Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/bOgJp2-o7pTN6g4FUSrCgata2PY.roa
File: bOgJp2-o7pTN6g4FUSrCgata2PY.roa (raw, json)
Hash identifier: hKbSy/m7H0tH/LkQtRE20lgbbMNmtEdcYPxULVuE3rU=
Subject key identifier: 6C:E8:09:A7:6F:A8:EE:94:CD:EA:0E:05:51:2A:C2:81:AB:5A:D8:F6
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 01828CDDDB7BE446AB5B427AFD1B3CFE77CA
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/bOgJp2-o7pTN6g4FUSrCgata2PY.roa
Signing time: Thu 11 Aug 2022 12:25:26 +0000
ROA not before: Thu 11 Aug 2022 12:25:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19607
IP address blocks: 91.108.160.0/21 maxlen: 21
185.31.152.0/22 maxlen: 22
159.253.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:dd:db:7b:e4:46:ab:5b:42:7a:fd:1b:3c:fe:77:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Aug 11 12:25:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ce809a76fa8ee94cdea0e05512ac281ab5ad8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:06:b3:15:ce:2a:72:29:86:91:1a:0b:44:
4c:77:79:c4:8d:b0:fa:bd:84:e2:1a:90:52:21:9d:
52:f5:f7:5e:97:2a:0f:75:f9:dc:f8:f4:13:f5:e9:
07:bc:a3:91:d0:2c:04:4f:fc:57:db:55:7b:cb:91:
fb:8a:94:9d:25:93:cf:86:bb:66:48:24:5d:5a:75:
9c:32:1e:7d:87:7b:26:e6:d5:6d:e6:b0:dd:82:3b:
2b:e3:ba:55:bb:55:70:e2:41:27:89:1f:f4:29:ee:
68:e2:38:59:72:28:a2:1c:b3:17:a2:04:c3:19:60:
c5:64:5e:13:68:84:f8:d3:b2:90:0a:10:a7:4d:8c:
7a:f8:fa:9a:b1:3d:6b:7f:49:50:10:c7:cb:fc:ed:
81:6b:33:76:77:96:ec:cf:7a:45:bf:9f:79:14:e3:
c1:23:a1:b5:33:55:04:25:be:a4:2b:21:8c:dd:4d:
a9:38:71:21:c5:a5:ae:78:81:13:cc:8f:c2:5d:1b:
b9:5d:e0:58:6c:e0:09:a8:d9:d9:cc:92:09:21:d0:
3c:51:e3:73:be:3d:8e:97:b4:3c:39:0a:07:ed:0c:
9e:b2:54:2a:99:14:3a:54:36:4d:33:4f:fd:ec:56:
7f:47:3b:9f:2b:ee:f9:a5:e9:7c:0d:44:e4:c5:1f:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:09:A7:6F:A8:EE:94:CD:EA:0E:05:51:2A:C2:81:AB:5A:D8:F6
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/bOgJp2-o7pTN6g4FUSrCgata2PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.160.0/21
159.253.160.0/21
185.31.152.0/22
Signature Algorithm: sha256WithRSAEncryption
67:4a:24:64:67:b1:04:b6:86:e6:bd:f7:14:79:38:55:3a:9c:
1c:59:89:1e:07:b3:50:62:28:c3:fc:7b:75:6a:42:00:36:69:
bb:03:3e:a5:ae:ce:6e:c0:a1:ac:67:dc:d4:35:e0:3f:35:78:
3b:ee:b5:bc:56:ef:c9:93:7e:50:da:89:1e:61:08:79:c3:eb:
d9:92:27:f6:99:d7:c7:52:9d:a7:72:f4:ec:2a:76:35:30:84:
c2:7a:a2:27:37:4d:50:0f:b0:95:38:31:b3:64:43:ba:44:5b:
a3:6f:b1:8b:01:41:05:eb:8c:50:61:82:94:6c:62:59:45:68:
6c:db:31:0e:88:6d:9f:ef:55:72:fd:1b:d4:96:40:ee:44:e6:
0e:0a:c4:c9:8f:01:3c:e4:bf:8c:80:35:8b:d3:bc:4b:38:ce:
60:9e:96:70:73:63:40:d7:55:72:30:33:90:b8:cc:18:6c:e3:
0a:8b:ae:67:0d:c4:43:d5:e2:2a:9a:cd:1b:7f:bd:05:24:a7:
19:f6:6d:2e:80:59:ba:45:ab:4e:81:cf:11:34:04:40:a4:53:
e4:8e:d6:f6:f3:8a:cd:d1:bf:fd:b6:f6:2a:79:f2:12:9f:64:
c2:ff:17:1f:d7:43:17:5f:a4:82:f7:98:f6:ad:b2:33:53:ca:
03:01:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:16 2024 by rpki-client on console-fra.rpki-client.org