Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/B8OpVNZVkXRexYI4EeGdlR6WVxo.roa
File: B8OpVNZVkXRexYI4EeGdlR6WVxo.roa (raw, json)
Hash identifier: wvNkhETpaPIeimWzgNACRYQa9ppA8/SFHHA6/8tngGA=
Subject key identifier: 07:C3:A9:54:D6:55:91:74:5E:C5:82:38:11:E1:9D:95:1E:96:57:1A
Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Certificate serial: 19B27231
Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/B8OpVNZVkXRexYI4EeGdlR6WVxo.roa
Signing time: Sat 01 Jan 2022 05:00:24 +0000
ROA not before: Sat 01 Jan 2022 05:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44454
IP address blocks: 178.216.88.0/21 maxlen: 32
85.202.144.0/20 maxlen: 32
185.46.104.0/22 maxlen: 32
2a01:8160::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431125041 (0x19b27231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Validity
Not Before: Jan 1 05:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07c3a954d65591745ec5823811e19d951e96571a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f1:ce:bd:0b:fb:14:62:6b:a7:b0:f2:62:7a:
5b:95:68:bb:89:1f:bd:89:5b:36:a2:aa:e0:52:7c:
fd:fb:3d:61:56:85:61:86:ce:c2:4d:96:e7:34:9b:
84:14:96:00:3b:4e:03:df:b2:24:38:e0:3a:a1:02:
d0:4a:95:ef:8e:b1:ce:42:fb:b3:89:2c:de:39:96:
19:fe:29:1d:f0:cd:5b:f0:43:4d:b2:c3:a3:84:64:
ef:2a:5d:a6:28:8e:61:8f:66:b1:5f:0e:67:7b:f0:
4e:12:87:19:01:90:45:7d:48:3c:46:c9:b3:d5:7a:
a4:f0:6c:72:2c:a9:65:3d:28:30:1b:d2:51:61:ca:
9f:90:fd:b4:43:a1:c5:9a:24:07:19:34:5b:93:24:
e0:0f:1b:14:03:35:47:00:61:63:df:c1:54:7f:bc:
f7:91:6b:8d:4a:65:8a:de:f7:ec:eb:7a:e6:c1:8c:
7f:99:67:b9:55:13:9a:38:b7:23:f5:84:43:3a:e5:
15:6c:1f:8b:55:5a:68:a9:65:98:34:84:f5:3d:c3:
e6:9a:e5:6a:fc:1a:37:13:d7:4b:b2:d2:29:86:17:
18:cb:ed:c8:97:b6:bd:16:36:14:3c:3d:a9:30:28:
0e:bf:88:af:ed:36:fb:9b:04:2b:05:fb:94:a5:6d:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C3:A9:54:D6:55:91:74:5E:C5:82:38:11:E1:9D:95:1E:96:57:1A
X509v3 Authority Key Identifier:
keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/B8OpVNZVkXRexYI4EeGdlR6WVxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.144.0/20
178.216.88.0/21
185.46.104.0/22
IPv6:
2a01:8160::/32
Signature Algorithm: sha256WithRSAEncryption
35:a4:c4:c4:9c:2c:17:e8:7d:2a:7f:51:4b:49:b5:3d:64:9f:
82:42:7a:82:30:d9:eb:02:8d:21:97:81:46:76:6b:66:2c:53:
2c:f6:20:e9:1e:d0:6b:03:f3:68:3a:bd:47:34:6e:df:c1:29:
5c:99:88:68:27:f1:0a:d3:62:6b:cf:8b:d1:52:4a:d2:a6:34:
38:c8:fb:7f:a3:7c:3f:0a:7c:aa:46:fd:30:1a:82:02:69:bc:
5d:bf:52:cf:43:0e:33:f0:f6:04:07:3c:3d:fc:24:f0:41:d3:
23:5d:0f:79:3d:93:8a:69:28:f2:6a:17:60:b1:9d:3d:b5:df:
2c:be:44:c5:6e:b3:74:39:c4:f2:96:e1:e3:15:6f:8a:e4:81:
4e:51:3e:1a:53:9e:50:b9:be:9c:62:14:25:e3:da:c5:56:bc:
1d:ad:90:df:95:47:c9:f5:df:8b:3f:ba:13:5d:8e:44:0f:9d:
39:c7:69:17:4d:bd:99:4b:bb:f8:fc:33:ec:1c:f5:02:86:c4:
72:5e:21:62:d5:9d:65:ef:bc:fd:91:82:72:f5:72:02:d9:16:
07:99:1a:2d:16:96:ae:64:a7:1f:17:4c:53:d1:84:fb:a8:8e:
7a:28:ff:63:4b:cf:ba:b4:91:ad:56:0a:a7:ae:b7:64:a6:28:
a0:93:0f:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:03 2024 by rpki-client on console-fra.rpki-client.org