Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/bbSbFR6JXUFnELqJAFQtFDjUbqo.roa
File: bbSbFR6JXUFnELqJAFQtFDjUbqo.roa (raw, json)
Hash identifier: t6Fenj39cYOFRXY6DsJQews6dOv1TdQSCd6S1NZ4/hY=
Subject key identifier: 6D:B4:9B:15:1E:89:5D:41:67:10:BA:89:00:54:2D:14:38:D4:6E:AA
Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial: 168CFBA6
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/bbSbFR6JXUFnELqJAFQtFDjUbqo.roa
Signing time: Sat 01 Jan 2022 15:56:31 +0000
ROA not before: Sat 01 Jan 2022 15:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62571
IP address blocks: 185.64.9.0/24 maxlen: 24
185.64.10.0/24 maxlen: 24
185.64.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378338214 (0x168cfba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
Validity
Not Before: Jan 1 15:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6db49b151e895d416710ba8900542d1438d46eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:1c:9d:97:11:e6:42:ca:bb:7a:9d:33:ce:
92:cc:b9:82:1f:22:f2:8f:76:a9:32:84:a2:c2:a5:
fe:11:c7:2a:66:a7:38:64:a8:9f:8a:1c:2f:f5:bb:
7c:fc:96:1b:02:1f:49:c0:59:4d:be:29:ad:81:de:
04:66:db:65:82:28:54:ba:5a:9f:f2:d7:a8:65:71:
4b:bb:df:d7:6a:d5:dd:88:fd:05:93:19:21:34:3e:
46:b1:88:1b:e2:e8:b8:c7:84:b2:5e:d2:ec:24:21:
f7:11:bc:58:a8:30:ad:f7:29:97:fc:e4:2e:8e:ef:
9a:64:ab:69:8d:c9:c8:30:27:92:34:f4:c2:de:bc:
4d:35:4a:cf:23:61:0e:f1:d9:d8:4f:60:08:c3:90:
49:35:19:ff:ca:40:bf:e4:ef:72:e5:76:ce:58:5c:
1b:db:91:54:b4:50:de:d2:ca:c4:93:e7:9e:ea:67:
d5:62:67:a1:8a:44:d9:2a:4c:ff:68:07:cf:93:9e:
16:59:56:91:a1:69:49:fe:f2:53:91:72:bc:87:73:
d3:d8:21:35:65:ef:ca:58:65:46:01:a2:37:5f:1f:
4d:d7:b2:4e:57:35:84:b8:c8:dd:68:ce:04:07:d9:
c5:5f:06:18:83:76:ea:8b:83:35:ea:71:bd:92:34:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B4:9B:15:1E:89:5D:41:67:10:BA:89:00:54:2D:14:38:D4:6E:AA
X509v3 Authority Key Identifier:
keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/bbSbFR6JXUFnELqJAFQtFDjUbqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.8.0-185.64.10.255
Signature Algorithm: sha256WithRSAEncryption
60:c5:7d:56:0b:f0:2d:76:09:bc:30:7b:e8:00:e3:08:28:0c:
50:7b:e8:40:21:68:90:ae:e6:61:d1:37:27:49:1c:8a:ae:d6:
d8:48:f1:b5:b4:11:3b:4c:1a:95:a8:c1:c8:86:98:1e:ea:c6:
05:70:41:1f:47:e1:53:9f:bf:01:16:56:d3:66:8e:3d:e8:aa:
a5:39:6d:c8:a9:78:c0:f7:4d:d0:21:1a:73:a8:09:8a:8c:4c:
0f:6b:09:84:34:c6:1f:a0:a7:2c:fc:cd:cd:25:58:03:cc:18:
f5:02:92:12:f6:37:de:a1:3a:fc:95:f3:9c:99:78:f3:ea:ca:
76:bb:da:ab:fe:7a:37:13:54:ce:bc:d6:8f:3e:81:c5:91:9d:
0c:a0:32:34:f0:d5:1d:c7:4d:b5:56:d3:70:26:6d:13:f4:9f:
0f:f8:83:a9:68:ac:60:8b:60:7f:46:e2:c2:81:23:05:7a:d7:
34:01:1b:b3:fb:65:ac:ff:7e:39:cd:84:f7:25:af:64:3f:13:
92:ba:9d:ee:5d:25:5f:f0:f0:0b:71:43:dc:6b:c0:2e:d6:88:
42:4f:29:df:58:10:3d:10:75:86:76:f3:5d:e9:c9:20:3c:32:
08:98:15:1b:30:9f:ed:bc:4f:b7:9c:65:cf:24:c0:23:e7:12:
c4:50:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:15 2023 by rpki-client on console-fra.rpki-client.org