Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/FhtoBGT3f7RgYyBw9OHPTCArKwU.roa
File: FhtoBGT3f7RgYyBw9OHPTCArKwU.roa (raw, json)
Hash identifier: /RJHNVaAb9mJ5YEygK55tbFOpJ3QF4uc1QN+Ht7Ps4o=
Subject key identifier: 16:1B:68:04:64:F7:7F:B4:60:63:20:70:F4:E1:CF:4C:20:2B:2B:05
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 018499376935CCEE3898C2ABD71008D3878C
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/FhtoBGT3f7RgYyBw9OHPTCArKwU.roa
Signing time: Mon 21 Nov 2022 08:04:16 +0000
ROA not before: Mon 21 Nov 2022 08:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47886
IP address blocks: 185.236.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:37:69:35:cc:ee:38:98:c2:ab:d7:10:08:d3:87:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Nov 21 08:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=161b680464f77fb460632070f4e1cf4c202b2b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:f6:d0:a9:f8:37:49:32:1a:62:37:65:2c:
4d:a1:e1:ab:0f:9d:3e:39:f7:fd:a1:89:1b:ed:ce:
d3:e7:b4:60:6f:45:ef:a6:11:bd:7e:93:41:6c:a1:
ff:a1:b2:2c:ac:d6:7e:4c:d6:a4:0c:aa:f9:ba:af:
07:e2:e7:35:79:92:34:e9:4a:1d:e9:d6:1e:f1:de:
d4:46:c4:ec:68:9b:51:86:f9:b8:62:e1:a3:a7:ef:
f2:7e:2f:06:f6:d7:75:59:82:45:db:d9:62:6b:9e:
9d:1f:16:ab:28:54:e0:5e:7a:d5:af:66:90:21:2e:
8c:be:15:b0:57:2e:7d:d1:06:68:5e:6c:0d:e1:14:
a5:3e:25:b0:22:80:36:5a:ea:cd:15:38:36:c2:69:
ef:2a:e6:10:1e:11:3f:9c:a3:1e:49:4a:75:80:1d:
2f:82:17:c9:9f:3c:94:b1:22:a6:e9:4a:d6:41:5e:
a0:6e:89:b4:c3:ac:8b:16:e3:7a:22:9e:99:1c:7e:
79:ed:65:01:2b:d3:e0:20:4b:c2:0f:17:eb:33:a1:
bc:9e:ee:8f:e0:bf:ad:e4:22:15:70:ff:7a:f7:af:
e4:bd:4a:70:93:72:80:cd:4d:10:72:ad:ea:1d:56:
3b:d8:23:b2:27:0f:21:ce:49:26:c0:c2:99:ff:77:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:68:04:64:F7:7F:B4:60:63:20:70:F4:E1:CF:4C:20:2B:2B:05
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/FhtoBGT3f7RgYyBw9OHPTCArKwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.16.0/22
Signature Algorithm: sha256WithRSAEncryption
66:43:2a:0f:65:01:bf:c7:06:28:3a:40:8e:35:b6:3a:fa:12:
55:14:a8:0e:e9:03:dc:19:1b:e4:34:8e:0b:ac:d3:aa:77:82:
e4:16:b1:a8:6f:c3:4d:e3:48:6a:df:db:ea:fe:12:20:86:3f:
93:4e:b0:fe:e8:3c:be:ab:8f:64:09:40:79:45:bb:12:87:71:
8d:d1:30:a2:a6:c6:19:de:a1:0e:02:ff:c1:35:2a:0c:e0:77:
e2:d9:04:ea:4b:4f:ff:b1:fe:05:c3:73:79:d9:9a:1d:bd:4b:
35:22:9d:db:d6:e4:2d:ed:bd:46:46:49:c9:da:e8:08:b2:e5:
32:46:af:b4:86:56:ff:cb:c3:71:34:17:09:44:fb:bd:10:94:
da:f5:f6:1b:5c:92:90:89:75:ef:f3:41:03:c3:67:3a:e5:6f:
db:44:c6:c7:af:da:0d:0b:5a:d7:8c:c5:b3:c3:f2:ce:89:a6:
aa:32:b5:59:3b:37:c2:f4:cc:d4:5b:46:94:2d:b8:00:ea:13:
4f:f3:67:2f:d1:69:97:47:b5:fd:50:6f:33:f7:f5:18:dd:87:
21:9b:1e:d5:9e:b0:ee:07:3b:d2:88:ec:39:cb:29:a1:19:30:
3c:c3:09:56:f8:6d:db:df:8f:78:72:5f:37:29:cb:fc:f1:c3:
70:a7:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:05 2024 by rpki-client on console-ams.rpki-client.org