Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Fr9IMLpYRqVAGkMxBUkRDJOeqlM.roa
File: Fr9IMLpYRqVAGkMxBUkRDJOeqlM.roa (raw, json)
Hash identifier: YoajBV1V/Oy9XdzVs0EXRVKothacIXvXvztCPqEFlM0=
Subject key identifier: 16:BF:48:30:BA:58:46:A5:40:1A:43:31:05:49:11:0C:93:9E:AA:53
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0184C6DD94D2AB571201DA914336A05479D2
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Fr9IMLpYRqVAGkMxBUkRDJOeqlM.roa
Signing time: Wed 30 Nov 2022 04:48:40 +0000
ROA not before: Wed 30 Nov 2022 04:48:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209805
IP address blocks: 212.22.94.0/24 maxlen: 24
185.65.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c6:dd:94:d2:ab:57:12:01:da:91:43:36:a0:54:79:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Nov 30 04:48:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16bf4830ba5846a5401a43310549110c939eaa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f2:2f:b4:de:d7:5b:50:20:d5:61:9f:a3:15:
4c:8e:66:63:42:98:b8:cf:6c:ad:87:63:14:b6:3a:
d5:a2:e0:50:26:4d:60:97:ed:09:1b:29:71:9d:da:
b0:0a:8d:f2:34:05:48:b4:bf:3d:20:4c:fa:c7:dd:
db:41:dd:3e:25:45:88:c7:1e:f7:be:5d:82:05:c2:
aa:65:8d:d0:fe:38:65:aa:12:1e:0e:27:9a:83:4d:
9b:35:a6:99:d5:e3:30:2f:98:70:d2:87:06:28:ba:
d8:0c:24:53:ec:96:ac:0f:b7:e6:06:2d:20:fe:be:
53:80:41:06:a7:94:ad:3b:44:69:98:69:c8:1e:ae:
07:27:9f:49:92:34:c9:f0:e5:bc:79:3c:0e:3d:8e:
f9:d4:0f:fb:9f:0d:68:81:50:16:b9:5f:2f:31:b7:
b1:4f:5f:1b:a1:09:f8:02:7c:c4:f4:da:c8:54:66:
a9:d1:96:06:45:9e:f4:0d:42:5f:37:99:a2:76:b1:
89:21:4f:07:86:01:49:32:35:c1:c4:18:91:f9:06:
8f:51:3a:0f:4f:0e:be:81:3e:a4:72:d6:82:78:d9:
e2:cb:d9:f2:d6:59:42:8f:06:99:03:38:02:c1:58:
57:4d:ac:cd:77:cd:b5:e8:39:46:5b:17:c2:1d:52:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BF:48:30:BA:58:46:A5:40:1A:43:31:05:49:11:0C:93:9E:AA:53
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Fr9IMLpYRqVAGkMxBUkRDJOeqlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.200.0/24
212.22.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:aa:5a:0f:3f:8e:36:26:a8:17:a8:39:1b:3a:4b:e8:ee:61:
43:cc:25:94:2b:55:de:43:52:59:64:f3:21:85:9a:9d:21:71:
f5:59:1b:96:bb:73:4d:b9:78:6b:10:c9:07:6c:e9:76:77:75:
fb:99:96:66:eb:cb:67:74:4e:7d:5b:17:64:75:3f:b1:72:64:
9e:68:cf:d5:ca:f5:d0:ec:6c:35:e5:cf:3a:5e:09:d7:c6:68:
2f:cd:53:b7:75:5e:e1:c9:dd:c9:52:46:6f:12:bb:dc:f0:c8:
ae:16:d5:2a:1b:2e:08:5f:82:eb:f2:c6:57:d1:25:f8:92:b2:
56:e3:66:38:c1:c8:5f:eb:79:53:68:49:f7:fa:e5:d5:8d:1b:
be:20:36:4e:f8:fe:15:be:25:1c:ca:45:1d:bc:2b:c2:92:a9:
aa:a8:e0:a5:13:82:06:66:85:da:00:df:37:9b:9a:48:79:3c:
56:99:fd:58:90:a2:bd:1e:a6:c3:af:af:90:18:a9:46:6b:3a:
a5:29:f9:37:b1:cc:31:2f:27:96:33:91:fc:08:e8:9a:9e:fa:
fa:4b:c4:3c:98:98:4c:67:d3:39:93:2f:21:09:13:53:11:27:
3d:0d:ac:a1:7a:1a:1c:d2:29:7c:25:57:35:58:d6:8b:c5:4b:
dc:1a:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org