Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BnRVxjnQJVGBYWZ3c7W8aZaCxOI.roa
File: BnRVxjnQJVGBYWZ3c7W8aZaCxOI.roa (raw, json)
Hash identifier: RYk4GafA9C5uqmuTVUfWL3zQpWhlE60uzR9N3HIeATQ=
Subject key identifier: 06:74:55:C6:39:D0:25:51:81:61:66:77:73:B5:BC:69:96:82:C4:E2
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0183E6371478A3D218BFF84F377F564B1669
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BnRVxjnQJVGBYWZ3c7W8aZaCxOI.roa
Signing time: Mon 17 Oct 2022 13:51:52 +0000
ROA not before: Mon 17 Oct 2022 13:51:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197071
IP address blocks: 185.117.0.0/24 maxlen: 24
45.67.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:37:14:78:a3:d2:18:bf:f8:4f:37:7f:56:4b:16:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 17 13:51:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=067455c639d025518161667773b5bc699682c4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:59:0a:9a:32:fe:ea:7c:48:de:c1:06:c6:
c5:2d:32:ef:f6:e6:4f:56:36:da:dc:d9:2f:4d:e0:
2f:73:69:6c:6a:fc:d6:a2:4c:e4:c9:11:f9:ba:5d:
90:68:c5:4d:d0:bb:ad:e1:31:d4:e6:47:2a:57:f3:
f5:29:23:05:19:14:df:60:b7:5a:77:e3:21:9a:f4:
4d:74:48:74:e2:1f:b0:0b:13:11:89:65:7d:02:3b:
2b:4b:2e:ad:c4:09:60:8a:3a:96:19:e2:cf:67:9b:
58:fa:a0:21:8b:bf:a3:09:96:98:7d:b3:bb:1c:63:
d4:ac:99:50:d5:a3:7c:57:15:11:9b:fb:a3:87:29:
26:3f:5b:6d:24:31:0d:69:5d:e6:7f:ea:8a:16:03:
8c:a3:b4:75:a9:45:e1:83:6b:70:e5:c1:1e:3c:93:
66:10:83:fe:10:c5:98:2c:d7:5c:71:0c:02:c4:72:
a8:2d:d1:5b:fe:9a:09:0e:7a:9c:06:f3:a6:1e:96:
98:da:28:7f:6b:0c:1f:5a:f4:75:26:90:aa:ee:69:
4c:30:f0:81:24:af:a0:7a:f2:0a:97:c0:7a:ab:ca:
4c:77:f4:e9:79:44:64:54:42:d5:35:1b:6f:94:92:
aa:9e:cf:72:01:e9:e0:c5:b0:a3:ad:24:aa:b6:42:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:55:C6:39:D0:25:51:81:61:66:77:73:B5:BC:69:96:82:C4:E2
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BnRVxjnQJVGBYWZ3c7W8aZaCxOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.139.0/24
185.117.0.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b6:6f:fb:51:a0:08:02:3b:25:20:c1:8e:95:33:27:23:19:
f4:79:1d:53:1a:e7:42:c1:41:15:eb:bc:c6:a7:c7:4f:11:03:
65:18:c4:dd:07:d4:30:b1:21:c4:c9:f5:25:eb:51:54:e1:7b:
ef:23:2a:e0:81:ae:65:91:d9:8d:c3:e4:bf:b4:2d:c5:3b:fa:
22:71:ca:e0:db:12:3e:c0:9e:d6:83:2d:b3:22:89:fb:58:7f:
fe:cc:09:f7:01:18:52:d2:87:b5:d7:21:cb:ea:3d:bb:09:c8:
db:98:73:c4:3b:e1:10:f8:e6:c8:65:59:db:c1:33:45:73:d4:
55:da:a9:41:c5:a0:74:21:74:36:3c:9c:97:7f:1d:a0:36:36:
8b:85:90:1b:41:d6:c9:b4:d4:bb:7a:30:ba:5a:2b:f5:73:70:
9f:e8:05:ad:b5:e1:fd:74:ba:c6:c2:9e:59:a8:37:70:41:96:
3a:2c:40:ea:cc:ef:09:6c:65:ef:61:ca:dd:82:0e:a0:7b:4c:
cf:42:bf:b3:14:43:d1:70:1b:da:65:f7:e9:7c:22:93:dc:0f:
1e:a2:41:f3:c0:08:cd:e8:c3:be:a2:3f:93:56:97:e1:cf:3f:
e4:59:a0:34:ec:d4:5a:54:e0:63:78:14:ab:5b:36:97:b9:84:
fd:42:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org