Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/bH7xoGdjaLjsajQtrrAIz4nhXOU.roa
File: bH7xoGdjaLjsajQtrrAIz4nhXOU.roa (raw, json)
Hash identifier: IOpRqgv66GywhhVLle2nLzyVs3LQuBVhF3xqSDtTJc0=
Subject key identifier: 6C:7E:F1:A0:67:63:68:B8:EC:6A:34:2D:AE:B0:08:CF:89:E1:5C:E5
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19F1B2F0
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/bH7xoGdjaLjsajQtrrAIz4nhXOU.roa
Signing time: Sat 01 Jan 2022 15:56:56 +0000
ROA not before: Sat 01 Jan 2022 15:56:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212042
IP address blocks: 45.87.29.0/24 maxlen: 24
45.150.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435270384 (0x19f1b2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c7ef1a0676368b8ec6a342daeb008cf89e15ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:a2:b7:f0:d7:a2:24:1c:09:a6:09:38:99:
97:a2:92:0a:b8:ca:2b:66:48:f4:64:9e:ba:e8:a8:
63:96:0f:37:42:f1:08:74:9d:80:ad:7b:b0:b5:f9:
73:f5:d0:15:af:c2:99:49:45:c7:64:3b:d6:a1:e3:
77:2c:c5:05:23:5b:e4:02:56:73:11:d1:51:87:06:
e7:f7:1f:7d:6a:fb:bd:f9:61:b8:f3:90:14:d5:0c:
70:60:39:79:76:ce:7d:70:83:d7:be:e8:40:2d:f6:
44:73:73:88:1b:9a:c8:d5:b7:67:43:8c:ec:fa:91:
21:54:77:d1:cd:4f:68:58:5d:54:69:8d:e3:96:82:
aa:20:89:84:da:19:9e:fe:8c:88:c6:3e:da:8b:a2:
22:9e:48:68:64:51:97:fa:af:f1:f7:a4:61:51:5b:
6b:7c:22:b7:be:74:39:47:90:82:97:5b:59:8b:77:
4b:80:08:37:c9:42:52:18:47:1b:e6:e0:ef:df:04:
6f:71:6f:4c:5b:dc:75:b4:9e:ce:9c:50:52:c4:96:
10:37:0a:c9:5c:21:88:b0:9d:85:49:3e:e5:77:5a:
c8:a9:d6:86:f1:61:47:b2:8a:a8:0f:ac:1a:27:16:
fb:d8:8a:7e:84:0f:c5:92:26:35:bf:84:36:e4:a2:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7E:F1:A0:67:63:68:B8:EC:6A:34:2D:AE:B0:08:CF:89:E1:5C:E5
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/bH7xoGdjaLjsajQtrrAIz4nhXOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.29.0/24
45.150.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:5e:1e:7b:1e:12:b0:94:62:c5:8c:1c:15:ba:4f:a2:fe:eb:
67:dc:d3:2e:36:b8:e3:b1:e3:a0:4e:aa:de:b1:55:6c:b3:7c:
d7:e5:fd:9b:45:9c:71:4a:fb:59:80:4d:cf:c4:bf:15:46:0d:
2b:51:65:00:47:98:35:56:57:6c:13:98:29:4f:b9:14:fc:ab:
00:1f:d5:98:de:7a:ff:4a:32:59:a9:c1:57:e0:da:0b:d4:76:
27:8f:56:07:72:a6:16:39:08:b5:b4:98:36:94:56:59:09:99:
5c:5d:c8:96:48:51:e2:cd:0d:56:37:5a:ad:e5:74:12:d2:7a:
a8:99:6c:e3:e7:9c:db:a7:52:a6:88:ad:cb:c8:d5:5f:71:99:
cd:e3:49:67:27:34:c3:6c:58:46:49:17:e9:e9:d4:5d:4c:9f:
bb:f9:f0:65:8e:9d:88:52:46:cf:b3:1b:1b:e4:ac:1b:f6:2e:
13:21:4e:7d:a8:b3:85:27:4d:b3:49:4e:d9:7e:12:ea:81:a5:
da:eb:ac:81:e0:e9:cb:a3:40:35:8c:7d:db:c0:eb:db:6a:fb:
93:0d:d5:04:c9:5c:81:d9:99:91:06:26:8d:59:88:6f:0f:7e:
81:40:88:3b:78:82:68:b4:3b:50:b1:bf:ad:0e:44:5c:33:62:
ed:1c:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org