Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/BUtTt2skEIowtjW83eW-9zeZOb8.roa
File: BUtTt2skEIowtjW83eW-9zeZOb8.roa (raw, json)
Hash identifier: izWjgF/QYC4JozpjA26x++O5Wwzbvi8dI08O772d2ts=
Subject key identifier: 05:4B:53:B7:6B:24:10:8A:30:B6:35:BC:DD:E5:BE:F7:37:99:39:BF
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 0249D787
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/BUtTt2skEIowtjW83eW-9zeZOb8.roa
Signing time: Sat 01 Jan 2022 01:57:26 +0000
ROA not before: Sat 01 Jan 2022 01:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.138.90.0/24 maxlen: 24
193.110.146.0/24 maxlen: 24
194.165.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38393735 (0x249d787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Jan 1 01:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=054b53b76b24108a30b635bcdde5bef7379939bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:a7:d3:9d:9b:de:31:0b:f3:31:e0:c7:22:
f7:f0:fc:c1:b9:c4:b4:9d:06:67:d9:9b:d6:7b:ac:
88:47:9b:4e:06:a5:b2:d3:a5:74:f4:ee:ae:46:c3:
14:96:5f:84:25:00:25:88:10:3a:a9:28:46:9f:fa:
ef:b1:95:28:d1:9c:a0:f2:c8:d7:b8:1e:6c:01:6a:
9a:33:f1:77:5e:f6:84:f8:1d:3f:91:40:c0:26:ef:
ba:51:53:9b:20:42:b5:1c:70:02:3c:86:c0:bc:10:
65:47:88:17:ff:92:6e:2a:44:a9:57:3b:1a:22:08:
df:3c:1f:6e:41:36:21:61:42:fd:7b:dd:7b:74:ca:
23:14:4f:a9:52:8d:db:dc:f5:cc:81:ae:2b:fc:85:
77:20:58:89:bd:4b:69:8c:d6:2c:9c:51:85:98:e4:
6d:8f:93:fe:d2:d0:54:0c:73:3b:7d:77:89:44:9d:
a7:12:1a:04:80:b6:2d:a4:17:5a:3f:73:d5:ea:0c:
d6:87:a5:ab:93:da:9f:ca:be:61:3d:05:25:46:66:
d4:1e:58:a9:e1:72:80:33:fa:4a:c3:3e:b6:98:20:
85:59:7e:79:9f:d9:2e:f3:63:11:4a:ef:60:90:62:
ef:0b:61:a1:ca:29:63:9b:80:5f:71:72:21:b1:89:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4B:53:B7:6B:24:10:8A:30:B6:35:BC:DD:E5:BE:F7:37:99:39:BF
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/BUtTt2skEIowtjW83eW-9zeZOb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.146.0/24
193.138.90.0/24
194.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ef:eb:4c:dd:c4:49:a2:0f:2f:d3:09:9c:5d:13:ff:bb:e1:
b4:3b:7a:60:ea:61:c1:43:d9:ee:b9:c5:b6:f1:00:f4:0d:bc:
0e:a0:1c:5c:07:e7:0a:05:c5:71:c0:0a:76:a2:d1:55:5e:a9:
af:69:0a:97:d4:32:1e:69:96:09:41:2e:f3:cd:29:0c:1b:b5:
10:c7:63:18:63:36:a0:2d:9b:4d:d5:dc:a5:b1:c4:96:bb:d6:
83:4b:2a:86:d7:ac:6a:61:2a:05:c8:26:5f:40:ec:f6:4c:9d:
e9:e6:f1:a6:b5:94:c3:cb:d6:3a:22:5b:2f:7b:b9:18:da:02:
9f:ee:5f:be:53:ac:2e:a7:a0:97:e5:24:da:5c:e6:54:29:0c:
b6:82:33:24:3e:86:c6:d5:db:b2:8b:b5:0f:55:f3:0b:bb:bc:
72:03:f1:3f:b2:b0:2a:07:b2:27:12:2a:27:c5:ef:5a:83:ce:
e6:8d:5d:0e:ad:cb:76:cd:1b:89:75:bf:64:51:ff:26:3a:0d:
b9:d7:83:9c:9a:cb:9b:1e:6e:6b:2e:c5:9d:19:7d:39:c2:5d:
9f:44:7d:fc:c1:c1:04:a7:9d:e8:0a:ee:3c:8d:23:83:04:e7:
91:50:9e:c1:8d:5c:cc:fd:c0:cf:ed:12:f9:5c:40:9d:0b:24:
05:82:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:39 2024 by rpki-client on console-fra.rpki-client.org