Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/BZIibc9NaO84KWoHRXcrHHET9gs.roa
File: BZIibc9NaO84KWoHRXcrHHET9gs.roa (raw, json)
Hash identifier: y5xjXktv3Ef0CnnLl4HdIhFP5OtzfAgsOj3NPAuC3qM=
Subject key identifier: 05:92:22:6D:CF:4D:68:EF:38:29:6A:07:45:77:2B:1C:71:13:F6:0B
Certificate issuer: /CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Certificate serial: 0200FF63
Authority key identifier: 30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/BZIibc9NaO84KWoHRXcrHHET9gs.roa
Signing time: Sat 01 Jan 2022 03:52:09 +0000
ROA not before: Sat 01 Jan 2022 03:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203745
IP address blocks: 185.121.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33619811 (0x200ff63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Validity
Not Before: Jan 1 03:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0592226dcf4d68ef38296a0745772b1c7113f60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:de:bf:67:e7:91:a9:60:be:29:a3:30:aa:
ff:58:50:f7:04:0e:74:fd:f2:4a:21:73:48:3c:6a:
4f:d7:09:51:e5:2e:86:5e:f5:79:cf:9c:de:0e:58:
cb:36:0c:ba:3d:51:79:da:b7:cc:62:78:43:b6:4e:
1c:83:9e:bb:30:60:9d:0e:c4:32:e8:51:b5:65:c3:
8f:df:f2:1a:ae:6c:19:b9:22:76:01:47:7c:e6:4f:
7f:60:64:de:5b:f3:a8:93:4e:03:93:95:ce:ed:3e:
fa:3d:70:cf:cf:59:60:1a:c4:c2:70:7a:61:a9:60:
77:06:b5:42:73:a2:8a:33:1a:be:1c:f2:dc:3e:34:
d8:6e:4b:83:61:4f:0b:40:c9:e9:1b:76:2c:5f:4b:
4e:07:ae:ad:38:c4:99:7c:98:13:31:a9:4f:5b:c4:
e3:c6:01:d1:01:10:3d:02:6f:9d:d9:a8:b8:2a:c6:
78:64:ba:a7:bd:d2:0a:0c:41:e3:7f:e3:c9:1e:ff:
24:f9:d8:ce:f9:97:fc:8a:72:85:73:a9:7f:42:7d:
ab:01:ee:5e:68:bf:bf:4c:30:3a:d4:f5:22:31:85:
28:09:48:f4:01:b9:e6:8f:b3:05:36:82:1f:a2:e9:
c5:11:5e:fd:93:17:95:0c:e1:0a:59:a3:60:b3:c2:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:92:22:6D:CF:4D:68:EF:38:29:6A:07:45:77:2B:1C:71:13:F6:0B
X509v3 Authority Key Identifier:
keyid:30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/BZIibc9NaO84KWoHRXcrHHET9gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f4:6b:66:89:ad:b7:53:3d:c9:87:86:88:f2:fa:45:e2:c1:
c3:7d:a1:0a:ea:db:77:f8:ab:4d:71:fc:d1:f2:09:c3:03:50:
61:82:1b:a6:4b:92:0c:ef:06:9a:0a:59:d0:7d:15:97:dc:8c:
08:d7:f5:08:bc:ef:7b:00:08:e6:7d:72:78:a0:f1:99:e1:0a:
70:b7:b1:99:d4:d6:66:4d:7e:23:54:a1:23:60:21:19:39:53:
fb:62:74:fc:5f:44:42:4a:96:14:b3:0c:fe:9e:0c:21:a3:3f:
f8:90:f1:b9:90:bf:16:b7:76:be:69:fa:96:70:16:6c:d2:65:
6d:4a:bf:29:cc:71:0a:4e:e1:32:98:12:f1:bd:31:f7:49:d4:
8a:cd:82:a1:78:89:4c:54:bb:2f:6f:1a:4d:dc:44:c2:14:72:
3e:9e:fe:d8:d8:67:f4:f9:01:a4:54:38:c2:6f:b5:ef:2f:b3:
1a:80:ae:0b:8c:bc:55:53:67:a7:37:ba:ee:ee:a7:72:73:56:
ea:94:93:68:05:28:6c:03:b5:b2:12:3f:a7:ac:15:64:fb:c5:
ad:30:04:03:e5:df:c2:c0:81:4d:49:93:a4:6a:3d:9d:65:87:
a2:5b:87:8a:16:92:6b:c9:98:66:f2:60:0e:18:cc:46:ea:73:
e7:01:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:14 2024 by rpki-client on console-fra.rpki-client.org