Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/BPEQGyxMluau5rlIFH_MStdCq4U.roa
File: BPEQGyxMluau5rlIFH_MStdCq4U.roa (raw, json)
Hash identifier: J/Z2fYER87pFsE47rtjEXAMu0UroOhhtfT6rFwNVELk=
Subject key identifier: 04:F1:10:1B:2C:4C:96:E6:AE:E6:B9:48:14:7F:CC:4A:D7:42:AB:85
Certificate issuer: /CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Certificate serial: 0181ED87347CDD09C4648B90196B48A1F1AD
Authority key identifier: BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/BPEQGyxMluau5rlIFH_MStdCq4U.roa
Signing time: Mon 11 Jul 2022 13:51:09 +0000
ROA not before: Mon 11 Jul 2022 13:51:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.23.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:87:34:7c:dd:09:c4:64:8b:90:19:6b:48:a1:f1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Validity
Not Before: Jul 11 13:51:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04f1101b2c4c96e6aee6b948147fcc4ad742ab85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:0f:a7:45:ae:9e:cc:f7:59:92:d2:2a:e9:
24:cd:81:ae:53:c7:73:a8:81:f7:55:a2:3a:f7:2f:
c6:35:ab:f6:e7:1d:58:00:ad:78:12:9b:84:a7:40:
20:d6:20:e7:e6:7e:cc:cc:ac:0c:26:aa:77:b2:2f:
84:de:82:d9:00:bf:93:10:f8:b9:18:19:83:50:b6:
69:c6:fe:bc:39:39:83:30:3d:13:88:f8:03:2d:14:
d1:64:10:57:d6:48:25:4d:f4:b6:b7:e4:cb:65:8f:
09:9e:d4:8e:00:71:d6:91:7a:f6:08:d7:71:64:b2:
e8:47:18:67:bd:ed:5d:f1:23:e4:79:e3:d2:08:95:
6c:44:ac:3e:08:aa:b7:77:c2:f1:e9:67:06:fa:67:
eb:a4:02:26:8a:de:78:df:94:2a:b6:ea:79:76:0a:
33:05:7d:ca:26:58:f6:4a:53:7f:df:3e:40:af:cf:
ac:c8:51:04:52:cb:85:f6:24:2e:1d:12:f2:88:9d:
7a:73:c1:af:c4:df:45:07:c7:fc:6d:f5:be:a5:3d:
9b:6a:bc:7b:df:2c:7c:57:35:77:aa:66:92:d7:3a:
cc:e4:6a:a4:e4:47:97:82:97:1e:00:5a:6a:41:e7:
e0:e0:10:90:7d:75:a6:41:93:47:3c:9e:22:03:25:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:10:1B:2C:4C:96:E6:AE:E6:B9:48:14:7F:CC:4A:D7:42:AB:85
X509v3 Authority Key Identifier:
keyid:BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/BPEQGyxMluau5rlIFH_MStdCq4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/v4xkNQoN_WigQ7Ih8YYLSArjUt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.205.0/24
Signature Algorithm: sha256WithRSAEncryption
64:48:45:34:25:90:2c:f2:08:1f:25:9d:ec:3b:4a:b5:38:d3:
70:dd:42:4a:50:1a:4b:c5:d8:63:bd:2a:e8:c9:a7:0d:79:6e:
84:08:e5:ef:c3:34:d1:bb:8f:f7:be:ff:4f:2b:a7:31:8a:79:
29:f5:81:a8:a9:00:6e:c4:53:2d:fd:4c:68:de:21:c6:dd:f9:
2d:54:ef:e5:91:ea:0a:d3:2d:8d:c8:d0:75:ce:ca:cc:2a:d6:
1d:69:91:60:f8:b8:d1:74:cb:43:c8:68:5b:b5:61:12:de:de:
79:2c:f3:f6:87:d0:b4:f3:76:80:2b:38:12:c5:7d:22:22:b9:
ee:dd:e6:47:6e:71:dc:d6:a9:a1:2f:4f:57:ba:88:24:83:28:
cb:82:be:68:cd:95:67:5f:be:b3:94:5b:1c:36:40:0c:87:68:
0d:86:98:62:8a:13:9c:7a:ac:b1:02:05:f8:c3:e6:a6:dd:67:
59:3f:96:ee:f2:c0:05:de:55:a6:ff:9f:b2:3d:d8:8f:c7:a2:
2c:fa:17:42:7e:1a:2f:71:c3:ab:46:02:56:90:fb:68:b8:59:
2a:a8:d7:8b:de:30:3a:0c:a7:df:51:56:ef:f1:70:26:2c:51:
2a:48:68:73:f7:fb:4d:e0:3b:91:e6:ca:91:f2:2a:4b:cf:9a:
0e:10:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:20 2024 by rpki-client on console-fra.rpki-client.org