Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/bfHjxQzGQbUwuAF065asrgtd2yc.roa
File: bfHjxQzGQbUwuAF065asrgtd2yc.roa (raw, json)
Hash identifier: TmrwlvtKmOpuxzvxx5BKkP2dh37x4vUnUb5TSNKb6hc=
Subject key identifier: 6D:F1:E3:C5:0C:C6:41:B5:30:B8:01:74:EB:96:AC:AE:0B:5D:DB:27
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 054AC501
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/bfHjxQzGQbUwuAF065asrgtd2yc.roa
Signing time: Sat 01 Jan 2022 08:04:20 +0000
ROA not before: Sat 01 Jan 2022 08:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31587
IP address blocks: 185.99.223.0/24 maxlen: 24
185.99.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88786177 (0x54ac501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Jan 1 08:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6df1e3c50cc641b530b80174eb96acae0b5ddb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:c7:70:67:08:94:ce:ed:c0:1f:a3:54:ea:
ad:b6:c5:b7:7c:e8:7a:c9:e1:21:00:eb:bc:af:e9:
64:ea:22:06:51:aa:cb:19:6d:e9:96:08:45:57:eb:
5c:34:b2:f5:0b:ef:07:dd:8b:ec:8b:0e:ec:c3:b0:
ae:b7:c9:12:3c:2b:2e:02:96:bb:38:00:7f:57:3b:
68:e4:c5:9f:a8:ee:9e:ae:9c:14:32:46:db:3d:1a:
e1:f9:59:36:2b:3a:00:38:2c:20:02:65:b0:6a:1e:
c2:de:28:a5:1e:9c:05:6e:82:2b:a5:72:95:b0:e5:
1d:d5:83:57:93:d1:97:d6:6a:44:23:44:5e:d6:a5:
1d:e6:02:eb:6a:e6:cc:95:5d:84:bf:ca:1e:76:ea:
03:12:6d:99:f6:ad:00:4e:e3:6e:24:6c:8f:25:8c:
62:4c:01:ff:54:68:90:9a:5a:fe:c6:e2:de:39:24:
6e:88:54:50:3b:bb:dc:96:9b:c4:9a:a3:39:7b:89:
15:03:26:8b:33:25:9f:2e:a6:06:05:f1:67:1e:35:
b6:fb:df:f5:d7:e6:5b:5a:6d:6a:79:30:38:90:1b:
0e:63:51:cc:66:19:83:34:bb:15:21:b3:d3:7f:57:
83:67:5d:4a:ab:9c:46:ec:0f:5b:35:33:01:0c:d1:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:E3:C5:0C:C6:41:B5:30:B8:01:74:EB:96:AC:AE:0B:5D:DB:27
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/bfHjxQzGQbUwuAF065asrgtd2yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.220.0/24
185.99.223.0/24
Signature Algorithm: sha256WithRSAEncryption
50:06:ca:d0:09:97:9d:f0:e8:bd:b3:7c:c5:68:85:cd:47:37:
38:46:27:3d:32:c3:4b:38:a4:e3:0a:5b:ec:0e:1e:a7:2b:ac:
4b:26:f2:c9:73:40:7a:1d:60:03:d5:b3:b1:e4:74:83:41:e6:
98:d3:ef:55:74:f2:78:86:0b:5d:ad:f1:c3:f9:11:19:a3:71:
27:8f:2a:87:74:e3:02:73:dd:1d:28:92:a8:bd:55:1a:2d:d8:
74:ec:d3:79:69:e4:fa:b8:b8:d3:be:d8:6c:4f:a1:2d:a3:c9:
6e:86:0e:34:9d:d8:09:95:01:37:bc:02:ab:47:61:09:e4:65:
70:67:53:7f:c2:e9:48:ef:5c:55:95:4e:06:83:dc:03:62:26:
17:1f:5b:c6:4c:45:af:3d:4d:68:bf:97:72:26:9d:1c:6e:d4:
83:af:a8:d3:e3:c6:b8:18:71:e8:93:d0:80:36:eb:a9:0b:32:
90:ac:8c:4c:8f:e4:63:83:bc:1a:12:8b:54:c0:78:57:8f:fa:
78:34:14:d8:5d:aa:0d:8f:f2:9a:d1:f4:c8:93:e0:ee:6a:f7:
ee:f7:d7:e1:b7:38:dc:40:53:75:dd:3d:41:dd:9b:be:33:87:
54:52:85:39:b9:23:60:04:13:30:06:8f:69:4d:4b:94:de:9c:
c5:27:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:21 2023 by rpki-client on console-fra.rpki-client.org