Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/BJJA_14HnLMj0_jpvtLAnFTuIM0.roa
File: BJJA_14HnLMj0_jpvtLAnFTuIM0.roa (raw, json)
Hash identifier: Ujg72KtvRNfcRw8UeHg9j9U6Df5OvxP7WXs9NdHCZoc=
Subject key identifier: 04:92:40:FF:5E:07:9C:B3:23:D3:F8:E9:BE:D2:C0:9C:54:EE:20:CD
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 2033ED43
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/BJJA_14HnLMj0_jpvtLAnFTuIM0.roa
Signing time: Sat 01 Jan 2022 15:06:53 +0000
ROA not before: Sat 01 Jan 2022 15:06:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 193.103.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540273987 (0x2033ed43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 1 15:06:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=049240ff5e079cb323d3f8e9bed2c09c54ee20cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:a5:3b:ab:80:0e:bb:1f:30:1c:29:14:4f:
4b:ff:4c:1a:a7:24:e8:03:4a:e9:78:6c:b1:7f:3a:
57:ee:9c:45:42:77:d8:f3:9b:c6:0c:00:d8:e4:fc:
5d:ff:1d:58:34:c7:b8:39:c9:d6:88:82:9d:6a:45:
40:a1:1b:f7:6d:86:51:87:92:61:db:8f:2f:39:58:
c2:5f:0e:c8:02:fb:79:26:37:a4:f4:4c:85:c4:e9:
53:91:b7:38:7a:ea:3d:a0:bd:e4:36:10:60:3d:53:
ed:31:e4:ce:04:17:4a:0e:4c:c7:7d:36:b7:27:08:
d9:f8:61:40:cb:99:ed:7b:32:46:75:50:02:cb:54:
e6:62:b3:96:5f:6f:dc:17:51:c5:da:b4:f4:00:6b:
51:19:d9:f8:61:e9:be:19:61:95:0c:0a:4d:fc:e4:
86:72:8f:13:6e:d0:1a:96:f4:af:97:14:f7:93:bf:
24:9e:3b:4c:48:cf:d0:66:00:60:92:2f:96:d5:29:
f1:b5:bf:37:68:ea:fa:94:c8:06:f9:11:e3:31:65:
fc:32:47:13:c0:2c:f2:10:ed:47:d6:2d:f4:12:91:
c7:f5:0c:c7:23:28:16:61:15:1b:d0:78:e6:87:cc:
69:5a:9a:08:50:90:fa:bf:6e:c2:69:49:9f:f3:65:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:92:40:FF:5E:07:9C:B3:23:D3:F8:E9:BE:D2:C0:9C:54:EE:20:CD
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/BJJA_14HnLMj0_jpvtLAnFTuIM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.193.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d9:e1:4d:dd:e4:c3:a4:50:13:30:47:73:3d:c0:8b:5a:45:
5d:d9:b3:27:37:65:f9:eb:2a:90:db:2e:07:24:76:27:89:31:
71:00:df:7b:84:97:1a:73:0b:4e:1e:ed:76:75:5c:67:11:87:
75:b5:c5:e2:e5:10:72:4c:da:ea:0a:f8:fa:70:a7:72:47:93:
ad:b1:93:9a:f7:f0:c5:c8:28:23:b6:0d:98:2b:9b:10:80:13:
88:0d:49:dc:d0:d9:b5:ea:01:c5:41:61:a5:6d:79:bd:04:92:
18:c5:92:7a:8c:31:a2:19:24:1c:ad:1e:fd:92:00:3e:ae:9a:
7f:cf:4e:bd:40:8b:37:a1:61:ca:4c:2a:e8:ab:5f:2b:da:78:
f0:98:86:b3:34:c7:ee:e9:62:f4:d7:fe:1c:6c:3b:60:a2:57:
62:c0:20:eb:97:95:dc:ac:f2:d0:11:a7:dc:a8:4d:2d:a0:bd:
0c:97:de:34:6a:06:29:6e:6a:90:f2:2f:4a:3c:fb:34:36:70:
90:8e:12:5c:63:af:d8:16:02:52:af:e1:b3:e1:6e:56:84:b1:
dd:90:4b:0a:22:43:58:3b:28:2c:6a:5c:68:f5:ef:82:3b:77:
29:d3:f5:14:2b:16:38:84:5c:11:79:af:74:8a:f7:bf:b2:b6:
e1:1a:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org