Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/bpCzVDWy-WWwdHngicR_hjYXmsg.roa
File: bpCzVDWy-WWwdHngicR_hjYXmsg.roa (raw, json)
Hash identifier: V8V5a2zBf2K/V2nr2zPyawqmWCAw6Kxl6HBWxDXybgo=
Subject key identifier: 6E:90:B3:54:35:B2:F9:65:B0:74:79:E0:89:C4:7F:86:36:17:9A:C8
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 0BF53418
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/bpCzVDWy-WWwdHngicR_hjYXmsg.roa
Signing time: Thu 05 May 2022 15:42:46 +0000
ROA not before: Thu 05 May 2022 15:42:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33927
IP address blocks: 185.93.186.0/24 maxlen: 24
194.6.232.0/23 maxlen: 23
194.6.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200619032 (0xbf53418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: May 5 15:42:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e90b35435b2f965b07479e089c47f8636179ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:99:f7:d3:f5:45:18:d5:2f:ef:79:cf:7c:
d0:f8:09:70:8a:42:69:70:9a:34:91:8d:fd:46:a7:
83:7d:2e:d8:03:c9:37:f9:3e:61:cc:7f:ee:a6:07:
2e:b8:ef:d4:7a:0c:7d:10:18:78:f1:80:55:0e:e2:
52:cd:ca:02:c8:90:d5:8f:5b:c9:21:cf:c3:7b:4b:
be:74:c9:b4:3a:c0:ff:d8:a7:62:10:21:0c:ac:69:
8e:9c:1a:4f:96:96:0e:20:20:fe:78:e5:ad:ac:a9:
fb:ab:66:22:e2:14:ee:74:0f:9c:23:f7:27:16:a6:
56:08:10:08:17:b1:25:b2:8b:76:37:9a:a8:dc:24:
c2:2b:94:aa:34:c9:67:20:85:ca:0d:55:0e:60:54:
f6:54:0f:05:03:b8:74:21:3d:66:36:7d:dc:e5:5e:
14:94:82:57:19:69:fe:bd:fe:ec:ec:10:c9:e5:7b:
9c:9e:3f:1d:06:6f:86:72:63:b3:27:ef:cf:7f:04:
dd:72:40:aa:80:35:25:15:90:74:66:f9:bd:52:9c:
94:be:db:a3:39:59:72:0b:44:1d:72:aa:0a:17:29:
cc:0f:8c:35:d9:3d:36:ed:05:e8:34:04:7f:d9:42:
92:34:3b:19:ad:d1:c4:dc:ab:1d:2e:98:58:7b:83:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:B3:54:35:B2:F9:65:B0:74:79:E0:89:C4:7F:86:36:17:9A:C8
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/bpCzVDWy-WWwdHngicR_hjYXmsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.186.0/24
194.6.231.0-194.6.233.255
Signature Algorithm: sha256WithRSAEncryption
6b:fb:03:ab:de:ba:99:e8:d6:21:4a:52:24:0f:d3:17:05:ff:
cd:b4:f1:53:5b:56:9d:6d:02:81:99:44:d0:64:77:f0:c7:9d:
fa:d0:01:d2:87:5b:67:7d:ee:cd:4b:ad:52:06:9a:33:eb:57:
ec:67:2e:ac:d7:96:42:80:c3:34:a8:b5:83:b2:cc:e8:de:af:
87:74:06:de:51:59:b3:3c:8c:4b:93:9d:e8:13:48:eb:95:5b:
7c:9a:e5:50:e6:1c:2d:6a:f0:88:ee:8c:6f:ca:1c:c5:75:b4:
22:79:56:ef:2f:d5:cd:d1:73:4e:86:4e:ed:d9:9d:cd:5c:3b:
a1:d8:fe:1f:df:13:ca:33:bd:ff:1e:c1:0e:ec:cd:c0:67:f6:
2b:3e:5b:d6:11:9d:b3:4c:c1:5d:05:32:42:e4:4a:73:b7:7d:
7e:84:0f:27:88:a8:fb:80:ce:4e:3a:01:1b:e9:86:6d:5d:24:
0a:39:ff:fe:89:63:32:d7:5e:e1:b2:9e:a1:ed:7b:4d:fe:fb:
96:38:fa:ac:c3:bc:32:e4:0c:16:1e:22:e4:be:f2:f3:4e:18:
64:21:58:48:dd:28:8e:dd:cb:09:a9:54:d6:fa:e7:be:69:96:
c1:a5:6b:85:10:95:56:a2:47:18:40:86:c3:23:30:a7:cd:40:
4a:0d:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:42 2024 by rpki-client on console-fra.rpki-client.org