Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/bTrGfHz-HwTLYF5_59UB7oTSHHw.roa
File: bTrGfHz-HwTLYF5_59UB7oTSHHw.roa (raw, json)
Hash identifier: YCl8R+Mp2ilYKupxKZf4jCQILlXc9BiD2s+5Jw6rOY0=
Subject key identifier: 6D:3A:C6:7C:7C:FE:1F:04:CB:60:5E:7F:E7:D5:01:EE:84:D2:1C:7C
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0182EF340BEAD2E859561ADA0DCB281EEB6B
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/bTrGfHz-HwTLYF5_59UB7oTSHHw.roa
Signing time: Tue 30 Aug 2022 14:42:21 +0000
ROA not before: Tue 30 Aug 2022 14:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29205
IP address blocks: 185.49.12.0/22 maxlen: 22
91.230.36.0/23 maxlen: 23
185.100.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:34:0b:ea:d2:e8:59:56:1a:da:0d:cb:28:1e:eb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Aug 30 14:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d3ac67c7cfe1f04cb605e7fe7d501ee84d21c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:cd:5c:c1:35:dc:16:8a:9e:47:fb:8c:13:
56:49:ae:b0:da:6d:22:56:a6:64:58:f1:bf:0e:9d:
27:53:e7:de:ea:cb:6b:1b:f1:43:4a:fb:c5:9d:d4:
8a:b6:fa:d5:34:be:57:56:0c:f1:11:5c:db:67:10:
2f:b1:37:08:80:89:b9:46:91:95:f1:7b:3a:08:f6:
0b:bc:20:c1:85:8d:12:50:21:d7:7c:60:26:6d:2a:
1a:63:fa:fd:d3:63:99:ae:09:eb:68:54:e2:d5:a6:
79:62:0b:bc:73:27:0c:bc:f4:74:6e:e5:59:f6:49:
3f:7d:de:8f:76:9d:56:ca:f8:9d:05:ad:6e:2b:9a:
47:62:6f:0a:9b:d4:4a:0a:bc:46:84:c7:94:6d:c3:
aa:27:d3:c5:7d:3c:0d:b8:a3:09:ee:be:6f:39:69:
a3:9f:f9:ae:d2:5f:4b:8d:c1:f9:c2:c5:1b:3c:8c:
d9:3f:0c:7f:93:b9:eb:29:66:d2:a2:fb:83:8f:73:
d6:0a:67:40:cf:f0:84:21:41:f8:f3:f2:22:f2:58:
68:cb:41:3f:b0:91:19:95:b4:ad:58:85:e1:d6:78:
87:8d:7d:a2:42:5e:9c:5e:59:26:84:70:d9:30:89:
a0:41:ba:30:8d:80:b9:47:0e:a6:6e:46:a4:46:7e:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:C6:7C:7C:FE:1F:04:CB:60:5E:7F:E7:D5:01:EE:84:D2:1C:7C
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/bTrGfHz-HwTLYF5_59UB7oTSHHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.36.0/23
185.49.12.0/22
185.100.228.0/22
Signature Algorithm: sha256WithRSAEncryption
47:6a:94:10:a2:99:83:96:72:5c:c1:fb:a2:c3:17:4f:05:7b:
5e:cb:46:14:11:e4:03:3c:93:b8:2b:6f:df:6b:ea:22:de:3d:
43:10:8e:90:40:ca:e1:85:fa:25:c5:40:b1:21:fa:f4:56:97:
06:55:6d:0c:ab:d6:08:b6:26:53:9f:5a:e8:0d:15:bf:2b:63:
6b:88:cf:c0:73:96:41:85:95:85:1e:36:31:9d:ee:d3:81:f0:
09:39:ac:55:57:63:c8:38:29:59:fa:88:df:45:b1:09:6f:3a:
28:f0:18:3b:fc:ca:42:1c:76:da:b7:42:02:d7:3d:2b:18:10:
8b:36:f0:69:d5:f0:8d:6b:e2:53:73:a9:6d:44:6a:b9:ba:b6:
2a:c2:eb:69:2c:a1:b4:e1:ad:95:75:8b:d7:49:31:8b:4e:ce:
cc:76:78:85:88:1f:c6:32:c4:4c:a0:fe:96:83:90:22:96:d3:
42:55:d8:ff:3c:00:8b:1f:6a:f6:40:8e:f3:53:85:c8:34:47:
50:b1:6d:4d:2f:53:0c:55:77:c6:36:46:5e:b5:9e:fe:37:0c:
5a:b5:35:1e:5f:81:c5:af:9b:56:4b:61:43:12:e0:e2:0e:34:
18:13:a3:c0:1d:6d:5e:15:fb:fc:23:bc:64:08:e9:89:bc:f7:
7f:fc:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:30 2023 by rpki-client on console-ams.rpki-client.org