Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/bYuIMHv_0U8_CoVMyLJWwsqob40.roa
File: bYuIMHv_0U8_CoVMyLJWwsqob40.roa (raw, json)
Hash identifier: IySd1LrfdyDEG6mT93gifePds1PwieLNhpc/k20bDl8=
Subject key identifier: 6D:8B:88:30:7B:FF:D1:4F:3F:0A:85:4C:C8:B2:56:C2:CA:A8:6F:8D
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 018A740F227EC9F8EA260010CC60594C1554
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/bYuIMHv_0U8_CoVMyLJWwsqob40.roa
Signing time: Fri 08 Sep 2023 09:11:03 +0000
ROA not before: Fri 08 Sep 2023 09:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12337
IP address blocks: 185.174.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:0f:22:7e:c9:f8:ea:26:00:10:cc:60:59:4c:15:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Sep 8 09:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d8b88307bffd14f3f0a854cc8b256c2caa86f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:51:1b:55:ee:db:2b:19:f0:e4:11:1e:6b:
90:4f:ea:0d:61:c6:ca:82:9e:1f:d0:d8:99:9b:62:
a3:e0:d0:a2:94:ab:9e:0d:f4:c8:12:e4:32:10:5b:
37:ae:35:0f:ff:03:ee:ca:2c:65:18:51:99:ac:a1:
01:42:c8:62:1b:dd:22:52:86:9d:ff:04:33:91:27:
e6:b4:3a:e3:4e:22:e3:f8:fe:46:35:22:72:44:c2:
58:5b:50:f8:7c:a3:b2:f4:ef:bc:3c:93:4c:c5:18:
4c:bd:73:1d:62:b5:75:9d:b7:0d:b9:e1:29:d7:26:
9f:41:c5:50:98:a4:2f:e3:b1:f3:d7:c9:54:c8:d5:
7e:c2:bd:9f:2c:03:bc:43:07:95:9a:41:cc:73:a5:
59:b8:22:01:8c:1d:9b:bf:2a:22:a0:2e:98:ec:bb:
35:ec:0e:e6:2a:80:dc:bf:8c:86:4b:e5:8d:69:92:
d5:dc:6a:15:b5:0f:83:b5:26:db:1b:6c:92:04:75:
5e:ff:f9:c1:31:6c:f3:43:c1:5b:5c:c1:a1:c4:87:
38:d8:b4:45:a3:87:94:96:f3:fa:3c:85:b7:b2:2f:
e9:9c:99:82:d5:a0:bd:71:c7:56:18:cc:d2:34:e7:
c0:0d:51:df:b3:c0:99:1d:b4:1b:49:97:f9:4a:f4:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:88:30:7B:FF:D1:4F:3F:0A:85:4C:C8:B2:56:C2:CA:A8:6F:8D
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/bYuIMHv_0U8_CoVMyLJWwsqob40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:07:16:60:ff:2c:86:0c:11:8a:71:0b:77:d2:77:4e:1c:1e:
0f:7f:7b:db:a3:dc:3d:df:9c:d4:a7:22:cb:88:2e:31:19:7d:
17:9e:f7:c5:7f:68:10:64:8e:84:03:73:03:10:7f:f8:77:b4:
b5:d6:89:01:ce:74:fc:ec:31:80:54:8b:63:5c:bc:e1:cf:51:
7a:b8:70:3f:6f:bf:32:ba:ee:08:41:d8:5f:77:e2:e9:1d:ed:
ec:8c:ea:69:47:af:d1:e4:95:0a:16:e3:66:fd:23:73:69:d1:
f6:37:a7:7e:91:54:10:a4:d6:f8:d1:e2:e6:1a:82:c6:0c:15:
58:39:13:d7:d5:73:b4:77:33:8c:20:17:16:35:5d:10:0a:2f:
0e:da:60:6c:f0:17:ef:8f:f5:15:40:26:2b:8e:ff:64:8f:88:
e9:a3:21:09:24:7d:d5:34:52:4d:ff:7d:e5:c3:3c:0b:5e:54:
7e:e9:6c:4e:09:e0:d2:30:d3:f7:6a:3a:a5:06:38:b0:80:4e:
af:20:23:90:b9:f9:d0:e0:28:43:ea:46:eb:c0:a7:72:e6:a9:
01:54:c4:16:0b:ff:62:b1:54:26:59:f3:98:a7:0f:0a:95:1b:
e0:b1:6b:df:44:2c:d2:37:14:7d:17:ed:72:91:2f:c9:02:86:
c7:8d:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:14 2025 by rpki-client