:50:87:61:87:24:f1:3c:d9:
9b:aa:df:74:de:98:7d:5e:58:ff:ed:59:b6:c9:9d:2c:1d:51:
6e:6f:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:12 2023 by rpki-client on console-fra.rpki-client.org