Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/1-BjTM7yRZai6gUDW42aowsEcDeI.roa
File: 1-BjTM7yRZai6gUDW42aowsEcDeI.roa (raw, json)
Hash identifier: 73fnjPFxIIzqrMHWcUhGsXQL2ZvdIM2A3YFP96iFyZI=
Subject key identifier: F8:18:D3:33:BC:91:65:A8:BA:81:40:D6:E3:66:A8:C2:C1:1C:0D:E2
Certificate issuer: /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial: 034BAF16
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/1-BjTM7yRZai6gUDW42aowsEcDeI.roa
Signing time: Sat 01 Jan 2022 06:53:45 +0000
ROA not before: Sat 01 Jan 2022 06:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202675
IP address blocks: 185.56.218.0/23 maxlen: 24
185.17.106.0/23 maxlen: 24
2a02:5620::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55291670 (0x34baf16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
Validity
Not Before: Jan 1 06:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f818d333bc9165a8ba8140d6e366a8c2c11c0de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f9:dd:a2:e8:fd:12:af:32:1f:75:f4:9c:be:
e2:5e:de:d9:4b:be:15:33:a7:77:22:58:2e:dd:e1:
31:5e:55:53:4c:70:fe:83:7c:e0:b1:ab:a8:47:c1:
76:73:73:3a:ff:6f:6a:03:da:44:92:74:af:90:2f:
9c:04:ba:85:06:b1:33:6c:5d:3d:2b:f5:09:4a:1c:
19:59:da:ab:1d:c3:a6:78:14:cc:55:65:b8:4b:fd:
70:2a:c1:d5:04:35:33:ae:64:09:56:06:25:22:a2:
a2:86:66:f3:fe:66:af:f5:ee:8b:0c:5f:42:98:4a:
ff:85:e7:bb:12:5f:0f:e0:85:e0:31:9c:94:77:de:
19:6d:98:6c:ce:f1:08:7b:55:ba:b7:e5:e7:22:89:
85:87:58:71:5c:0a:b3:3e:09:90:a2:e9:b0:3b:d4:
89:32:01:f4:a1:75:4d:64:84:8c:e6:3e:c1:61:62:
e2:47:1d:e5:d5:ac:85:67:d9:a1:7f:b9:8a:b0:57:
ce:24:a4:61:52:19:c4:c2:5f:10:67:14:09:47:e1:
1c:db:65:14:9b:55:b9:6d:7c:47:7c:ed:ac:88:a0:
e6:84:1a:4e:2a:21:bd:a5:4c:17:03:41:c3:22:35:
cf:46:fb:39:5f:3e:ac:f9:63:4c:09:4e:01:61:2d:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:D3:33:BC:91:65:A8:BA:81:40:D6:E3:66:A8:C2:C1:1C:0D:E2
X509v3 Authority Key Identifier:
keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/1-BjTM7yRZai6gUDW42aowsEcDeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.106.0/23
185.56.218.0/23
IPv6:
2a02:5620::/32
Signature Algorithm: sha256WithRSAEncryption
67:97:dc:1e:3a:db:91:a7:6b:d1:00:59:6b:40:46:80:9d:a2:
3d:93:3a:48:66:7c:8a:f6:20:61:3b:46:5a:67:c5:de:7d:46:
2c:0f:3a:66:92:d6:03:c4:7b:6e:22:1f:e5:75:c4:84:75:5b:
f5:c8:0f:bf:51:85:75:fc:88:a9:3e:96:a9:c2:17:e5:67:91:
22:99:d2:75:34:4b:6d:0e:54:e9:5b:d8:58:30:aa:93:5b:d5:
66:71:a0:30:8e:b6:d6:54:a7:b3:8f:de:66:e4:36:1f:be:57:
22:1b:c4:f2:b8:97:18:04:0e:6d:a9:3d:32:4b:2c:94:ca:b4:
f4:5d:f4:d8:e3:2c:2b:f2:1c:67:fb:e9:88:39:93:3a:f1:1d:
c2:3c:0b:64:c8:dc:3e:26:1e:18:96:5d:8e:79:10:94:68:43:
90:42:d9:d8:10:63:7f:38:f6:5f:b0:9d:d0:01:92:dd:7a:61:
ec:16:8e:f2:cd:2e:b3:5e:d3:f0:d5:b9:33:57:f3:cf:39:64:
36:9a:99:d0:4d:8f:35:9e:1f:68:4c:9f:65:5a:3c:8a:c8:47:
ab:60:36:8b:72:43:81:1f:4f:71:58:42:02:a7:c0:d0:44:5f:
bc:cb:e2:8f:ad:af:23:2b:a0:1c:03:0e:bb:ba:14:c8:a3:a7:
b4:91:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org