Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/bh-qRJrfqpmpSawQdVjFJraAGvo.roa
File: bh-qRJrfqpmpSawQdVjFJraAGvo.roa (raw, json)
Hash identifier: Tvmh8SYX1sBhMVYwNNgpYH9VHwGeI53vEBNqHzzEJ3U=
Subject key identifier: 6E:1F:AA:44:9A:DF:AA:99:A9:49:AC:10:75:58:C5:26:B6:80:1A:FA
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 08CCF585
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/bh-qRJrfqpmpSawQdVjFJraAGvo.roa
Signing time: Sat 01 Jan 2022 15:04:51 +0000
ROA not before: Sat 01 Jan 2022 15:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.76.114.0/23 maxlen: 24
194.76.113.0/24 maxlen: 24
185.39.50.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147649925 (0x8ccf585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 1 15:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e1faa449adfaa99a949ac107558c526b6801afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:1f:c3:18:e4:3f:b4:f7:22:9a:69:30:c3:
ff:67:11:e5:f2:34:4f:4c:d6:5a:7c:7c:39:e2:9d:
34:33:44:d2:21:a5:92:34:c7:73:6e:1c:1b:01:54:
55:50:fb:0f:3a:87:59:72:b2:bf:85:bc:bb:34:f9:
0b:65:94:17:67:ac:2c:bb:6b:f5:ed:12:bf:c1:d3:
06:d4:43:e1:92:b5:74:88:73:65:d8:82:55:92:d0:
9c:1b:f3:72:44:f5:bc:35:8a:15:2c:6c:12:28:89:
66:f9:2b:82:08:e2:42:b2:30:9a:81:c4:8a:54:6e:
2a:76:31:07:0b:6d:87:ed:94:b3:dd:64:f6:66:ec:
7b:5f:fa:fa:87:9d:d9:f2:c0:ba:f4:65:14:5f:07:
7e:03:ea:e5:01:0c:de:88:a2:08:d3:c8:05:15:d8:
33:c3:8c:cb:55:9a:1a:cf:40:22:22:03:30:e1:58:
41:84:3e:e2:bc:50:4c:9a:64:89:6d:eb:97:a4:76:
7f:8f:2a:50:f4:50:83:96:75:b1:ac:3b:de:52:a9:
82:85:73:84:4a:d3:ac:95:bc:64:e4:2b:b8:e9:62:
11:82:2c:3a:08:5f:be:29:68:a6:c1:f5:15:a4:3d:
47:41:aa:31:bf:00:45:4f:08:cc:16:4d:38:23:39:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:AA:44:9A:DF:AA:99:A9:49:AC:10:75:58:C5:26:B6:80:1A:FA
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/bh-qRJrfqpmpSawQdVjFJraAGvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.50.0/23
194.76.113.0-194.76.115.255
Signature Algorithm: sha256WithRSAEncryption
1f:20:7c:fa:af:4a:80:39:36:86:e5:a6:0c:e0:62:71:90:0a:
8b:68:01:53:da:16:c4:cb:dc:75:f4:78:a9:09:dd:02:ae:18:
e4:61:a4:91:be:ac:f3:bc:16:ef:31:85:5b:68:07:a7:cb:eb:
35:c2:d5:0c:1a:ed:e6:32:12:ac:1f:b4:3d:40:a5:68:b7:ae:
43:b0:d8:84:e9:b1:39:02:09:a0:88:33:8d:39:ac:6a:90:48:
ed:af:17:b0:ee:2f:e0:50:2c:c2:42:01:1d:ba:f3:04:6e:15:
fd:7c:f9:e3:17:54:94:aa:7c:fb:a6:99:11:b6:63:3d:45:c7:
d5:cd:db:dc:7f:fd:65:ba:9c:e8:6f:65:97:ad:0f:7a:25:63:
33:36:51:65:fa:4e:74:f8:f4:65:e9:fb:2c:d4:0e:03:90:b4:
d2:48:0c:d9:fb:eb:26:42:fc:f7:d3:31:19:86:2c:7e:fa:58:
1d:ed:10:34:7c:9a:ce:7e:8f:3b:dc:0d:96:56:59:8e:5d:a4:
1d:75:e3:07:ec:7b:44:b2:4d:db:5f:06:1d:45:4f:b2:37:e0:
5b:b2:fe:bc:e2:6f:02:f5:e3:11:81:ac:5c:74:77:e2:25:fa:
81:8d:1f:10:03:2a:35:b1:a0:c0:3a:f1:3a:e0:cd:fa:71:6f:
27:a5:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org