Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/bfv8e6Jacp-ue8mfsyObooQ1btw.roa
File: bfv8e6Jacp-ue8mfsyObooQ1btw.roa (raw, json)
Hash identifier: xXDStdfkhlEOpjs3YMvlnf5Pie3SsYP1ykAFiEwhalo=
Subject key identifier: 6D:FB:FC:7B:A2:5A:72:9F:AE:7B:C9:9F:B3:23:9B:A2:84:35:6E:DC
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0189AB6BDBB9FD8672B79AA991D40345703C
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/bfv8e6Jacp-ue8mfsyObooQ1btw.roa
Signing time: Mon 31 Jul 2023 10:08:39 +0000
ROA not before: Mon 31 Jul 2023 10:08:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 194.64.164.0/22 maxlen: 22
194.64.168.0/22 maxlen: 22
194.233.40.0/22 maxlen: 22
194.195.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:6b:db:b9:fd:86:72:b7:9a:a9:91:d4:03:45:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 31 10:08:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dfbfc7ba25a729fae7bc99fb3239ba284356edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:63:8a:a5:83:a7:e3:53:06:06:e1:b9:e7:
84:3e:24:be:30:d7:57:af:3a:28:a8:bf:1d:86:83:
a2:b4:54:b8:53:4e:cf:4d:da:5d:bf:0e:cf:ee:3e:
fd:e5:d0:f8:e6:1d:6c:29:f7:37:26:e1:35:69:5a:
37:91:37:fc:43:de:6c:16:4a:f2:5d:aa:ac:3b:6d:
48:3b:f3:97:0b:9c:2f:0e:c1:ef:fe:10:f5:29:73:
26:5c:2f:36:8b:90:6f:36:3a:aa:6e:00:2d:34:74:
65:9b:a8:07:74:9a:e1:6e:01:da:ab:85:8f:bd:ca:
be:77:c2:86:8f:17:75:05:7c:a9:33:24:bc:a3:24:
18:2c:76:ff:b3:aa:d1:66:3f:f2:36:8c:fb:a3:04:
1b:0a:12:aa:84:10:aa:c9:4e:32:13:39:f8:0d:97:
cc:fb:42:21:ac:34:1e:43:9c:d3:64:f2:27:ee:28:
b8:20:9a:15:18:0c:f9:4c:05:ae:5a:82:71:5e:5e:
45:8b:63:f2:75:1d:a0:48:4e:96:a9:94:f2:94:57:
c0:8c:fe:55:cd:b1:07:99:0f:ec:e1:ee:90:57:6d:
e6:33:0a:1a:28:8a:be:a9:63:0d:a4:9d:b0:85:08:
6c:ab:1c:52:8e:8b:ef:8b:95:a0:42:9f:2e:24:fc:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:FC:7B:A2:5A:72:9F:AE:7B:C9:9F:B3:23:9B:A2:84:35:6E:DC
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/bfv8e6Jacp-ue8mfsyObooQ1btw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.164.0-194.64.171.255
194.195.204.0/22
194.233.40.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:4b:d8:1d:5d:76:69:2f:e4:0f:c5:94:4e:ab:7a:b4:96:66:
a7:75:94:84:bb:30:d8:da:61:d6:ad:fc:c8:40:ff:9f:87:e8:
0b:be:18:69:9e:f4:69:cd:c7:9e:b6:db:9a:b4:b1:93:6f:fd:
cb:b9:85:f4:72:73:08:e1:b8:61:08:70:5c:64:b0:aa:4b:63:
d0:27:0d:6c:fe:a8:9b:4a:9a:b2:6b:68:9b:5d:d3:be:8c:aa:
19:a8:a8:df:a7:d8:3a:60:59:c7:8c:6f:4f:6d:82:0a:eb:1d:
54:8c:da:88:dd:98:18:05:6a:0d:24:35:21:ca:c3:0d:31:84:
58:5d:94:58:84:2b:56:24:47:24:d9:e9:32:0e:42:36:35:1e:
76:31:e1:cb:2e:1a:98:94:eb:8f:8d:56:0c:46:7b:c9:f4:1b:
cf:73:10:14:49:13:82:c0:55:0a:6c:9f:6c:17:b9:26:11:ec:
fb:d3:fc:50:a5:9f:34:83:12:40:62:07:7e:b4:08:c7:3d:e6:
e7:b7:56:92:0c:88:6c:e3:5f:02:59:bb:16:28:0f:b3:0a:e6:
31:8f:e2:ea:6e:6c:a9:cc:bc:c1:ad:e0:ce:5c:b1:de:46:2d:
f9:4b:71:56:aa:73:e8:be:11:d9:f8:a1:19:74:16:74:85:aa:
88:99:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:46 2025 by rpki-client