Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/e9bz_Ftg7C4R_nnOeQqpXHQS30o.roa
File: e9bz_Ftg7C4R_nnOeQqpXHQS30o.roa (raw, json)
Hash identifier: +oOgEAv14B14N02cv9Va0/jzGkrGehVzXLmLKKT3t/E=
Subject key identifier: 7B:D6:F3:FC:5B:60:EC:2E:11:FE:79:CE:79:0A:A9:5C:74:12:DF:4A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 0184BE8B25616FDD22A66E600727CD56EB41
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/e9bz_Ftg7C4R_nnOeQqpXHQS30o.roa
Signing time: Mon 28 Nov 2022 14:01:40 +0000
ROA not before: Mon 28 Nov 2022 14:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201457
IP address blocks: 185.74.204.0/22 maxlen: 24
2a03:4760::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:8b:25:61:6f:dd:22:a6:6e:60:07:27:cd:56:eb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Nov 28 14:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd6f3fc5b60ec2e11fe79ce790aa95c7412df4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:ce:8c:f7:cb:51:a7:cc:53:00:ec:7e:98:
3a:1e:fc:86:64:50:3b:48:2a:9d:98:d1:22:93:c5:
43:5f:a5:b4:1c:9e:fd:10:c9:fd:8e:2f:e1:c4:a5:
6e:88:54:a5:cd:f0:b8:c6:b9:88:83:27:e3:d0:79:
09:e0:5c:60:09:cd:54:67:9b:5a:a8:4f:fa:ce:50:
f7:42:42:82:38:f4:23:64:68:67:23:41:e8:91:5e:
fc:7e:0c:af:92:ec:87:5e:26:1d:50:75:d8:da:67:
83:65:d9:f9:e7:29:2a:2f:05:29:1b:04:59:9b:82:
b4:07:9f:fd:67:80:32:99:11:e5:41:1b:5e:f1:11:
82:f9:47:fa:a8:00:15:d1:49:1b:b7:5f:9f:89:02:
9f:29:07:46:36:16:b7:1b:9e:88:4a:da:55:ef:1c:
80:ba:90:cf:dc:80:bd:1b:9e:af:3e:77:a6:b7:cc:
f1:90:9b:32:19:bd:6d:7c:cc:a6:4f:0f:8c:96:9e:
02:a9:6b:7c:84:22:8e:89:e5:bf:19:6a:ba:70:89:
6c:c5:d3:ae:40:d7:48:4f:82:a2:ab:12:09:b6:33:
f1:61:33:f1:77:bf:a4:ef:5a:f4:f5:5a:1f:bb:f8:
e9:74:2d:4e:68:ae:69:57:d3:8d:05:ce:9a:b6:40:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:F3:FC:5B:60:EC:2E:11:FE:79:CE:79:0A:A9:5C:74:12:DF:4A
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/e9bz_Ftg7C4R_nnOeQqpXHQS30o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.204.0/22
IPv6:
2a03:4760::/29
Signature Algorithm: sha256WithRSAEncryption
43:42:35:d5:a1:56:ee:a1:d7:36:e8:e0:ed:87:06:69:2e:7a:
b9:80:f7:3f:fe:7d:dc:ca:3d:c8:f0:c6:32:09:7f:3a:c7:25:
78:ee:b5:0e:f6:2c:be:ff:78:b7:81:bf:76:42:bf:00:21:cb:
87:66:31:ba:bc:3e:51:52:83:6f:81:9e:a6:4d:6d:1b:ee:21:
d4:f9:6c:80:da:0b:b4:74:97:1c:d5:25:bd:04:48:e4:07:b5:
c2:4c:b9:5b:ff:57:13:3b:0a:7c:b6:55:80:78:d0:a9:52:0e:
29:11:35:bd:3c:3c:6e:16:2f:a9:33:3d:41:b9:c7:af:16:ce:
ac:fb:c8:91:02:f1:ac:e5:8e:26:12:39:ce:d6:be:65:69:bb:
a8:23:4e:1f:60:7d:22:b4:f8:bf:d3:0e:27:9a:22:c0:ef:00:
49:1d:9a:26:b6:f1:9d:e1:fb:8c:57:e1:3a:dc:7b:a2:14:2f:
5c:45:25:e3:12:0b:b5:22:61:a3:f4:e9:be:1b:86:3b:d8:63:
af:d0:d9:0f:12:0e:6d:64:9f:f9:8c:ee:2a:30:3c:32:44:60:
27:2f:22:3c:04:87:d1:c0:22:62:21:f2:4d:0e:99:18:4b:21:
a3:e9:77:f6:76:65:02:b6:82:ba:ce:5c:d3:42:c5:12:70:93:
91:bd:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:11 2024 by rpki-client on console-fra.rpki-client.org