Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BYfjJYAAe_Z9yq8Lgg5kNz_nqP0.roa
File: BYfjJYAAe_Z9yq8Lgg5kNz_nqP0.roa (raw, json)
Hash identifier: fTLX4IryhMFArRi10IWrapqBIov3ULVl8JdUb11PY2o=
Subject key identifier: 05:87:E3:25:80:00:7B:F6:7D:CA:AF:0B:82:0E:64:37:3F:E7:A8:FD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01824AA8A9C6048646225E6B659D0DC9294C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BYfjJYAAe_Z9yq8Lgg5kNz_nqP0.roa
Signing time: Fri 29 Jul 2022 15:52:23 +0000
ROA not before: Fri 29 Jul 2022 15:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206425
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:a8:a9:c6:04:86:46:22:5e:6b:65:9d:0d:c9:29:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 29 15:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0587e32580007bf67dcaaf0b820e64373fe7a8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:29:4b:8f:bd:f1:e2:e4:c7:71:af:15:70:
24:63:27:b3:63:a2:ba:9b:17:a7:63:25:dc:d9:e1:
86:4b:a0:73:c1:d9:a9:c4:ca:7c:fb:e3:ea:e0:94:
d2:3b:74:25:87:32:2c:58:15:d4:8f:a4:91:fa:46:
52:e3:33:13:3a:ef:33:cc:27:55:eb:a4:ba:e9:00:
f8:dc:78:7f:ad:a3:bc:19:59:38:04:aa:5a:06:09:
29:3b:75:96:17:b7:51:35:50:61:07:93:41:db:0c:
31:09:dd:03:cd:8f:14:ec:79:92:e4:92:11:6c:36:
47:7d:00:7b:a1:ba:ca:e1:29:10:48:7b:9e:3d:e9:
12:2a:d7:99:ab:37:31:6f:32:60:6b:13:7a:5a:30:
58:9d:25:4b:03:8c:1b:45:31:62:17:e4:07:24:48:
4c:a1:a7:33:ab:d9:b6:4c:ad:e5:aa:07:af:db:4e:
3b:df:c2:a8:e0:cc:57:5a:51:15:76:df:96:b2:9b:
8e:00:23:91:14:25:45:dd:1f:18:ca:c6:75:2a:1b:
bd:9c:11:00:dc:49:07:73:a7:40:f8:37:de:5b:7a:
91:84:aa:98:54:e8:2a:7e:0b:fa:22:8e:43:b3:ab:
cf:73:dd:0b:6a:8f:65:ae:8c:c9:e7:c5:d5:d1:cc:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:87:E3:25:80:00:7B:F6:7D:CA:AF:0B:82:0E:64:37:3F:E7:A8:FD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BYfjJYAAe_Z9yq8Lgg5kNz_nqP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:45:c7:cb:c1:bd:10:2f:39:4d:1a:3f:94:a3:b5:bc:b5:ef:
97:c3:6d:83:30:a7:d7:13:db:24:08:89:f1:34:d6:3a:b9:9b:
fe:c9:b7:31:ab:0e:a5:bc:bf:ab:04:cc:1e:59:8a:a1:96:7c:
aa:51:ff:97:f4:e4:b7:23:a4:7c:aa:e4:94:4f:1c:fc:8e:dd:
c1:c5:80:56:b5:5a:c3:3d:c1:24:d7:c7:a5:64:ef:cf:79:7f:
09:e1:ac:0b:b2:2c:5d:ae:5c:a2:03:ee:f4:cb:29:1e:52:4d:
f2:ce:6e:5e:12:87:f3:0a:bd:d9:39:f6:7b:e1:75:3e:de:19:
de:8c:b5:ae:c9:0e:d1:69:c2:fd:19:bf:fb:2c:9d:f7:90:7a:
85:2f:83:6c:00:20:d0:bf:db:e7:0f:ba:78:fb:14:e4:e1:08:
53:10:4f:d6:91:07:7d:60:d3:12:5e:d0:e7:c7:5a:97:e0:ad:
af:9b:52:31:e2:02:82:c6:09:31:c5:c0:70:31:00:59:0e:e0:
15:62:64:61:d1:f5:cd:0d:eb:20:5b:8e:fa:18:7e:18:76:8c:
6c:68:1a:44:9d:e7:61:69:ab:91:e9:a8:ce:ed:11:73:57:e7:
32:9f:95:94:62:4f:5e:b7:98:47:23:96:35:6c:97:8a:33:b0:
1d:6a:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org