Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/cc3sH0kyYjoQJUayE53fmbvkGNE.roa
File: cc3sH0kyYjoQJUayE53fmbvkGNE.roa (raw, json)
Hash identifier: bUzmP4YuqTqxpUwTNH/sntfVmAqi3IwxS1vIbW7Rwyc=
Subject key identifier: 71:CD:EC:1F:49:32:62:3A:10:25:46:B2:13:9D:DF:99:BB:E4:18:D1
Certificate issuer: /CN=6f0d7a0eb5ca549590a406bc693df1e8d2cbae04
Certificate serial: 01C8ADC2
Authority key identifier: 6F:0D:7A:0E:B5:CA:54:95:90:A4:06:BC:69:3D:F1:E8:D2:CB:AE:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bw16DrXKVJWQpAa8aT3x6NLLrgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/cc3sH0kyYjoQJUayE53fmbvkGNE.roa
Signing time: Sat 01 Jan 2022 02:58:48 +0000
ROA not before: Sat 01 Jan 2022 02:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.99.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29928898 (0x1c8adc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0d7a0eb5ca549590a406bc693df1e8d2cbae04
Validity
Not Before: Jan 1 02:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71cdec1f4932623a102546b2139ddf99bbe418d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:7f:7a:3f:ce:4f:5f:69:52:6a:6a:7c:66:
78:f7:8f:88:3a:52:4f:ea:4d:bd:28:17:2c:f5:27:
27:15:79:dc:e1:4c:13:01:61:03:5f:1e:1b:5c:b0:
2f:ab:82:c8:1b:fb:55:95:11:f2:24:3a:e8:1c:7c:
61:df:eb:d6:1a:ac:fe:ef:02:21:2e:21:0c:6a:02:
f4:77:e3:bb:0d:99:47:51:7f:ab:22:69:c7:03:87:
c9:fe:67:84:ea:cb:7c:6b:b2:b1:27:63:19:ac:59:
6c:dd:fd:90:db:2e:2f:cb:93:be:e8:49:5f:df:ef:
2b:2f:46:80:0e:b6:ff:e4:30:8d:18:7d:74:42:05:
6c:68:55:52:46:91:70:aa:de:44:1c:9f:5c:d5:9e:
d0:58:d2:e7:7f:62:79:69:41:f2:8d:5a:e0:39:1e:
25:89:da:c5:58:49:20:1a:1c:5c:3e:d4:60:07:8c:
9a:a8:aa:00:61:54:71:2f:cd:15:60:5a:9f:b7:c8:
49:e1:f1:39:7b:e4:3a:ee:e1:bb:7e:2e:97:4c:a1:
a7:c4:bf:7d:03:75:62:10:42:a8:2a:4a:5d:8c:69:
b9:b4:fd:ca:65:2a:81:7a:49:a1:df:99:4b:0e:da:
1a:f0:71:48:c3:f5:09:92:c9:8f:be:e1:e2:51:43:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:EC:1F:49:32:62:3A:10:25:46:B2:13:9D:DF:99:BB:E4:18:D1
X509v3 Authority Key Identifier:
keyid:6F:0D:7A:0E:B5:CA:54:95:90:A4:06:BC:69:3D:F1:E8:D2:CB:AE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bw16DrXKVJWQpAa8aT3x6NLLrgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/cc3sH0kyYjoQJUayE53fmbvkGNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/bw16DrXKVJWQpAa8aT3x6NLLrgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.20.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2a:db:55:4e:4d:4c:b6:24:38:a8:8b:da:2e:11:9c:61:ba:
73:c4:f1:a3:85:14:79:94:2f:44:b3:d5:3b:64:6e:f2:0a:a4:
fb:42:a7:65:2e:90:1e:c0:c1:74:1a:4b:c5:1a:aa:f6:8c:e2:
3d:19:8a:53:86:25:b7:12:ec:48:da:05:33:55:4e:29:b5:2b:
81:f2:bf:2b:22:ab:67:9b:c4:96:99:8c:9c:77:ed:02:f2:b3:
ec:04:57:96:c3:d5:a7:2f:75:bb:1b:18:b4:25:77:c0:da:90:
01:2d:4a:3a:08:4d:df:b0:6d:67:23:d7:a9:69:16:bb:2b:3b:
59:67:6c:ff:c6:4b:56:45:b9:54:56:c2:31:cd:af:0c:b0:ad:
13:ff:0d:18:ad:82:e2:75:e7:55:66:e8:02:67:05:bc:be:3f:
35:4d:a7:ce:87:37:b1:43:55:8e:26:fe:88:bd:34:ec:52:5f:
a8:8b:03:d8:eb:f4:6c:c6:87:ec:d2:c0:2d:77:58:2e:88:bb:
78:57:7c:6c:ae:3e:4f:b3:97:26:b8:28:12:ac:24:6d:34:9a:
f0:5d:3b:fa:86:b1:a6:00:95:81:d4:6d:02:6b:36:59:43:94:
9e:9a:6b:61:3b:a2:e7:bf:f9:0f:4a:da:1b:fa:b9:cd:55:ea:
5f:fb:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:12 2023 by rpki-client on console-fra.rpki-client.org