Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/b9FHVmxAnkxHM4YKm3EPgz_ZYIk.roa
File: b9FHVmxAnkxHM4YKm3EPgz_ZYIk.roa (raw, json)
Hash identifier: hIfZYQxZrIQIMNn2mhY+7Vq0DWY9bLZxA96kfQ7w0kw=
Subject key identifier: 6F:D1:47:56:6C:40:9E:4C:47:33:86:0A:9B:71:0F:83:3F:D9:60:89
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 07A5834B
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/b9FHVmxAnkxHM4YKm3EPgz_ZYIk.roa
Signing time: Sat 01 Jan 2022 07:01:33 +0000
ROA not before: Sat 01 Jan 2022 07:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47279
IP address blocks: 185.97.179.0/24 maxlen: 24
157.97.72.0/24 maxlen: 24
2a03:4340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128287563 (0x7a5834b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Jan 1 07:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fd147566c409e4c4733860a9b710f833fd96089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:02:72:44:52:ca:e0:6b:21:f6:7f:18:52:
00:45:69:d0:fc:1f:05:a9:0a:b1:ea:89:9b:80:df:
39:7d:67:0c:18:eb:05:65:8b:6a:14:81:de:ff:e0:
15:dd:0b:e2:93:6a:77:42:d7:3d:f2:1a:a3:60:9c:
04:91:40:d2:b4:3a:de:92:d8:78:11:97:2c:93:1c:
df:0a:b7:21:5f:f2:a6:e4:1a:e1:5d:e4:0b:d9:fd:
89:bb:a5:a8:29:78:68:78:8a:3b:19:84:12:f3:74:
6e:9a:c8:96:aa:c8:bf:ae:ed:08:60:83:b7:06:bb:
f7:c8:c7:09:93:e9:fa:82:3c:88:cb:11:80:d0:31:
7f:15:9b:3f:04:9e:96:5c:1f:93:6a:d8:34:e7:26:
c7:6d:9d:9c:8b:04:07:aa:48:4c:bd:e7:d3:aa:41:
52:c0:e5:f9:35:98:07:8e:7d:b3:f5:0b:b0:f6:6e:
f2:6a:1b:f9:23:56:f8:ee:0f:b4:4f:5c:6d:60:34:
bb:a8:ca:8b:aa:74:c4:93:e9:91:71:ec:21:df:9c:
5e:67:27:69:5f:a2:4e:81:be:0e:b8:ac:3d:21:af:
b2:31:e3:3f:bc:eb:62:e1:92:55:88:37:dc:d5:ec:
05:c4:f3:3b:e3:c3:5f:40:42:fc:d0:cc:71:83:22:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:47:56:6C:40:9E:4C:47:33:86:0A:9B:71:0F:83:3F:D9:60:89
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/b9FHVmxAnkxHM4YKm3EPgz_ZYIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.72.0/24
185.97.179.0/24
IPv6:
2a03:4340::/32
Signature Algorithm: sha256WithRSAEncryption
32:79:b4:6c:33:7f:5b:98:35:41:d9:d8:3a:88:53:28:73:b4:
44:5e:35:5c:74:5d:90:42:2f:90:af:4e:79:26:93:61:a8:67:
6d:87:3b:2a:7a:1a:9d:f7:0f:c3:08:52:f3:e3:cf:1d:7b:da:
32:fa:75:25:44:f1:9b:7b:68:04:75:4a:c9:15:1a:04:a6:e9:
b7:2d:97:68:c3:c3:f2:22:57:14:fb:f8:5a:9f:ed:b0:bf:e3:
69:e7:4d:07:8c:e4:dd:3c:5b:63:d3:de:22:51:76:8c:c6:b8:
53:20:57:a2:0e:a6:75:d0:4f:4f:53:21:bc:47:29:9a:2b:46:
24:ea:7b:3a:84:c1:de:c1:31:a9:c7:cb:69:e4:d7:82:b3:e5:
db:4c:ff:fc:2d:5f:82:f6:23:5a:42:69:1f:61:6f:ec:a4:55:
74:80:f1:d6:7a:8c:7a:05:e1:d6:81:37:07:13:1d:28:49:ec:
e8:29:24:26:b5:c9:23:35:7e:0f:66:ac:d4:cb:1f:dc:ef:c6:
55:c7:af:5d:7d:ac:07:89:bd:84:9f:5b:fa:bb:78:d9:44:b8:
01:5d:59:01:91:36:16:6d:7d:be:83:c9:1e:1f:da:c7:8d:e7:
2c:1d:90:d7:e5:c5:bd:cf:e9:90:c3:5d:08:d1:65:af:93:88:
15:f0:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:28 2024 by rpki-client on console-ams.rpki-client.org