Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/BzqwrtJ1IYoK-l5wMk6c7CyEj0M.roa
File: BzqwrtJ1IYoK-l5wMk6c7CyEj0M.roa (raw, json)
Hash identifier: sRuRug97u9gldTl/chACEYNRFzohEMreNc/g0Czku20=
Subject key identifier: 07:3A:B0:AE:D2:75:21:8A:0A:FA:5E:70:32:4E:9C:EC:2C:84:8F:43
Certificate issuer: /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial: 11420C1C
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/BzqwrtJ1IYoK-l5wMk6c7CyEj0M.roa
Signing time: Sat 01 Jan 2022 02:51:54 +0000
ROA not before: Sat 01 Jan 2022 02:51:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34081
IP address blocks: 84.33.16.0/23 maxlen: 24
217.70.144.0/20 maxlen: 24
193.188.28.0/22 maxlen: 24
84.33.192.0/18 maxlen: 24
84.33.0.0/18 maxlen: 24
2001:1a38::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289541148 (0x11420c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Validity
Not Before: Jan 1 02:51:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=073ab0aed275218a0afa5e70324e9cec2c848f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:57:f4:4c:47:06:01:f5:ce:26:0c:7d:53:
69:88:2c:63:75:e2:6b:92:08:6c:11:62:f4:0f:4d:
73:c0:8e:c7:0a:76:3b:b5:32:92:ae:52:a9:3c:cb:
46:39:fc:54:0f:bf:b9:b1:82:40:1f:77:2b:df:98:
1e:7c:74:03:60:4f:fa:e6:c1:45:58:b4:e2:cc:bf:
40:f9:06:95:30:d5:62:41:57:57:0f:bb:19:02:ad:
38:74:19:77:c3:d6:c8:f2:c2:bf:f1:94:29:55:1f:
33:b0:22:3a:3d:15:7c:7b:2f:bc:cd:a9:30:98:8e:
3a:b8:b3:64:24:ee:8f:8e:62:a0:96:75:e8:74:a3:
89:f0:1f:57:79:6d:84:90:9f:24:bb:90:ee:6c:4d:
8d:0e:c6:ab:8a:2a:95:be:5d:68:17:f2:e8:cc:93:
e7:e3:1a:b7:68:ed:13:33:1e:06:a4:99:c6:f0:d2:
ed:69:a3:5a:2f:ee:f1:76:e6:e4:8e:a5:6e:15:90:
28:13:ee:3f:c4:f9:95:b1:c9:68:ef:a2:c9:32:4a:
14:23:2f:e7:34:94:75:d9:ce:22:ed:b7:99:35:f4:
a5:f7:3a:46:be:7d:a7:a6:d1:d2:da:3e:09:6e:5e:
97:a6:18:28:97:87:7e:ba:1d:24:1a:8c:cf:67:b4:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3A:B0:AE:D2:75:21:8A:0A:FA:5E:70:32:4E:9C:EC:2C:84:8F:43
X509v3 Authority Key Identifier:
keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/BzqwrtJ1IYoK-l5wMk6c7CyEj0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.33.0.0/18
84.33.192.0/18
193.188.28.0/22
217.70.144.0/20
IPv6:
2001:1a38::/32
Signature Algorithm: sha256WithRSAEncryption
a9:f4:d3:c2:c1:38:e5:e7:08:0f:0c:0c:3a:fd:9b:ee:91:c9:
75:de:3e:f6:45:7c:ec:f4:42:07:06:5d:8b:79:5e:41:ca:7c:
5e:08:73:11:46:8a:0c:a6:8f:61:84:d7:fe:f0:5e:6c:21:38:
33:0c:f9:52:30:1f:f2:21:c2:6f:0c:7f:da:34:65:1b:37:2d:
a6:c2:df:13:ba:e1:10:db:f0:7c:e1:f4:f8:64:a2:3a:19:c5:
ee:bd:83:50:67:76:21:67:1d:bc:a5:a3:c9:69:2b:b1:b9:37:
6f:7d:ac:15:3d:f1:74:fa:19:b1:6e:28:65:df:8e:fe:33:76:
29:7a:b8:5c:dd:d9:b9:d3:b8:47:cb:66:b4:fc:e5:4f:16:bd:
34:f8:a6:3b:cb:7f:c9:ef:c4:90:23:bb:34:38:b8:c3:62:b5:
1e:7a:9c:3a:9d:f8:e4:e4:a7:82:46:ca:bb:5d:e8:13:04:20:
0c:ba:6c:88:f3:f0:27:08:42:6c:ed:70:c3:03:3a:84:ff:97:
9d:7e:b9:53:69:e0:c2:98:5a:83:b3:b4:f3:0f:ed:ba:6e:0a:
b8:1e:db:32:40:8e:cb:40:c1:31:c6:e9:e8:5d:d5:b6:a6:99:
70:cd:52:db:15:46:44:b9:19:ba:ac:2a:d8:1f:ab:a3:f4:54:
cb:d9:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:47 2023 by rpki-client on console-ams.rpki-client.org