Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/BvAbba2NBWs_KH97Byo3iPKCEz4.roa
File: BvAbba2NBWs_KH97Byo3iPKCEz4.roa (raw, json)
Hash identifier: g+MaCwYTjVxb0mbggvtmz6v9KMqCMpHPP7mVzGxSWvI=
Subject key identifier: 06:F0:1B:6D:AD:8D:05:6B:3F:28:7F:7B:07:2A:37:88:F2:82:13:3E
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 0184EBA614BCDC391FB5E16BD4B3E8087522
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/BvAbba2NBWs_KH97Byo3iPKCEz4.roa
Signing time: Wed 07 Dec 2022 08:14:00 +0000
ROA not before: Wed 07 Dec 2022 08:14:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39558
IP address blocks: 195.244.4.0/23 maxlen: 23
91.221.132.0/24 maxlen: 24
91.221.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:a6:14:bc:dc:39:1f:b5:e1:6b:d4:b3:e8:08:75:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Dec 7 08:14:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06f01b6dad8d056b3f287f7b072a3788f282133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f6:75:7e:b9:a9:fc:f0:0c:ef:bc:27:cc:3e:
a0:5b:32:0a:30:c6:98:0f:33:31:89:54:79:bb:97:
bd:54:08:83:b3:27:f6:70:ef:b8:fd:00:e4:b6:91:
5a:d8:44:1f:9e:65:6b:7d:15:0a:cd:96:27:6a:fe:
8f:4c:71:3f:99:c1:4c:d8:c9:09:48:79:23:26:43:
9b:14:66:06:71:2d:21:2c:2b:e7:df:cd:ae:07:48:
29:c7:4a:81:2e:f7:23:9b:a8:35:fa:a6:08:98:e0:
66:ab:f9:90:29:f4:fb:23:90:67:9e:9e:8c:dd:ba:
9a:a3:c4:03:cd:46:95:a4:7d:43:c7:44:15:9b:cd:
93:6e:33:e8:a5:9c:06:3b:32:c3:f1:3f:cb:fe:15:
9c:67:31:b6:da:b0:2c:14:6d:6e:2d:34:75:33:09:
e7:6c:7b:19:28:6b:69:1f:b5:09:42:ff:93:1c:0f:
4d:e6:55:2c:f5:4d:e6:59:27:2f:05:0c:08:f4:3d:
29:06:88:56:35:93:dd:b9:0a:1f:1d:85:fd:17:d2:
08:e4:ec:ca:c1:69:cf:49:ff:8c:63:bb:a5:a5:38:
c6:88:50:9e:7f:0e:a4:54:66:bd:de:08:95:e1:82:
e1:1f:8e:61:07:24:d2:7e:95:7d:e2:23:5d:a6:56:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:1B:6D:AD:8D:05:6B:3F:28:7F:7B:07:2A:37:88:F2:82:13:3E
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/BvAbba2NBWs_KH97Byo3iPKCEz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.132.0/23
195.244.4.0/23
Signature Algorithm: sha256WithRSAEncryption
24:6d:c7:99:5f:ea:b2:80:42:2b:92:de:fd:10:50:57:0c:05:
6c:33:1d:4a:0a:db:ad:3f:89:ab:85:b1:cd:2a:4f:83:c5:09:
fe:39:cc:83:12:63:72:ef:df:20:94:de:13:5d:fc:b6:b0:4d:
aa:0c:c4:ea:bc:aa:bc:58:eb:e1:bd:3e:9c:57:98:11:c3:f0:
45:08:46:72:61:0f:2c:a6:b9:53:32:1e:c3:ba:af:fc:7b:77:
11:3a:1a:75:ba:bd:48:1b:76:bc:b7:bb:40:7f:02:5b:77:d4:
5a:09:1a:07:71:bf:02:96:2a:6a:4d:31:02:3a:44:26:41:7b:
83:43:8e:41:f6:48:4a:00:04:91:26:3d:c8:e0:f7:0e:aa:e6:
57:c1:1f:34:74:70:39:ba:b8:28:1e:88:66:a5:bc:5b:97:ec:
04:ac:e4:6c:62:bf:82:3b:7c:8a:46:52:60:ee:93:8e:3a:5c:
8f:97:07:11:ca:db:d5:e9:38:d4:4d:0d:a3:04:93:d1:77:4d:
17:8a:6f:09:e2:bb:e7:e3:9e:3f:33:08:b5:7c:05:b2:ff:65:
35:6a:b6:80:51:9f:15:c1:1a:e4:8b:ed:74:50:1e:d5:fc:19:
03:0a:f9:c3:a1:15:a3:ce:25:d6:57:1b:bb:49:cd:fb:df:9c:
6c:5b:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:17 2023 by rpki-client on console-ams.rpki-client.org