Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/bb0Tx_OpK0SrkBTIuq3midJw65E.roa
File: bb0Tx_OpK0SrkBTIuq3midJw65E.roa (raw, json)
Hash identifier: I3xrkB0q2fFHAGKTYyfhVWfipvhXYyTIQZBoWZzKx5U=
Subject key identifier: 6D:BD:13:C7:F3:A9:2B:44:AB:90:14:C8:BA:AD:E6:89:D2:70:EB:91
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 17EFC6A5
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/bb0Tx_OpK0SrkBTIuq3midJw65E.roa
Signing time: Sat 01 Jan 2022 10:53:27 +0000
ROA not before: Sat 01 Jan 2022 10:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201689
IP address blocks: 185.66.228.0/22 maxlen: 22
185.66.229.0/24 maxlen: 24
185.66.230.0/24 maxlen: 24
185.66.231.0/24 maxlen: 24
185.66.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401589925 (0x17efc6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Jan 1 10:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dbd13c7f3a92b44ab9014c8baade689d270eb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:c2:f8:4b:71:0f:1d:b3:be:cd:ff:23:3d:
56:73:4f:a9:a8:5a:a0:a2:1a:39:dc:c8:21:a8:61:
a0:fb:00:3b:66:fa:e2:3f:5e:33:3a:1f:0d:f7:ab:
03:b7:95:f5:1f:cd:5a:7d:6a:5d:93:f4:94:97:43:
06:73:9c:fa:31:68:c8:9f:0d:2c:32:24:98:5f:ba:
cc:3a:35:f3:54:1d:7a:85:db:d2:58:89:e0:ce:39:
f1:26:dd:f1:28:34:17:1e:ef:1d:8a:62:0a:bc:78:
97:89:5e:59:66:c0:78:4d:d7:5a:ef:f0:76:bb:08:
b0:85:c9:45:59:45:2f:5b:fa:81:44:58:f7:54:10:
a6:09:2b:c3:6f:64:b0:b6:3e:03:c9:7f:44:d0:8a:
70:a2:c3:06:b7:c9:fe:26:12:8a:4e:d2:ec:d3:fc:
56:6e:0c:96:49:d5:7c:5e:a6:6c:ff:89:b1:17:e9:
06:7a:8e:b7:a2:99:a8:34:af:92:c2:c8:b7:29:bb:
17:a6:04:5b:e6:b8:14:58:f4:26:43:ea:e4:4b:34:
72:67:7f:ba:15:e8:21:d9:f2:f7:80:11:16:6d:cc:
f6:0a:cc:24:f4:fa:b1:1b:d0:11:d4:d6:9f:1d:8e:
71:a3:c8:b6:47:81:db:39:66:ea:8e:ad:82:9b:81:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:13:C7:F3:A9:2B:44:AB:90:14:C8:BA:AD:E6:89:D2:70:EB:91
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/bb0Tx_OpK0SrkBTIuq3midJw65E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.228.0/22
Signature Algorithm: sha256WithRSAEncryption
99:9e:7d:71:58:4e:ed:29:9d:da:26:9e:45:dd:32:9e:c2:6f:
27:13:6d:d4:fe:0c:f4:08:94:43:68:17:87:13:5e:b5:92:42:
a6:01:b4:7a:8b:cc:ba:e0:16:e9:72:bc:ad:22:19:2e:de:b7:
45:ad:35:e8:c4:44:c9:05:c2:c9:72:74:55:3e:69:5c:ec:0d:
1b:f1:d1:89:ba:8d:9d:60:7d:55:67:1f:51:75:fe:5e:16:ef:
b1:58:46:c2:ab:72:73:a9:3d:8d:f5:cd:5c:4c:b5:8b:79:af:
d2:62:24:19:d2:81:78:8a:7e:7e:71:f6:6c:e5:1e:39:19:38:
0b:71:46:75:24:49:3b:7e:bb:77:0b:7e:da:ca:cb:67:58:ba:
bb:40:37:ff:f5:9e:fa:99:b1:40:d4:b3:c0:ea:8b:1b:64:f1:
66:d0:dc:f9:8a:8e:0d:a3:4f:9d:fe:39:15:ac:50:28:de:2e:
6b:9c:46:34:8d:f5:86:37:f3:1c:44:16:d6:9e:e7:a7:e6:76:
09:bf:78:86:bd:3e:51:3d:de:23:5c:03:9f:59:b4:bf:a0:28:
08:65:22:44:1b:c7:2b:a6:01:e4:4e:18:b6:65:a6:e9:0c:89:
52:a2:81:2b:71:a8:8f:9e:8c:e1:a6:36:a9:e3:b7:84:4b:6b:
c0:2b:05:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:43 2024 by rpki-client on console-ams.rpki-client.org