Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/XynyfE-bsn2L_ZS311ffkLsBSms.roa
File: XynyfE-bsn2L_ZS311ffkLsBSms.roa (raw, json)
Hash identifier: IPVydLRkBGAzsyZ/TzocKTUcmVvv8TpYSx7R9ZEkAGc=
Subject key identifier: 5F:29:F2:7C:4F:9B:B2:7D:8B:FD:94:B7:D7:57:DF:90:BB:01:4A:6B
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 075E02C6
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/XynyfE-bsn2L_ZS311ffkLsBSms.roa
Signing time: Sat 01 Jan 2022 06:53:39 +0000
ROA not before: Sat 01 Jan 2022 06:53:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.29.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123601606 (0x75e02c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Jan 1 06:53:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f29f27c4f9bb27d8bfd94b7d757df90bb014a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:e3:80:83:99:28:01:43:8c:58:6f:15:6d:
cc:65:50:89:f7:4a:c6:a4:d4:fe:24:c4:55:71:11:
ae:8b:d8:89:e8:75:39:67:92:35:ba:75:ef:b5:3c:
0a:6f:a6:e0:75:41:f1:36:f2:f0:88:e9:e6:c2:45:
c6:64:4a:79:05:df:a3:4a:63:92:30:07:91:22:49:
86:c5:57:41:a2:29:4c:f9:e4:4a:e2:72:68:57:5c:
d5:35:1b:81:4d:37:36:32:17:42:10:a4:2e:66:d3:
9d:6a:b2:62:d3:21:9d:80:18:f5:0b:ef:71:0d:f0:
5a:33:81:8a:1b:87:96:0a:a4:7d:3e:38:cc:8f:e2:
c1:52:cc:98:4f:7a:e4:66:49:9c:fc:77:12:71:fd:
b3:51:a4:6c:c9:9d:52:58:2a:fd:8a:b9:a8:64:29:
25:73:ac:ba:f9:42:dd:f6:7a:93:9d:49:1a:fa:27:
40:e5:54:c0:47:b9:95:af:37:15:45:1b:ac:dc:ab:
d5:64:47:b5:4b:eb:75:c5:49:87:c7:78:00:12:56:
06:c4:7c:61:58:8f:b0:18:87:e4:84:7c:9d:d3:0b:
f2:ec:04:4f:b9:40:2d:67:bf:90:be:a0:6e:25:04:
86:f3:ab:b2:ce:c6:ca:3d:72:c1:08:bd:8b:54:68:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:F2:7C:4F:9B:B2:7D:8B:FD:94:B7:D7:57:DF:90:BB:01:4A:6B
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/XynyfE-bsn2L_ZS311ffkLsBSms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.47.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:59:3a:1a:c8:9e:64:e8:14:f1:04:8b:32:46:a6:6d:2c:1f:
40:14:30:3c:58:9e:e0:02:10:ea:4a:24:2b:ce:52:1b:32:0b:
bd:ff:ba:c6:79:e3:b4:ac:4d:4b:2e:69:2d:cb:c8:03:71:62:
f3:5b:58:33:0b:2f:15:2b:d5:6b:5b:4b:cf:81:cb:57:a0:4f:
c1:c0:96:61:b0:f2:dc:e9:4e:43:8e:67:c2:ff:f7:01:e4:21:
8e:ab:d9:76:b2:c2:a4:71:58:df:32:33:72:a2:ed:d3:87:1d:
47:7d:a9:ab:8c:a3:98:8b:8a:10:24:f3:1b:95:74:c4:e5:bf:
48:20:d1:35:f2:8a:02:7b:29:00:ac:cc:84:05:41:2a:f7:8d:
44:d9:ad:60:66:da:19:52:e0:ca:d0:1e:86:d0:0c:0c:47:6c:
19:df:93:17:1d:43:bb:fc:e1:d4:3c:86:15:8c:b2:39:61:29:
48:b7:48:d5:4f:b0:2a:eb:26:06:a8:1c:10:b6:99:2b:ad:e4:
d1:19:3d:cc:86:b7:73:45:60:56:b9:01:16:c4:00:2f:a0:ba:
80:e6:18:ad:56:2e:2f:f9:31:1e:a7:16:0b:c6:64:47:76:94:
52:30:6c:d7:3e:71:7e:d9:d1:87:db:98:81:22:b7:e0:fc:c6:
80:db:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-ams.rpki-client.org