Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/bj-dOvARj1cQRlFmabtL9IEp8hw.roa
File: bj-dOvARj1cQRlFmabtL9IEp8hw.roa (raw, json)
Hash identifier: 2/wptLSCa0IhhKo+V4k/X8Upx5VExgwuGMb+WWucu28=
Subject key identifier: 6E:3F:9D:3A:F0:11:8F:57:10:46:51:66:69:BB:4B:F4:81:29:F2:1C
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0184144DAF0028986484A454B03052A6422B
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/bj-dOvARj1cQRlFmabtL9IEp8hw.roa
Signing time: Wed 26 Oct 2022 12:39:06 +0000
ROA not before: Wed 26 Oct 2022 12:39:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.133.104.0/22 maxlen: 22
5.134.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:4d:af:00:28:98:64:84:a4:54:b0:30:52:a6:42:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Oct 26 12:39:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e3f9d3af0118f571046516669bb4bf48129f21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:b5:d0:e4:b8:92:91:79:ee:44:26:cc:98:
b4:9e:2b:6a:22:19:ca:27:ea:e9:28:cf:d4:db:fd:
d7:0c:0b:71:68:9a:26:2a:68:f7:39:bd:16:bc:20:
c1:fe:f1:03:d1:7d:c3:cf:4f:38:b6:a8:3a:b3:c2:
ee:b0:7f:3a:49:d3:fc:f2:ac:13:6d:e6:d7:c1:b5:
5b:3c:c3:06:56:9c:3b:57:5a:c9:c1:0d:53:4a:ac:
61:22:a2:eb:f1:34:ed:2e:74:59:40:a8:c7:9d:24:
53:02:5b:4b:f8:64:1f:cc:e8:64:82:ca:59:cf:ae:
69:f4:55:e5:44:68:82:37:f3:42:07:c1:52:45:b7:
7b:bb:a0:8f:d8:0d:01:49:22:c0:d0:92:80:08:32:
21:b9:19:ed:8f:6a:c3:b7:c9:ab:66:17:19:b6:a2:
07:01:6c:7d:69:b7:a5:fe:89:30:b9:86:59:99:3c:
d0:fa:e3:af:36:4b:ae:0b:e7:12:f1:92:c8:61:19:
03:dd:54:37:4d:6b:c3:45:fc:0b:72:b0:46:b8:69:
87:b6:20:d4:dc:54:d2:be:35:45:7c:10:e7:a5:82:
da:f9:cf:8c:c4:d8:f8:7b:97:e0:27:49:16:f8:8d:
e9:18:75:2b:14:f0:57:07:d9:fc:b1:3b:61:41:43:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:9D:3A:F0:11:8F:57:10:46:51:66:69:BB:4B:F4:81:29:F2:1C
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/bj-dOvARj1cQRlFmabtL9IEp8hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/22
45.133.104.0/22
Signature Algorithm: sha256WithRSAEncryption
96:fa:03:f0:d1:9d:60:c8:44:d7:7b:6b:9b:a2:1b:ae:58:a4:
27:89:0b:bc:87:62:68:b9:82:48:3b:ed:ab:3f:7a:ec:37:02:
0a:b0:91:b3:81:17:d6:ed:9a:a3:e2:df:60:ec:10:2a:68:8b:
59:75:21:41:4d:d9:bc:9b:14:96:48:5e:6d:3d:61:73:67:67:
f3:b9:25:9e:6b:9c:c5:47:08:97:ea:8e:5d:87:a9:81:64:34:
5c:49:ce:aa:39:8d:b0:bd:7b:ac:76:4d:6b:49:9d:e3:69:35:
fc:87:08:78:10:e6:29:82:1c:15:00:9c:f7:9a:1a:42:b6:8d:
1f:01:14:97:37:fb:da:3e:bc:4d:1d:82:db:b4:81:c6:32:ee:
1a:e3:39:85:7c:54:3d:48:05:04:12:60:c5:42:85:ea:b1:cf:
98:c2:d4:1b:6e:e3:ec:a0:57:8e:40:79:80:c1:3b:2a:bc:76:
34:dc:a2:1b:d4:76:f7:c9:c7:1b:3c:05:91:28:b7:8b:3f:6b:
19:f8:e1:dd:a3:e6:17:bd:82:c4:2d:d9:ac:65:f0:cd:85:ce:
b4:2e:78:ba:2f:6d:72:b2:e8:3b:25:35:d6:ea:dd:c0:a2:b6:
3b:79:4f:d7:80:38:8e:d5:16:74:75:01:43:a9:be:39:ed:a6:
03:12:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org