Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/BTos2BiAlohpMLKvCumvLPBJxUM.roa
File: BTos2BiAlohpMLKvCumvLPBJxUM.roa (raw, json)
Hash identifier: AK00Rz4Wz3NWLdFO0EHNl5vhRI3pZR/3Sz4KF4UhBl8=
Subject key identifier: 05:3A:2C:D8:18:80:96:88:69:30:B2:AF:0A:E9:AF:2C:F0:49:C5:43
Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial: 018570E76EEB5C319B6D52ECE8DDF0CE56FC
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/BTos2BiAlohpMLKvCumvLPBJxUM.roa
Signing time: Mon 02 Jan 2023 05:14:53 +0000
ROA not before: Mon 02 Jan 2023 05:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202040
IP address blocks: 185.54.76.0/22 maxlen: 22
193.141.27.0/24 maxlen: 24
2a04:d140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:6e:eb:5c:31:9b:6d:52:ec:e8:dd:f0:ce:56:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Validity
Not Before: Jan 2 05:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053a2cd8188096886930b2af0ae9af2cf049c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:ee:15:73:c5:53:8e:76:37:5d:07:51:b2:
89:68:c7:44:05:23:e0:64:f8:51:c6:4c:e6:1e:05:
4c:4e:ea:a4:d6:59:96:92:ca:13:ba:10:52:c6:42:
0f:86:8e:68:2c:61:4d:62:05:bf:f7:63:86:b9:57:
d0:62:52:6a:80:68:c2:a6:26:70:96:0a:6c:19:97:
e7:9d:3e:aa:2e:9e:03:45:81:87:c5:10:42:d9:c2:
7c:3e:aa:23:d2:67:1d:63:11:52:d9:af:5b:ee:7e:
36:a5:37:96:73:4d:71:b4:43:8e:13:88:a5:16:86:
ad:8c:53:c1:f7:bc:a0:3a:1b:a8:e3:95:b5:60:19:
46:d2:90:b4:47:20:5a:7a:27:46:b6:fc:bd:1d:72:
82:7f:b8:7d:ac:12:a9:e8:8e:8d:bf:0e:07:d3:c3:
ad:54:92:40:27:41:0d:6c:f2:c2:3f:f4:43:b7:78:
e4:d3:9a:2c:10:e3:5e:95:64:8d:a8:ac:36:5f:fa:
74:2a:a7:59:fb:e3:26:9c:19:4a:37:bc:03:09:ed:
3f:58:a6:9b:48:17:a6:d9:7f:20:d4:75:29:d4:5b:
14:9a:8e:4d:7b:20:1a:68:ed:57:44:64:1e:62:cf:
59:c4:d4:b0:6b:14:ef:91:28:18:dd:c8:ce:e5:3a:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:2C:D8:18:80:96:88:69:30:B2:AF:0A:E9:AF:2C:F0:49:C5:43
X509v3 Authority Key Identifier:
keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/BTos2BiAlohpMLKvCumvLPBJxUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.76.0/22
193.141.27.0/24
IPv6:
2a04:d140::/29
Signature Algorithm: sha256WithRSAEncryption
1e:48:0e:71:2e:b0:03:47:4c:c9:35:eb:17:08:89:7b:98:a6:
83:22:99:65:eb:86:43:c7:82:42:8e:5d:e6:35:4d:e2:26:63:
e5:81:24:e5:51:97:fe:a6:8f:24:2b:da:89:9e:b4:67:63:7a:
5d:99:de:9e:d7:4c:cd:69:33:7d:36:f3:02:14:42:a3:55:5f:
cf:e1:26:fc:a4:f3:a7:fb:df:4d:d8:4f:42:a7:e9:ed:d2:a6:
f7:28:fd:db:1d:b3:c6:61:02:ec:5b:82:21:f4:70:56:65:f9:
5c:57:ba:09:2c:e1:99:37:e4:85:00:c7:ae:13:a5:b5:3a:cd:
ea:24:ef:1f:5d:44:57:dc:b2:73:3d:a4:40:3e:77:d5:a7:3f:
e9:e2:9d:47:94:e9:27:7e:6b:66:06:4a:69:d3:e5:83:22:28:
7d:d8:ae:a3:24:2b:dd:d8:31:87:9f:fd:0e:15:d4:93:51:c9:
0c:87:35:7e:bc:d1:6e:a6:8f:3e:71:b8:a6:09:d6:aa:06:98:
7d:0a:17:5f:5a:ab:75:06:fc:fd:f8:aa:15:8e:21:57:e0:41:
5a:3d:78:aa:fd:19:5e:2f:f2:88:36:35:16:a7:4c:d2:df:50:
8d:13:a4:73:98:be:7a:c3:8d:fd:25:cc:d3:fe:6b:5b:bf:b9:
af:79:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:13 2025 by rpki-client