Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/sY-y-RiHw4UTVnWO6IzdVoKX16o.roa
File: sY-y-RiHw4UTVnWO6IzdVoKX16o.roa (raw, json)
Hash identifier: hZezeN6VhTtuOorpaXCjtrNxRPszuQh+E9swbNFDVxg=
Subject key identifier: B1:8F:B2:F9:18:87:C3:85:13:56:75:8E:E8:8C:DD:56:82:97:D7:AA
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 04C8EF2E
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/sY-y-RiHw4UTVnWO6IzdVoKX16o.roa
Signing time: Sat 01 Jan 2022 00:52:11 +0000
ROA not before: Sat 01 Jan 2022 00:52:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205643
IP address blocks: 185.207.73.0/24 maxlen: 24
185.207.74.0/23 maxlen: 23
185.207.72.0/22 maxlen: 22
185.207.72.0/23 maxlen: 23
185.207.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80277294 (0x4c8ef2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Jan 1 00:52:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b18fb2f91887c3851356758ee88cdd568297d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:c5:6a:09:b9:ee:23:07:f2:18:57:4e:95:
d7:fd:fe:3e:ae:de:03:64:0f:c5:b1:a1:b8:bf:88:
29:a8:a5:2a:3f:ce:30:e9:77:5d:f0:ae:9c:fe:5d:
94:8c:d3:78:1d:c4:64:0d:15:b2:fc:97:e2:19:07:
73:c1:d0:fb:db:ac:50:9e:c4:20:59:b3:50:73:e4:
1a:de:da:7a:25:df:03:26:24:ea:0a:57:bc:28:5d:
9d:17:67:fe:d5:31:99:f3:7b:58:12:29:22:37:a6:
67:70:d6:f1:24:53:7d:52:93:4b:0d:c6:e3:7f:a1:
70:c0:12:7a:e3:6d:70:76:8f:f3:c3:e2:f9:4e:75:
41:67:96:cd:d2:04:6d:62:14:88:94:a3:2b:66:47:
c9:60:61:4e:fa:a4:24:e4:ca:a2:82:51:e1:e3:30:
e4:2d:82:05:5b:da:de:bd:ea:ea:75:8b:93:7a:4c:
43:3b:f7:da:a8:a0:61:e8:9a:39:27:86:78:9b:05:
f4:14:be:d9:35:fa:99:5e:30:79:08:1b:13:a9:3b:
f3:f9:1d:04:37:aa:bf:92:74:9b:1d:dc:94:40:b3:
f0:e1:4d:10:0d:e7:1c:ed:33:59:22:c9:60:e1:21:
12:1d:13:18:e0:9a:05:aa:1e:f4:2e:a8:5e:5a:36:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:B2:F9:18:87:C3:85:13:56:75:8E:E8:8C:DD:56:82:97:D7:AA
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/sY-y-RiHw4UTVnWO6IzdVoKX16o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:42:be:c1:96:1c:76:ac:d5:95:ff:80:54:a6:7c:eb:1e:a0:
db:e8:06:2a:81:72:52:3b:22:8b:36:ec:31:b8:16:6d:3e:c1:
38:24:d4:07:69:30:5c:94:ab:88:2a:5a:af:2e:b3:f3:55:6b:
db:57:b4:41:a9:7d:2e:3a:86:c4:f5:33:18:8a:0e:37:6c:2b:
fd:81:8c:f3:9b:39:e3:28:fa:00:ce:a6:9b:21:0b:a2:19:bf:
08:b1:6c:66:02:e6:91:ce:60:b3:69:b3:28:43:d3:22:42:fe:
09:88:81:ad:69:8d:d8:d9:49:03:90:fe:2b:2c:a9:46:7c:e0:
da:7c:71:cc:e5:ec:1a:ad:76:e2:8b:c4:e3:f9:d8:7f:f8:81:
f4:46:f2:ac:fc:33:f7:ea:8f:18:4f:b4:3c:bf:61:a0:45:4d:
ee:5a:57:a1:d7:df:0d:9b:0c:b5:43:6d:62:ee:20:29:43:04:
b5:13:4d:a3:01:e8:1a:aa:55:75:77:ed:33:53:13:cb:af:a4:
ac:6e:a6:a7:5b:e4:59:67:88:2c:01:32:16:13:4b:5c:4d:e7:
0c:c7:9e:64:84:2a:b4:c8:5d:f5:83:5f:39:24:f9:c4:70:83:
e7:aa:20:c5:1e:39:37:02:30:a1:1f:c3:e6:9f:2a:b8:db:ef:
59:1a:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org