Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/BIPT50tYBoez2cIhKDteCWKcOn0.roa
File: BIPT50tYBoez2cIhKDteCWKcOn0.roa (raw, json)
Hash identifier: S7C9Qv7MbLyUru1RTctIF0f+WElf3Y9GP9c+8v8sHm4=
Subject key identifier: 04:83:D3:E7:4B:58:06:87:B3:D9:C2:21:28:3B:5E:09:62:9C:3A:7D
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 044C0C1B
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/BIPT50tYBoez2cIhKDteCWKcOn0.roa
Signing time: Sat 01 Jan 2022 10:04:21 +0000
ROA not before: Sat 01 Jan 2022 10:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204257
IP address blocks: 141.226.191.0/24 maxlen: 24
141.226.188.0/24 maxlen: 24
141.226.189.0/24 maxlen: 24
141.226.190.0/24 maxlen: 24
141.226.187.0/24 maxlen: 24
185.109.148.0/22 maxlen: 24
141.226.184.0/24 maxlen: 24
141.226.186.0/23 maxlen: 23
141.226.185.0/24 maxlen: 24
141.226.186.0/24 maxlen: 24
141.226.184.0/23 maxlen: 23
141.226.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72092699 (0x44c0c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Jan 1 10:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0483d3e74b580687b3d9c221283b5e09629c3a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:8a:2c:54:4d:02:ec:0a:73:76:98:63:d7:
66:b3:64:ee:62:ce:9c:bf:95:12:12:4a:74:32:09:
84:2c:39:ff:31:45:56:22:13:f3:49:e2:de:4a:91:
f0:f8:04:76:d7:fe:f7:56:a4:2b:2b:e7:fa:db:32:
e3:61:8a:46:ff:d4:d9:24:9c:a5:89:26:a2:88:88:
1d:b9:04:50:89:5a:e2:d7:bf:e8:01:43:78:3b:cf:
d2:d2:54:4b:55:42:7c:cf:e9:45:7e:27:da:17:cc:
c1:24:f3:30:25:3c:c0:a2:3b:72:b5:fd:91:cc:33:
b1:15:8b:96:f8:3a:e0:79:29:12:42:6d:90:39:20:
e5:22:b8:3c:f7:ff:fc:62:b6:58:b6:ca:77:57:11:
01:4c:3d:62:2f:28:d7:47:6e:fa:c0:ce:3b:3c:18:
c5:51:42:12:94:70:4a:c2:28:17:61:35:29:47:d5:
3a:88:a4:d2:06:47:c7:e0:65:94:97:0c:46:53:73:
8d:98:66:74:39:6a:c1:52:70:ea:71:28:f6:6b:f1:
34:02:33:22:a9:6c:6c:ff:83:2d:59:17:22:56:80:
85:d9:71:88:76:96:24:81:7f:9f:0f:d4:3f:4e:46:
53:10:76:8f:f3:3c:2d:ee:57:01:57:6c:41:f1:1e:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:83:D3:E7:4B:58:06:87:B3:D9:C2:21:28:3B:5E:09:62:9C:3A:7D
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/BIPT50tYBoez2cIhKDteCWKcOn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.184.0/21
185.109.148.0/22
Signature Algorithm: sha256WithRSAEncryption
64:bd:c4:d3:e8:97:40:47:7f:1d:81:f7:a4:84:fb:df:d0:eb:
c4:e7:56:4c:b9:bd:69:c0:d8:45:d9:a9:1a:ba:2b:67:e6:93:
13:21:bd:b7:98:06:0a:e4:41:99:e4:bf:3f:57:25:d4:01:a1:
17:b1:04:65:8e:69:9a:13:a3:f1:24:78:e7:9e:94:ae:b7:40:
16:72:b2:42:7e:52:66:be:00:21:a5:07:7d:45:c0:20:6c:ee:
db:a4:cd:9d:08:21:d2:f0:6a:b4:9f:90:4b:73:b5:2a:44:92:
08:93:70:5c:39:29:23:93:d8:fe:0d:68:3c:4c:ef:77:a5:2a:
21:a0:a3:20:a1:83:78:57:d3:d4:00:55:96:1d:96:60:27:8b:
90:c6:b5:11:7e:d3:ca:7e:7f:82:58:58:18:e9:f7:4b:87:13:
03:46:b2:de:18:69:9b:03:6d:1d:14:46:58:2d:ba:9c:bf:87:
dd:f5:6e:c5:08:29:22:a2:7a:8f:7d:97:97:92:59:1b:c4:df:
72:fa:04:56:0a:12:e2:8d:a0:05:83:bd:b0:e4:72:29:58:3b:
2e:78:48:50:02:12:06:f9:e0:28:61:ff:dd:cc:10:ce:2c:57:
80:a4:23:41:46:44:42:44:90:2e:16:c4:50:b4:de:07:4a:45:
34:f4:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-ams.rpki-client.org