Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BuaAC8k8NLHpFdYVv1-92DbavPE.roa
File: BuaAC8k8NLHpFdYVv1-92DbavPE.roa (raw, json)
Hash identifier: EcVs/TkwSaAt+D0seKR8aG8CGIG7IT/92Ji89TC7NZY=
Subject key identifier: 06:E6:80:0B:C9:3C:34:B1:E9:15:D6:15:BF:5F:BD:D8:36:DA:BC:F1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0ACEF77D
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BuaAC8k8NLHpFdYVv1-92DbavPE.roa
Signing time: Sat 01 Jan 2022 03:02:39 +0000
ROA not before: Sat 01 Jan 2022 03:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212249
IP address blocks: 185.85.236.0/24 maxlen: 24
93.190.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181335933 (0xacef77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06e6800bc93c34b1e915d615bf5fbdd836dabcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:41:93:6e:22:95:99:fb:df:f3:a5:fb:c3:
25:d5:3f:98:60:64:27:1d:b8:d7:86:c7:93:d2:82:
a7:f8:1f:ff:fe:1f:ba:31:1d:77:23:ae:33:26:6c:
2f:d2:eb:29:3c:0e:86:92:79:5f:2c:f1:87:91:10:
83:a6:c3:8e:a8:19:40:2c:e9:cf:51:8c:5e:49:f6:
4f:13:cd:d0:f1:cd:cf:d8:7d:44:5f:c9:20:22:f6:
8a:24:f7:79:d0:1c:1b:6e:d4:cf:26:51:64:c7:3c:
a6:17:0f:35:f3:ca:f2:50:6f:04:6d:66:2c:63:24:
41:74:66:3d:dd:88:e1:86:5d:58:c1:fe:54:d9:f5:
33:11:49:9e:c0:e2:23:e5:f4:b0:25:6b:df:8e:27:
32:1d:3f:3b:ed:bc:4e:f0:fb:8b:b7:5a:fb:7e:95:
49:6e:b8:c2:d3:a7:0e:d9:a4:c7:ef:4c:fe:57:29:
eb:3c:29:98:0b:1e:0a:90:02:d8:a6:95:83:87:4d:
4b:6f:99:ff:e3:7d:f8:90:a9:d0:9c:d7:e6:71:39:
ca:e6:66:dd:8d:57:1c:a5:80:60:9e:81:d2:ac:99:
b2:78:2d:9a:4f:0d:4e:63:08:3d:9d:7e:9a:b2:97:
3b:7b:24:2b:4a:16:28:4e:26:18:8e:02:20:54:ed:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:80:0B:C9:3C:34:B1:E9:15:D6:15:BF:5F:BD:D8:36:DA:BC:F1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BuaAC8k8NLHpFdYVv1-92DbavPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.15.0/24
185.85.236.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4f:5f:8d:97:4a:f6:fd:43:64:41:d3:b9:c9:2d:5d:04:01:
c6:a0:8a:05:4a:83:82:14:e1:60:87:22:2a:ac:03:60:f5:cf:
63:f7:a5:27:d8:04:c7:fe:55:ae:c6:d5:00:bb:d5:8e:aa:b5:
01:41:64:1e:2f:05:4f:c2:63:d8:62:1f:85:4c:7a:ff:24:dd:
84:ad:0e:16:73:3b:a4:08:44:a4:d7:02:c9:af:8b:8b:6c:60:
0c:b5:9f:e4:5e:2f:8e:57:fb:72:50:e0:9d:94:f2:cf:6c:8d:
71:28:8a:d6:71:7e:ef:cc:b7:66:bc:3c:bd:82:63:02:d5:b8:
f3:fd:a2:9f:c6:f7:c8:9f:4b:c6:f8:33:90:0a:24:81:21:5d:
f3:91:f9:b1:f8:2c:d1:18:7e:19:72:08:fc:00:f9:ff:4b:b5:
7a:7a:3b:06:4a:53:d0:fb:bf:03:fc:26:35:67:9c:0d:d2:90:
81:99:c4:2f:f0:f0:7e:7b:fa:c5:6a:6d:bc:a4:1a:1f:ba:ad:
a2:77:b5:11:b5:0d:f9:37:90:94:3d:bf:38:c0:7c:fa:50:11:
fd:c5:6f:cc:31:b8:29:6a:f9:a4:a7:9f:35:f6:6b:eb:2b:93:
ce:42:27:24:c4:c1:28:82:0e:52:e6:fe:12:b8:3b:fb:32:6f:
d1:ef:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org