Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/bh9HzuAxw3yyawPQ-kf669YSq4g.roa
File: bh9HzuAxw3yyawPQ-kf669YSq4g.roa (raw, json)
Hash identifier: zCyE0UPFnODstoT383fMXXdi2obJZimMw2SojQHXtbA=
Subject key identifier: 6E:1F:47:CE:E0:31:C3:7C:B2:6B:03:D0:FA:47:FA:EB:D6:12:AB:88
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: C20853
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/bh9HzuAxw3yyawPQ-kf669YSq4g.roa
Signing time: Sat 01 Jan 2022 05:03:54 +0000
ROA not before: Sat 01 Jan 2022 05:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43824
IP address blocks: 185.217.85.0/24 maxlen: 24
185.217.84.0/24 maxlen: 24
185.217.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12716115 (0xc20853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Jan 1 05:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e1f47cee031c37cb26b03d0fa47faebd612ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:e8:fc:ca:65:bc:98:7d:6d:68:85:68:e3:
53:f4:c0:42:a1:7f:e1:81:c2:47:79:b4:86:9a:22:
77:48:0d:3f:87:7e:a4:66:64:dc:72:08:18:6a:ba:
9e:14:9a:d6:75:86:93:92:d0:cc:8d:8f:b4:95:d7:
db:eb:13:a0:c7:f8:48:31:e3:8e:a4:87:4e:77:3b:
14:17:da:d6:32:ef:c5:e6:69:7a:5e:02:e8:79:1b:
c8:34:b6:59:ca:a9:c8:11:c6:d2:bc:62:56:ae:99:
7d:bc:35:48:c7:01:c2:f3:8f:7e:01:00:6c:1c:19:
e5:f7:92:14:46:89:36:20:e3:ee:b1:01:80:73:17:
e7:ac:91:cb:f0:85:8e:2f:4e:7d:97:1b:fa:d3:bf:
f4:22:60:c4:f8:ed:77:33:30:f5:9d:07:06:8f:1e:
d1:f2:fd:47:b2:22:db:cb:64:97:08:2b:29:b2:29:
78:48:7a:ff:3b:f9:18:09:3e:d7:8d:b0:66:90:58:
7c:84:d5:88:3e:4d:6f:49:65:ff:4b:fe:65:89:3c:
39:ae:60:02:7d:48:41:a9:b5:a3:a9:82:25:a3:61:
b4:d3:ee:a8:91:86:f9:d2:c8:19:b6:e2:c4:1d:a6:
f5:f3:ed:13:91:64:24:79:79:82:ab:c3:66:7c:af:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:47:CE:E0:31:C3:7C:B2:6B:03:D0:FA:47:FA:EB:D6:12:AB:88
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/bh9HzuAxw3yyawPQ-kf669YSq4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.84.0/23
185.217.87.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:2e:97:ef:47:d9:55:a4:26:27:38:d8:54:46:e8:39:c0:c3:
1c:06:2c:86:6f:76:a5:b5:bd:9e:36:ea:09:74:5b:2b:57:62:
4b:f7:a8:44:90:11:cf:6b:f6:42:cb:69:6e:ed:fe:52:d6:09:
b1:3b:2d:57:da:e6:71:2c:3a:cf:6a:4f:eb:a4:59:21:5e:91:
19:87:90:04:ea:6b:e1:32:99:fc:2e:21:93:a1:4a:45:9b:51:
7a:49:a3:79:41:c7:aa:27:71:a0:fa:dd:a7:85:fa:00:5e:18:
25:bb:88:8f:c2:c5:96:f7:cc:2b:61:83:8f:42:f0:c9:4d:4f:
05:f3:9a:f1:ec:a3:5c:d6:7d:f6:68:dc:82:7a:36:28:81:a4:
27:dc:dd:2c:ce:1a:68:60:38:53:c4:f6:3f:a7:67:46:11:bd:
5a:d4:db:88:f7:22:c8:90:4d:f0:1e:95:af:a4:83:3d:13:a5:
c7:0e:4a:83:1b:af:bc:9d:95:4a:9f:be:92:7c:44:49:4a:ba:
2c:e9:9c:6b:84:4c:b8:0a:95:82:4e:23:0c:04:27:ac:e2:eb:
eb:f8:5c:66:cb:27:f9:ff:85:0e:a0:17:fa:6d:a3:7d:1a:01:
2b:21:5c:a9:08:6e:fe:4b:bc:88:18:27:9e:48:77:49:f1:fe:
09:52:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:53 2024 by rpki-client on console-fra.rpki-client.org