Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/AyBDVhRipxE9resKH8KAApzDQc8.roa
File: AyBDVhRipxE9resKH8KAApzDQc8.roa (raw, json)
Hash identifier: YC48BHKWJsvAJapy9rwrHe/mKPtFwnggsYiksO24oiY=
Subject key identifier: 03:20:43:56:14:62:A7:11:3D:AD:EB:0A:1F:C2:80:02:9C:C3:41:CF
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 03C60E3C
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/AyBDVhRipxE9resKH8KAApzDQc8.roa
Signing time: Sat 01 Jan 2022 03:53:55 +0000
ROA not before: Sat 01 Jan 2022 03:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204198
IP address blocks: 185.111.84.0/24 maxlen: 24
185.111.85.0/24 maxlen: 24
185.111.87.0/24 maxlen: 24
185.111.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63311420 (0x3c60e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Jan 1 03:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=032043561462a7113dadeb0a1fc280029cc341cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:5f:fe:f7:d0:2c:0d:5e:b3:a8:eb:97:65:
63:f0:b6:5c:fe:a8:c2:e1:d8:76:ce:48:ea:75:3e:
80:33:ea:af:cf:af:a9:3c:79:5b:73:ce:76:3b:d4:
3e:18:a4:94:59:05:c0:9b:66:52:86:c1:3b:5f:44:
fc:62:a9:d0:00:fa:5c:f4:91:20:7a:81:bf:89:30:
cf:ad:c9:21:d0:a1:dd:ef:1e:9d:6a:72:1d:69:93:
ad:9f:ec:4e:68:64:9b:16:ab:f8:10:b2:3a:07:ed:
ad:e9:9c:ac:76:ba:5e:8b:9c:9e:88:c1:ed:03:e8:
66:81:21:9d:52:2b:dc:6b:f5:5b:64:24:9e:a7:fd:
c1:df:8d:04:70:ab:85:70:97:1b:23:4c:c1:ba:3c:
de:32:59:5a:1c:1d:27:74:08:7e:44:b2:56:90:0a:
54:5b:17:09:e1:81:0c:b5:eb:f2:5c:8a:43:18:64:
83:7b:00:66:4c:fc:aa:89:a5:59:eb:d0:be:74:2f:
52:4f:d1:83:de:9a:97:b4:4d:22:5e:23:23:82:7b:
fd:e3:88:31:65:84:97:dc:e6:ac:2b:b9:20:b7:40:
c2:45:cd:7d:6a:59:b6:16:d5:04:06:22:fd:c5:88:
63:39:c6:20:08:5a:40:c6:86:19:a2:f7:de:f5:d8:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:20:43:56:14:62:A7:11:3D:AD:EB:0A:1F:C2:80:02:9C:C3:41:CF
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/AyBDVhRipxE9resKH8KAApzDQc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:94:d6:9c:3e:73:c8:70:cd:31:45:e9:03:f7:f5:d7:bf:c0:
ac:64:5f:25:f9:fd:ab:c6:36:ce:e2:64:0c:a3:e0:e3:50:e7:
50:ce:41:41:f1:d0:14:55:ce:2d:53:83:6f:ba:ff:9c:e3:13:
fa:f6:0f:33:7a:71:26:a3:8f:31:a1:a2:86:8b:c8:b7:e7:76:
81:3c:70:ee:8c:70:62:05:98:aa:a1:a0:1d:98:cd:66:23:15:
f4:f1:8e:fa:88:e9:92:a4:ea:dc:bb:a6:81:ab:e7:59:73:63:
4d:4d:9b:b6:d8:cf:08:58:e1:b4:28:b6:c1:3b:db:78:10:e0:
56:ce:82:d3:95:bf:12:e1:39:0e:84:bd:07:fd:01:54:2e:64:
cd:b7:35:dc:27:7b:14:b3:56:a6:4c:47:2b:c7:b3:1b:ae:67:
78:d1:76:11:35:e5:f5:2d:15:e2:12:fa:4f:62:ad:fc:80:b3:
99:ca:b3:82:cc:0d:ca:46:9a:56:90:62:da:28:8e:77:ab:6c:
4a:f9:93:5d:8c:29:a7:da:49:53:f7:c5:ee:96:95:00:fd:6d:
71:b0:0a:91:bc:d9:84:ae:84:b9:82:3a:23:75:5a:a4:a4:98:
3e:72:36:47:17:0f:d3:3e:ba:cb:b5:02:93:d3:76:6d:7f:8c:
c7:27:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org