Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/bAz_DdqESYm3ox_YmIPU-mQzSSA.roa
File: bAz_DdqESYm3ox_YmIPU-mQzSSA.roa (raw, json)
Hash identifier: wevlh3XOTc4xyKdHhJunJD5MbYB+eFJjGeFfqncaSbA=
Subject key identifier: 6C:0C:FF:0D:DA:84:49:89:B7:A3:1F:D8:98:83:D4:FA:64:33:49:20
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 068BD457
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/bAz_DdqESYm3ox_YmIPU-mQzSSA.roa
Signing time: Sat 01 Jan 2022 07:57:02 +0000
ROA not before: Sat 01 Jan 2022 07:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 213.184.80.0/22 maxlen: 24
185.154.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109827159 (0x68bd457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Jan 1 07:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c0cff0dda844989b7a31fd89883d4fa64334920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:ae:3b:b0:23:6c:f3:80:5f:0c:4e:12:d6:
e8:11:fc:51:96:eb:21:16:c8:1b:0d:fb:f3:e8:56:
f6:8b:37:f3:de:0b:1a:00:a7:8e:78:5c:b7:aa:48:
9b:c0:86:6d:0b:e5:d0:35:c4:2a:09:72:40:94:d0:
25:e7:16:c6:a5:77:c2:fd:57:39:29:d2:3f:e8:ec:
be:47:40:d0:d2:dd:b2:f3:c7:01:33:8c:87:2e:3a:
68:74:27:e5:51:e1:18:a9:d5:04:ba:80:52:b7:2a:
82:3c:10:2b:a6:fb:c5:61:92:3c:f3:c7:32:d1:f9:
55:2a:8c:a8:f5:13:cc:75:e5:95:c8:53:2c:29:5d:
c2:58:aa:e3:68:01:b8:47:4a:c0:ee:28:84:2e:4f:
b2:21:70:fb:2e:b2:85:a4:b5:5a:17:2a:25:82:a3:
25:e2:00:aa:65:a8:a3:75:b6:70:d2:29:de:7f:52:
18:0d:38:ba:73:f2:b9:07:df:33:a9:f0:da:45:e8:
ba:c6:ca:fd:b9:20:2f:dd:58:04:37:09:50:80:55:
d6:0c:21:7a:11:af:5f:1b:1c:85:e7:20:35:c0:fd:
4d:2e:9b:f2:4f:1f:7a:9a:c8:17:82:98:83:3f:a5:
16:bc:3b:30:7a:24:64:b7:5a:78:9b:ae:16:1f:7f:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0C:FF:0D:DA:84:49:89:B7:A3:1F:D8:98:83:D4:FA:64:33:49:20
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/bAz_DdqESYm3ox_YmIPU-mQzSSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.216.0/22
213.184.80.0/22
Signature Algorithm: sha256WithRSAEncryption
45:83:dc:8d:f2:8e:96:ee:44:f5:1f:ec:37:2f:bf:23:c3:e1:
5e:69:3b:f8:e4:67:d9:d3:18:0a:56:77:c9:6c:99:3b:f5:1f:
39:1b:30:61:ba:e1:37:5a:63:90:42:f8:bc:7d:3c:2e:f1:a0:
05:5c:44:60:68:0b:c3:d9:c6:a9:56:5e:28:47:54:cc:4f:93:
bc:1e:c3:07:eb:d6:e8:2c:64:28:fe:78:4b:cd:4c:18:a8:17:
4c:5d:90:a3:c2:60:30:25:c0:f5:1b:4b:ed:50:b6:43:c2:25:
bc:11:e9:72:96:9e:4c:a5:7a:6f:e6:b3:fc:64:75:86:b9:3d:
41:a5:33:0f:3a:da:39:94:8e:5f:8d:fb:fb:f7:61:ec:1d:af:
d3:20:4d:61:d9:d5:85:ba:58:bb:81:e7:60:69:fe:a9:50:04:
be:f5:51:33:d1:95:3d:0c:bf:56:a7:f1:b9:c9:de:b2:f1:11:
9a:c4:e0:3a:90:71:51:96:99:81:80:0f:28:7e:66:4a:20:e4:
05:73:52:18:96:12:e3:13:7c:4b:34:61:4c:60:47:c4:71:5e:
1b:8f:d4:db:58:d5:14:94:86:56:67:75:21:38:41:11:f0:9e:
20:18:c3:b3:1e:9e:cf:f3:8d:cc:cf:45:94:85:df:e9:5b:93:
31:9d:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:58 2023 by rpki-client on console-ams.rpki-client.org