Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/BRoCaMAsZbI8DYPbMhzeuV4vQMc.roa
File: BRoCaMAsZbI8DYPbMhzeuV4vQMc.roa (raw, json)
Hash identifier: 2f5cDCzjrje19zrWrDn3exkNL7mC/N9DrtHqx0PCB94=
Subject key identifier: 05:1A:02:68:C0:2C:65:B2:3C:0D:83:DB:32:1C:DE:B9:5E:2F:40:C7
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01828325B19543BEBF9FB80FCAFC2AA324F3
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/BRoCaMAsZbI8DYPbMhzeuV4vQMc.roa
Signing time: Tue 09 Aug 2022 15:07:41 +0000
ROA not before: Tue 09 Aug 2022 15:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 81.199.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:25:b1:95:43:be:bf:9f:b8:0f:ca:fc:2a:a3:24:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 9 15:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=051a0268c02c65b23c0d83db321cdeb95e2f40c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:48:1a:bc:5c:71:93:67:2c:b6:59:18:c1:
40:20:51:41:dd:d8:75:a6:ca:5d:77:d3:f7:a7:94:
35:22:27:ae:65:84:02:74:82:3f:99:2c:3e:67:89:
43:38:1c:f2:67:49:b3:5f:76:60:9b:2e:ba:7a:75:
8f:3e:04:5b:c4:6e:87:e1:3f:f6:22:0f:7d:9f:aa:
7c:e1:5a:6b:d0:60:b9:f4:e2:19:32:a8:d5:67:a9:
92:e5:d2:d7:b2:b6:29:fa:e5:f3:67:5c:ca:b2:78:
33:18:29:5c:31:67:66:5e:99:6f:1b:7a:be:69:c1:
bd:5c:56:27:fa:17:ce:20:84:ba:fe:e9:30:3a:eb:
f4:9e:cf:79:5a:aa:13:a9:77:91:68:84:1a:45:66:
1d:38:41:db:eb:72:8f:61:1c:ab:6a:90:d0:dc:2b:
a0:62:cc:2c:62:37:42:ca:47:2e:0f:0e:6a:00:2c:
5e:35:f0:57:ac:ee:e0:22:b3:0b:85:18:05:f1:c6:
70:65:ad:82:28:43:b9:bd:0e:e4:4d:af:7a:da:91:
36:c1:40:e7:a2:2b:67:e7:2c:d4:89:2b:77:f3:27:
2c:8a:3c:f8:44:ba:9e:4a:e0:f8:f5:ed:8a:f8:3e:
81:f3:b0:a3:b1:95:11:97:41:c3:c7:3d:11:2a:af:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1A:02:68:C0:2C:65:B2:3C:0D:83:DB:32:1C:DE:B9:5E:2F:40:C7
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/BRoCaMAsZbI8DYPbMhzeuV4vQMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2e:26:fd:8b:63:89:4a:ea:de:aa:c2:69:92:2b:a7:65:8e:
95:d1:88:20:db:9d:88:93:bd:87:20:76:96:dd:a0:09:e0:0e:
38:25:3f:02:30:ea:d8:dd:34:24:7e:a3:95:0b:18:e8:37:61:
e8:1b:42:93:3a:6a:d7:e1:77:4d:17:a5:a8:81:55:f2:3f:42:
31:f9:67:ce:c8:ec:dd:33:23:af:b2:3d:12:fe:27:96:52:e4:
6b:53:e0:73:54:44:82:d9:8f:d7:74:d5:c0:70:02:a6:cd:76:
89:c0:25:16:93:a5:b4:1a:e0:3f:2f:3b:cf:94:eb:0d:39:19:
ae:d0:9a:47:74:66:b9:39:58:9f:70:7c:ca:9a:2e:6e:e0:5a:
8f:2a:bf:26:66:ff:28:29:22:28:26:51:dd:fc:58:25:9e:d0:
c1:2e:2f:5f:3a:93:67:18:e1:d4:49:31:40:f2:8d:2f:91:d4:
54:a1:45:33:53:3d:bc:a1:f7:26:10:54:52:c2:6b:37:42:44:
97:f1:0e:f4:0d:8d:61:d5:12:c1:05:af:66:c7:1b:73:52:65:
5b:45:be:bf:f2:7a:a6:2a:35:c1:18:d3:87:05:54:f8:46:3a:
1a:40:d2:75:81:f7:b9:a7:a3:01:10:bd:37:22:65:7f:49:92:
a5:45:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org