Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/BGqXa0ImyijAP3-VfXlQkO_bC5E.roa
File: BGqXa0ImyijAP3-VfXlQkO_bC5E.roa (raw, json)
Hash identifier: NFkDKkxRjpqWjaQy76SlleYvoiRN5eHa9DsIUyzPg5g=
Subject key identifier: 04:6A:97:6B:42:26:CA:28:C0:3F:7F:95:7D:79:50:90:EF:DB:0B:91
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 163DA8EA
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/BGqXa0ImyijAP3-VfXlQkO_bC5E.roa
Signing time: Sat 01 Jan 2022 00:55:38 +0000
ROA not before: Sat 01 Jan 2022 00:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34049
IP address blocks: 77.240.182.0/24 maxlen: 24
77.240.181.0/24 maxlen: 24
81.19.12.0/23 maxlen: 23
81.19.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373139690 (0x163da8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jan 1 00:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=046a976b4226ca28c03f7f957d795090efdb0b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:a8:4d:14:01:94:2d:16:5e:1d:a7:ec:aa:
1f:98:b6:75:d1:89:1b:2c:7c:a8:7e:75:07:c7:aa:
66:c5:b4:a1:f9:f2:da:2c:4c:01:f2:f6:eb:41:da:
89:84:28:88:90:c2:3f:9b:85:cf:54:fc:2f:8e:62:
04:22:fb:96:91:dd:a5:5c:21:ed:61:f2:6b:6f:f2:
28:db:99:93:8f:27:b0:c2:a8:6e:c5:ab:53:0e:64:
75:4a:a6:7a:6e:e7:35:e0:50:99:12:c8:95:0e:94:
45:f1:ff:0e:bc:86:e2:c1:70:b5:21:d1:71:02:4f:
e4:d8:28:8b:b2:9e:cc:3f:1e:4f:b8:a7:26:6f:e8:
b3:44:9c:45:db:fd:da:65:bf:1e:ea:4e:50:27:fe:
7d:7f:3e:d8:93:83:f4:e2:2b:f4:f8:26:8f:3c:ee:
63:b1:24:01:6d:10:e5:03:e3:cf:36:ae:5d:a4:e4:
9b:f7:2e:3c:df:ba:07:09:54:7a:8b:a9:9b:74:07:
ab:92:d8:dd:bf:ca:8f:7f:b0:20:cf:e8:cd:75:c9:
41:44:73:9f:b1:c2:5c:7a:fe:f9:67:37:94:fc:92:
1e:0a:24:b2:7f:26:09:6b:81:6d:76:bb:59:bb:d5:
70:45:cd:cc:e0:9d:41:a5:82:8f:24:09:34:66:91:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6A:97:6B:42:26:CA:28:C0:3F:7F:95:7D:79:50:90:EF:DB:0B:91
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/BGqXa0ImyijAP3-VfXlQkO_bC5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.181.0-77.240.182.255
81.19.12.0-81.19.14.255
Signature Algorithm: sha256WithRSAEncryption
46:60:e4:d6:61:ec:1f:22:27:5e:93:51:1a:a9:89:55:3e:1c:
e5:11:f4:1e:60:ae:41:b2:5b:88:ba:84:99:4b:d4:b4:96:d6:
77:fe:2a:0c:f3:d6:16:92:07:bf:d5:a0:c1:27:3c:5a:e6:51:
10:0b:ef:85:fc:88:e2:19:c2:63:bb:bb:8c:53:3a:df:61:28:
29:80:27:53:4d:21:64:59:2b:f6:2d:a8:d5:ac:ee:58:00:c6:
51:42:36:85:73:77:b8:1c:ae:13:7b:f1:48:0e:6b:05:76:f8:
64:a7:0a:db:85:4c:fc:ec:c9:a1:d1:eb:ca:2d:cb:8d:13:80:
4a:6a:a4:c2:cc:a9:15:a1:0a:13:b5:21:76:0a:99:58:c4:04:
ca:55:4f:3b:92:8f:04:83:91:19:c4:ab:ab:c9:3d:9c:24:8f:
74:c9:2b:75:a2:51:1a:4c:35:c5:bb:37:4e:a2:e9:ff:1b:a7:
62:ac:32:9c:84:f5:87:55:b5:75:e4:c7:0b:5b:4f:b0:7e:ea:
c2:4b:f3:37:d5:be:36:6b:6d:20:2f:f3:9d:f3:af:50:7c:9c:
84:c9:34:d5:74:d1:ec:54:02:00:b4:10:93:8a:2d:2b:3a:22:
68:21:e0:7e:9b:2b:5c:a4:ba:29:12:92:b8:d2:d9:d8:8f:17:
53:c7:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:57 2024 by rpki-client on console-fra.rpki-client.org