Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/bvRYrDP8T64ZrEg6wCFtoK6um4M.roa
File: bvRYrDP8T64ZrEg6wCFtoK6um4M.roa (raw, json)
Hash identifier: Iv1ln4UIonPnGUECxn2N4QZfnM2NZvpfRoEfukBN8mg=
Subject key identifier: 6E:F4:58:AC:33:FC:4F:AE:19:AC:48:3A:C0:21:6D:A0:AE:AE:9B:83
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F7FD5B7
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/bvRYrDP8T64ZrEg6wCFtoK6um4M.roa
Signing time: Sat 01 Jan 2022 08:05:02 +0000
ROA not before: Sat 01 Jan 2022 08:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49505
IP address blocks: 195.208.52.0/22 maxlen: 24
212.192.195.0/24 maxlen: 24
212.192.196.0/22 maxlen: 24
195.19.2.0/24 maxlen: 24
195.19.0.0/23 maxlen: 24
193.232.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260036023 (0xf7fd5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ef458ac33fc4fae19ac483ac0216da0aeae9b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:9c:74:c8:ff:fd:82:4d:b0:4a:f1:de:05:
48:b3:cc:19:7f:de:18:14:f9:b5:ca:18:7b:4d:44:
6e:33:90:a4:be:ca:21:12:9c:37:d1:fd:71:2c:a8:
00:94:24:1c:58:b6:6e:d8:f4:db:1c:a5:b5:d1:fb:
79:2d:a9:36:b3:10:8d:5a:0a:af:7f:c0:57:6e:c8:
49:1e:41:2b:d1:f1:e9:0f:a7:83:78:23:b2:a5:41:
0c:0e:63:ac:b4:2b:bc:f4:1f:32:2d:2c:bc:8a:52:
4f:a5:be:89:ad:54:4e:aa:d7:1d:18:80:f6:6d:f7:
bc:1e:b9:8b:23:75:32:c9:ae:5f:f9:02:dd:96:02:
90:6c:30:93:82:30:5a:4d:a9:c5:ff:88:aa:ff:71:
26:b3:21:a1:c8:83:97:d5:b8:b9:fb:ca:47:89:41:
a2:fc:77:b9:d3:8b:31:dc:cd:44:dc:9c:5f:64:6a:
68:e7:6f:f0:a4:af:84:b5:54:0a:85:63:22:e4:77:
11:20:dc:70:0a:1a:16:5f:f5:94:2c:24:ca:6d:48:
eb:d5:de:5a:68:8a:43:53:cb:15:c1:a5:10:72:62:
26:05:a9:48:c4:e4:54:4a:62:9b:1f:c7:74:f7:91:
00:cc:a5:9a:3b:f6:81:76:7d:a6:ab:80:25:5e:e0:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:58:AC:33:FC:4F:AE:19:AC:48:3A:C0:21:6D:A0:AE:AE:9B:83
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/bvRYrDP8T64ZrEg6wCFtoK6um4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.40.0/22
195.19.0.0-195.19.2.255
195.208.52.0/22
212.192.195.0-212.192.199.255
Signature Algorithm: sha256WithRSAEncryption
64:aa:c0:0e:b7:a7:28:a5:fa:64:d7:bd:43:98:0e:71:21:fb:
87:03:a7:f7:2f:ad:6a:a7:5e:e1:34:46:ac:1c:4d:8f:4c:bd:
44:06:16:30:cf:c5:8c:3d:14:cc:91:d6:d1:63:10:1d:fc:b4:
6a:c3:44:d8:5b:44:33:a7:d8:d5:12:55:84:ce:c3:65:da:73:
9b:85:37:cf:25:b5:3b:9d:7e:fe:91:54:3e:5f:e2:da:e5:46:
25:84:05:cc:5e:a5:fd:21:f7:ac:52:a3:75:c6:a6:a0:1c:dc:
b7:0c:3f:59:1b:cf:5a:28:f0:57:76:74:1a:4f:89:71:1f:49:
ca:8e:7d:e2:b8:2b:c3:b1:62:bf:aa:e9:fb:ef:e3:25:50:4b:
44:43:70:37:31:0b:4e:1c:1b:c1:a3:35:71:8b:db:eb:da:8b:
a0:e8:40:ad:ef:61:21:aa:d3:21:71:a9:7c:21:a5:37:2d:ad:
74:2e:7e:2e:5d:d6:7f:e0:3b:5e:d9:db:45:2f:07:f5:a0:cb:
d5:f4:ea:5a:18:11:52:0a:c8:c1:a9:14:bc:09:b2:a5:8d:4c:
9f:0c:79:25:d9:9f:bf:b8:5e:ab:00:4f:94:0e:12:0b:cb:74:
0b:3d:b9:e2:9f:c5:1f:0e:3f:f9:63:bd:bf:3d:89:f5:99:5a:
03:6a:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org