Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/BqA8QlBedPlmuqWWz0my7GMchwI.roa
File: BqA8QlBedPlmuqWWz0my7GMchwI.roa (raw, json)
Hash identifier: DOtKWgyTHGzbtFIRDveR1ul1nrM/n28j7pZ780PxHHc=
Subject key identifier: 06:A0:3C:42:50:5E:74:F9:66:BA:A5:96:CF:49:B2:EC:63:1C:87:02
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 03BE0A78
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/BqA8QlBedPlmuqWWz0my7GMchwI.roa
Signing time: Sat 01 Jan 2022 06:54:57 +0000
ROA not before: Sat 01 Jan 2022 06:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59497
IP address blocks: 194.44.90.0/24 maxlen: 24
194.44.97.0/24 maxlen: 24
194.44.96.0/24 maxlen: 24
194.44.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62786168 (0x3be0a78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 1 06:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06a03c42505e74f966baa596cf49b2ec631c8702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:9d:f2:6c:fc:23:18:fc:8e:55:fd:d5:dd:
1f:2f:a3:7f:8f:61:6d:33:a2:6a:a1:aa:b3:15:41:
56:0d:8b:e4:f7:d6:56:48:49:0d:0a:43:14:9e:88:
70:c6:fe:7a:17:4b:6f:54:d7:4d:2d:13:8c:4e:71:
18:fc:36:de:06:9a:17:3d:d7:b7:b2:d5:c8:ad:b9:
06:17:ce:16:c6:60:59:bc:64:bb:ce:8c:dd:b1:80:
91:ee:c4:c9:44:45:5d:b2:69:ba:46:2d:30:09:bc:
a3:db:e3:60:35:b1:fb:8d:b1:ce:bf:d2:13:e9:6b:
88:41:10:cf:41:4d:9d:29:50:2e:8d:16:7c:d1:9e:
80:da:a3:75:1b:70:56:52:e1:0f:2a:c3:55:7f:96:
75:41:7b:5c:a1:49:df:ef:d2:5a:e1:1f:aa:ee:b1:
16:db:26:1e:16:ee:f5:ce:2d:f9:99:04:fa:06:04:
14:38:79:6e:1d:be:48:29:15:ee:05:1e:03:70:21:
c8:27:53:c3:e6:03:8b:c8:a4:2f:1a:6d:35:25:e3:
38:43:37:17:f3:7b:ea:06:ca:3b:22:ec:e6:14:8b:
e5:d7:bf:98:75:1c:80:f9:1f:c3:27:1c:cb:80:9a:
92:e8:9f:15:0b:81:4c:fd:5e:ae:13:db:54:c0:a2:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:3C:42:50:5E:74:F9:66:BA:A5:96:CF:49:B2:EC:63:1C:87:02
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/BqA8QlBedPlmuqWWz0my7GMchwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.90.0/24
194.44.96.0/23
194.44.99.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2f:9e:e9:36:ba:d4:e5:5e:a8:7b:94:e9:da:b1:13:41:49:
dd:2f:bb:c1:10:b7:b3:f3:c8:9e:56:33:3d:88:15:57:b4:5f:
af:c8:e8:ba:16:de:51:5b:72:df:e2:55:29:08:c7:0c:0e:d9:
50:e5:a7:9a:92:27:af:87:3e:f5:b7:f0:32:2a:43:ff:b4:fe:
ee:ab:ff:be:ae:9a:0e:65:ce:76:ae:16:2c:a2:18:3f:76:1f:
a1:4b:e2:0f:7b:ff:18:40:29:ff:b4:be:42:a7:64:9c:26:3a:
8b:5e:03:f5:15:1c:78:0f:cf:fb:61:5b:44:dc:9d:a6:6b:10:
dd:c3:b9:3b:15:0c:68:0a:e1:98:59:58:a5:1f:7a:95:27:a0:
d3:54:b9:94:b0:c5:87:b5:ff:ad:8f:fc:ba:a5:81:9e:c6:a2:
09:f3:b6:25:bd:1b:92:98:0d:16:4f:0b:82:3e:e2:7e:73:66:
08:47:df:30:1b:e2:60:e4:e2:3e:5e:79:70:76:31:90:c6:96:
fa:7d:aa:4e:cb:a6:77:80:90:a5:ad:d3:49:fe:28:a4:8a:d5:
9c:80:56:3a:31:45:86:a2:90:fa:6c:32:58:14:bd:d3:25:04:
a9:10:92:d8:78:14:ac:f9:1a:49:ec:8f:d5:77:4e:26:c1:5c:
88:aa:d3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:55 2024 by rpki-client on console-ams.rpki-client.org