Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/BO9q-CYd2fg7BostSrmnYwrRhy8.roa
File: BO9q-CYd2fg7BostSrmnYwrRhy8.roa (raw, json)
Hash identifier: mlXgv0rzGauWOkYLuPyrSc0ERK0oTVFnIGSrWlk9wsE=
Subject key identifier: 04:EF:6A:F8:26:1D:D9:F8:3B:06:8B:2D:4A:B9:A7:63:0A:D1:87:2F
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 0389CD23
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/BO9q-CYd2fg7BostSrmnYwrRhy8.roa
Signing time: Mon 13 Jun 2022 09:02:25 +0000
ROA not before: Mon 13 Jun 2022 09:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 185.191.205.0/24 maxlen: 24
185.191.204.0/24 maxlen: 24
185.191.206.0/24 maxlen: 24
185.191.207.0/24 maxlen: 24
2a0a:1dc4::/30 maxlen: 30
2a0a:1dc0::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59362595 (0x389cd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Jun 13 09:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04ef6af8261dd9f83b068b2d4ab9a7630ad1872f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:90:6e:37:9a:04:ce:b2:f6:bc:2a:84:05:
6d:66:12:9a:20:bd:43:65:8f:98:c9:3a:ca:2e:b1:
06:44:be:54:20:df:d2:36:88:9a:71:ab:e9:6f:cf:
d9:41:59:76:9b:61:5b:35:4a:18:2b:9b:33:dc:c2:
91:9c:dd:83:cd:b3:6e:e9:aa:08:ff:cf:63:05:d8:
22:39:0e:68:35:0d:50:a0:39:1a:be:4f:cc:b1:38:
61:65:0b:1d:91:be:39:52:fc:f9:c5:63:51:4b:46:
f5:28:02:60:6c:f2:a1:2e:bf:96:7e:7f:dd:54:fd:
ae:46:2b:09:7a:b4:ec:e3:25:8c:d7:db:ac:a6:f5:
0b:e9:75:ca:f1:9d:dd:e3:0a:41:c0:36:20:11:21:
82:c0:5f:a8:5e:87:35:8b:d2:c8:0c:a3:65:54:cb:
d4:06:c7:56:f0:15:0b:d5:89:ea:4e:04:ec:96:5c:
75:59:50:a0:1c:f5:e6:2d:9c:24:65:f3:8d:99:4e:
31:27:1d:e6:05:07:b8:62:ab:98:09:35:8f:73:ba:
5f:19:0e:c9:dc:ed:96:8a:6d:ad:3b:78:c0:00:5b:
ce:68:ce:47:77:0c:85:9e:3e:2f:e7:75:02:8d:7f:
87:ee:1e:88:7b:75:31:69:b2:5f:a7:04:cf:46:23:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:6A:F8:26:1D:D9:F8:3B:06:8B:2D:4A:B9:A7:63:0A:D1:87:2F
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/BO9q-CYd2fg7BostSrmnYwrRhy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.204.0/22
IPv6:
2a0a:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
09:2e:68:fd:63:03:2f:13:c6:57:c7:e5:e0:4c:67:c2:80:51:
b8:37:e4:a9:7d:04:5f:c4:3a:d1:d7:38:a5:aa:fe:53:c0:86:
a0:5a:09:9a:6d:48:24:1f:f3:a2:18:80:df:22:05:30:96:06:
46:5c:85:25:ee:91:ed:3c:cc:46:82:7c:86:34:92:24:31:38:
4c:6c:a0:9c:e2:f7:4b:e7:ea:aa:d8:ce:9a:b3:f5:ac:07:73:
7a:77:76:59:3e:b0:81:b4:8f:66:88:f5:29:bc:6e:7c:02:dd:
96:bd:20:59:5d:60:aa:2e:1d:8c:9d:22:6e:58:33:b5:5d:21:
44:3d:85:2a:72:fb:a0:f8:75:1c:71:1f:e3:b3:c8:79:d2:42:
2e:28:6f:2a:9a:85:9a:c8:9d:4f:00:30:e7:80:b1:31:01:d7:
3c:81:ff:6c:5e:ba:ff:2a:69:1f:c3:20:4e:39:7a:81:6b:c9:
e8:bb:29:bc:98:00:96:0f:8b:e8:bb:5e:db:e3:c1:46:53:15:
91:05:a2:90:0e:55:3e:3e:68:b4:5c:3c:e2:b3:62:7e:d9:df:
c0:a7:be:89:84:db:0d:bb:b3:72:e9:8e:b6:d0:02:b6:6e:96:
18:95:da:65:a9:55:c2:1b:d0:ea:69:69:46:fe:a6:db:2f:01:
39:40:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-fra.rpki-client.org