Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/BYfp6ecuj-UqfSnEovQAGvfvyp8.roa
File: BYfp6ecuj-UqfSnEovQAGvfvyp8.roa (raw, json)
Hash identifier: vM5gPCbe9XrD3HA7Eo0OhOymV9DjWnQFhAVlqrryf/Y=
Subject key identifier: 05:87:E9:E9:E7:2E:8F:E5:2A:7D:29:C4:A2:F4:00:1A:F7:EF:CA:9F
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 07C77474
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/BYfp6ecuj-UqfSnEovQAGvfvyp8.roa
Signing time: Wed 12 Jan 2022 13:30:22 +0000
ROA not before: Wed 12 Jan 2022 13:30:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.15.21.0/24 maxlen: 24
194.53.136.0/24 maxlen: 24
194.53.137.0/24 maxlen: 24
2a0e:1d80:12::/48 maxlen: 48
2a0e:1d80:10::/48 maxlen: 48
2a0e:1d80:8::/48 maxlen: 48
2a0e:1d80:13::/48 maxlen: 48
2a0e:1d80:6::/48 maxlen: 48
2a0e:1d80:9::/48 maxlen: 48
2a0e:1d80:11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130511988 (0x7c77474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jan 12 13:30:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0587e9e9e72e8fe52a7d29c4a2f4001af7efca9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:39:76:7a:e7:d4:9d:53:96:50:c1:9e:56:
2f:75:04:9a:54:bc:c5:ee:69:d4:f7:23:8a:48:08:
f3:65:23:fb:d1:f7:14:ff:37:53:d9:3e:d6:a6:82:
ac:b8:b2:64:22:6c:1d:33:80:94:23:d4:c3:d6:75:
5d:c7:1c:91:45:14:99:38:ff:18:be:9e:df:1f:50:
d2:77:b7:35:6f:50:28:d2:45:59:13:ec:80:90:7b:
37:b1:43:5b:fb:fc:56:6c:bc:94:6e:79:06:65:3e:
fd:92:d0:ef:14:57:93:57:e9:13:31:06:27:0f:a5:
1d:aa:fb:d2:eb:f2:0a:82:71:b2:06:53:c8:d4:e1:
2f:f4:35:7a:06:36:bf:0d:fb:29:9c:cf:ed:c1:01:
ab:b1:0a:2f:b8:d0:d4:05:dc:31:65:50:32:8e:fe:
58:29:dc:7f:5b:40:ef:8d:a9:44:67:99:d9:59:49:
f7:d7:34:91:55:4c:c9:10:3d:0f:32:c5:97:cb:e2:
83:0f:80:ab:90:d8:60:24:1b:10:65:6d:48:84:c3:
7b:d3:6c:4c:e0:6a:51:1c:a5:98:6e:c9:e5:e9:93:
66:74:af:a7:c7:2f:0e:37:fe:55:cc:73:a7:e0:ae:
a2:bf:3d:c0:e0:13:75:48:78:d9:c5:cd:f0:8c:9d:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:87:E9:E9:E7:2E:8F:E5:2A:7D:29:C4:A2:F4:00:1A:F7:EF:CA:9F
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/BYfp6ecuj-UqfSnEovQAGvfvyp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.21.0/24
194.53.136.0/23
IPv6:
2a0e:1d80:6::/48
2a0e:1d80:8::/47
2a0e:1d80:10::/46
Signature Algorithm: sha256WithRSAEncryption
88:c7:5e:69:33:a8:67:5d:f9:de:99:40:98:f2:ba:16:f0:9b:
35:11:49:64:85:f4:6e:8d:fe:14:a7:7c:c5:48:cb:a7:1f:3d:
27:e4:37:4f:68:ed:88:c1:26:40:1b:6b:0b:1c:3f:18:c3:4b:
38:6f:3e:7e:ac:bf:8b:57:50:8c:5b:90:2b:a6:f3:31:85:0e:
e2:cb:07:61:74:f6:57:08:1e:06:3b:5f:9b:c6:ff:6d:93:9d:
36:07:b5:e2:be:d7:60:6a:ca:05:ed:6c:27:23:de:94:6e:99:
bc:1e:28:a1:14:98:8e:d7:9a:67:06:35:b3:50:08:fa:31:4e:
69:b3:83:e5:98:32:2c:86:93:c0:9f:48:2b:a7:f8:9b:db:ae:
dc:6b:79:b1:44:c4:4a:f9:f0:64:ee:02:2d:5b:5e:cf:76:52:
73:c6:fe:8f:85:44:04:d1:fb:52:da:90:db:7a:dc:3d:8d:16:
ca:28:b8:be:a1:a3:68:fa:2d:84:90:b7:b4:bb:8e:16:49:cf:
8b:5f:94:ca:77:60:58:22:f6:f2:9e:26:b7:f5:6e:54:7d:4b:
a2:76:ef:4e:93:f3:a2:fa:8f:f3:1d:1e:72:03:97:04:a7:ff:
38:2d:49:e0:d5:80:0a:35:d9:27:d3:5b:fa:10:87:33:82:a2:
a2:5c:7c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:24 2024 by rpki-client on console-ams.rpki-client.org