Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/BfbI1CTUkwlcDjZ3A00G4TqzhT0.roa
File: BfbI1CTUkwlcDjZ3A00G4TqzhT0.roa (raw, json)
Hash identifier: ztIQTSKUIwHKxlq4jCIwhf8DHAJiTALPiByTSqLv/2E=
Subject key identifier: 05:F6:C8:D4:24:D4:93:09:5C:0E:36:77:03:4D:06:E1:3A:B3:85:3D
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 0182D0543608B381736A7B3C4EB26F6FA0BA
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/BfbI1CTUkwlcDjZ3A00G4TqzhT0.roa
Signing time: Wed 24 Aug 2022 14:49:15 +0000
ROA not before: Wed 24 Aug 2022 14:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.24.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:54:36:08:b3:81:73:6a:7b:3c:4e:b2:6f:6f:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Aug 24 14:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05f6c8d424d493095c0e3677034d06e13ab3853d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:4c:9d:18:46:eb:61:53:0b:ce:fb:a0:c7:
f2:d4:f3:ab:35:dc:77:42:db:14:c9:82:31:93:98:
a7:c4:67:69:20:65:49:d0:73:4e:eb:0e:fa:b5:a1:
dc:a3:c5:dd:b3:80:1a:f0:b4:96:4b:2a:91:6e:01:
c3:57:c6:2a:07:79:38:18:e2:7b:76:78:35:6f:3a:
c9:30:04:7f:5a:62:da:74:64:0e:22:83:de:49:c2:
9b:95:8e:a4:f8:01:c3:99:1d:8a:5a:dd:1a:0e:30:
9e:83:62:f9:da:39:1f:d4:f5:93:d3:12:93:da:65:
06:80:49:83:58:8c:bc:64:24:5c:90:0e:33:6a:af:
38:82:8b:2a:10:24:3e:cd:92:64:f2:8a:d3:b5:b3:
f2:c1:e1:df:39:bd:88:4a:9f:e8:e0:4e:3a:bf:8f:
ab:4f:d5:a2:b0:f3:89:7e:df:e8:3b:35:ed:20:33:
3c:a3:db:5f:43:d5:e0:33:7a:5f:4e:58:5d:01:06:
d5:c1:1c:a3:e9:9f:b0:16:b3:8a:b0:08:6f:e7:de:
d0:c8:a0:5c:34:ec:24:f2:99:75:2c:2d:55:69:17:
8f:b2:e7:9a:1d:16:79:2d:a5:78:5a:89:c5:33:af:
77:d2:18:35:14:80:af:a1:2a:f9:1b:96:d0:d3:57:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F6:C8:D4:24:D4:93:09:5C:0E:36:77:03:4D:06:E1:3A:B3:85:3D
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/BfbI1CTUkwlcDjZ3A00G4TqzhT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.42.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:2c:8d:12:68:fd:a7:e7:b0:85:55:c8:50:8e:9c:8b:64:13:
e8:73:99:fc:77:89:bf:d4:7e:3e:36:fe:34:11:22:fd:bd:e9:
5e:57:7f:ac:fa:c1:db:05:ff:77:09:14:2d:b6:a2:94:c2:ee:
b7:88:25:97:7d:0c:8a:4a:82:02:b0:99:e1:26:b8:22:e8:c5:
2c:ec:a3:49:06:81:27:fa:45:b2:a8:e4:71:ec:b0:bc:cd:78:
18:3e:f0:45:ac:06:3b:bd:a3:22:83:6f:61:cf:7e:1f:59:e7:
9d:7f:20:09:53:e5:62:ee:20:33:7a:91:95:7c:cf:2b:6d:a5:
a7:0a:93:88:6b:58:5e:8d:23:52:50:53:97:6e:47:8b:5c:b6:
d2:ca:76:e0:0d:39:fa:47:03:61:18:db:8b:a0:b1:d1:e8:e0:
03:37:1d:0f:9b:d8:f5:39:38:dc:16:79:4e:67:a9:8b:62:94:
52:7a:68:16:d7:0c:65:fb:3f:a8:e9:0c:d6:22:08:7d:4b:ec:
ca:97:5f:36:a4:42:01:89:92:8c:76:5a:1a:d9:19:c8:f2:ec:
29:ea:88:11:5e:f9:34:7b:e0:60:c0:8a:6b:a9:ef:d5:ac:d0:
87:cb:dc:df:52:0c:be:ce:02:06:3c:e5:e8:a4:89:07:b3:cc:
04:1f:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org