Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/BolPvfIvEm7V-_bqoRy_56TpA-U.roa
File: BolPvfIvEm7V-_bqoRy_56TpA-U.roa (raw, json)
Hash identifier: 5zctRKgZHd5yIzv9795K836CBMfgRzJv9C3kGuH7+zM=
Subject key identifier: 06:89:4F:BD:F2:2F:12:6E:D5:FB:F6:EA:A1:1C:BF:E7:A4:E9:03:E5
Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial: D8A9
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/BolPvfIvEm7V-_bqoRy_56TpA-U.roa
Signing time: Tue 26 Apr 2022 15:22:21 +0000
ROA not before: Tue 26 Apr 2022 15:22:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200987
IP address blocks: 195.189.148.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55465 (0xd8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
Validity
Not Before: Apr 26 15:22:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06894fbdf22f126ed5fbf6eaa11cbfe7a4e903e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:a7:a7:78:2f:fb:5a:08:ca:40:6b:fd:c5:
a1:3c:26:63:94:db:6d:38:25:3a:4b:e2:ef:33:cb:
83:9e:77:9f:c0:0c:fc:a7:33:5b:d5:bb:5f:f4:6c:
d6:f2:2b:4c:33:3d:34:35:9c:35:42:cf:a1:19:73:
ad:f8:e2:1d:17:ee:6a:40:78:04:89:14:0b:ee:75:
03:f7:e8:41:e0:38:f0:02:43:4d:d5:2b:44:0b:fd:
01:79:cc:7e:1e:1a:f8:b3:b8:dc:7a:ee:a9:45:87:
9a:66:f6:0c:a4:ff:0f:38:a8:67:5d:19:7d:42:56:
ac:ee:62:a4:d8:51:0f:b9:7b:a3:10:35:4b:4a:13:
e9:1f:2d:7e:aa:b9:a9:ea:77:a4:11:7f:81:04:f2:
19:cd:07:71:1e:6c:bf:73:cc:2b:9f:fc:91:f7:e5:
90:22:7a:bc:41:d2:55:98:1e:2b:34:dd:77:2c:bd:
5e:b0:31:66:57:bc:b2:39:6c:d8:2d:af:33:81:63:
36:b8:53:01:9b:4f:50:91:00:e8:fa:fb:f5:89:01:
33:d4:f0:77:da:a2:93:cd:9d:c3:78:34:59:94:f5:
42:f8:e1:eb:c1:f8:46:a4:08:5e:8b:2f:94:f7:b8:
83:ae:5a:02:64:89:2c:e8:9b:96:6f:69:e0:a9:14:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:4F:BD:F2:2F:12:6E:D5:FB:F6:EA:A1:1C:BF:E7:A4:E9:03:E5
X509v3 Authority Key Identifier:
keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/BolPvfIvEm7V-_bqoRy_56TpA-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.148.0/23
Signature Algorithm: sha256WithRSAEncryption
22:d5:b6:6e:26:9e:7e:b1:09:38:07:b4:b0:7d:8f:38:f6:5f:
56:92:7b:0b:88:2d:93:4d:df:24:42:78:72:d4:39:1a:a3:e0:
e9:c7:8e:07:ea:5d:f4:4c:01:05:9c:9a:e3:95:52:c9:50:0d:
b7:94:5b:ab:c8:c2:da:1b:4e:39:26:e7:a2:a5:f6:c8:d8:39:
f1:6d:40:40:20:f4:ba:4d:8a:ec:c4:36:05:95:49:ea:ba:9a:
fa:ad:c2:eb:b9:e5:53:8c:f0:de:9b:e6:2f:ba:c6:47:30:5f:
3a:4c:bd:3b:04:37:d0:0a:a9:7f:d4:e4:f1:62:a2:5b:bf:30:
ab:60:45:5d:84:69:35:b5:46:03:48:95:11:ee:9c:57:a1:58:
a8:bf:48:a2:6c:d3:6e:f7:01:31:fd:2b:3f:c8:11:44:c6:cd:
42:02:72:51:49:d5:d7:c8:72:2e:76:5f:61:0f:e9:7f:5c:d6:
7d:10:75:b6:aa:c5:1c:de:b9:7c:66:8b:64:75:54:85:89:48:
59:f1:b5:20:c8:91:c2:38:65:6c:1d:8b:c0:28:91:ac:51:bc:
11:20:d0:aa:ec:af:bf:c6:9a:7a:12:1d:e1:52:71:6e:af:80:
a6:1e:b0:2f:b1:0f:6a:ea:c0:5d:f6:7a:27:72:db:7c:f9:84:
c4:14:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:38 2024 by rpki-client on console-fra.rpki-client.org