Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vBp_0RI71tq-PX2gI72d7BsjIoU.roa
File: vBp_0RI71tq-PX2gI72d7BsjIoU.roa (raw, json)
Hash identifier: I5IXNX8tQXbCcUKHBtJRnQybbAu39//ZgpE7/cx944M=
Subject key identifier: BC:1A:7F:D1:12:3B:D6:DA:BE:3D:7D:A0:23:BD:9D:EC:1B:23:22:85
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 06644B96
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vBp_0RI71tq-PX2gI72d7BsjIoU.roa
Signing time: Tue 05 Jul 2022 04:59:23 +0000
ROA not before: Tue 05 Jul 2022 04:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212461
IP address blocks: 194.113.235.0/24 maxlen: 24
87.251.85.0/24 maxlen: 24
87.251.84.0/24 maxlen: 24
87.251.86.0/24 maxlen: 24
80.66.65.0/24 maxlen: 24
80.66.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107236246 (0x6644b96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jul 5 04:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc1a7fd1123bd6dabe3d7da023bd9dec1b232285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:de:e8:94:fb:6b:ce:84:53:17:d4:ea:78:
f8:93:f1:89:cc:a0:a3:c2:78:8b:fb:2b:70:32:76:
0b:85:fe:28:e5:2e:a0:9e:60:16:01:49:e1:a0:ba:
7c:9a:90:21:50:27:11:c8:82:5b:df:36:fe:f4:0c:
5c:71:f4:5d:a1:32:6e:ca:24:6d:12:92:83:79:fe:
14:9b:82:03:cb:bd:4a:09:c1:87:49:e7:fe:c7:78:
0e:5c:03:2e:ab:79:1d:75:fa:55:c3:40:99:6e:22:
ca:2c:e8:be:68:02:a6:e5:43:ce:f4:5f:c3:16:d8:
7d:36:ec:f6:6e:dc:fc:23:f1:68:90:8d:e9:7c:ec:
59:1e:92:fa:1a:92:b8:4e:df:d4:21:f9:c5:16:29:
95:b2:a3:8e:a8:4b:5b:69:85:76:f6:c4:e3:c9:7e:
99:e0:39:30:35:51:cc:05:f1:9c:8f:dc:8f:4f:ce:
f4:a7:62:55:de:df:33:63:e7:3b:45:8e:bb:7b:77:
26:9f:37:10:47:30:1b:d6:2b:9e:7a:6d:13:b0:16:
b8:1b:de:69:d9:65:f5:e2:79:fa:a8:69:8b:7d:62:
82:b6:3e:b0:57:3d:68:38:61:27:21:04:c6:4a:24:
e2:ec:b3:66:c5:af:8c:ed:61:6d:79:f5:91:81:8e:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:7F:D1:12:3B:D6:DA:BE:3D:7D:A0:23:BD:9D:EC:1B:23:22:85
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vBp_0RI71tq-PX2gI72d7BsjIoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.65.0/24
80.66.78.0/24
87.251.84.0-87.251.86.255
194.113.235.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a9:da:29:91:e0:a1:f2:3f:c8:27:5e:8a:aa:ea:49:1f:f3:
0b:59:95:ea:7b:44:64:e4:6d:c7:aa:03:b5:03:cd:0b:b2:95:
70:45:8f:ec:d9:53:5a:ea:83:ca:7b:bb:4d:66:b0:b7:2b:de:
4f:3f:0c:8b:d2:26:42:2d:eb:46:12:bb:9c:6c:1b:85:de:04:
84:67:b6:b0:4e:c5:80:26:24:af:e0:f3:b0:3b:4f:93:88:42:
17:e2:2f:79:69:ec:df:59:51:45:67:22:4b:c5:65:3e:25:0f:
40:21:f3:99:a1:4f:a0:9c:43:fd:f8:3d:bc:fc:b8:61:f4:c9:
9a:7d:92:49:8f:a2:75:35:aa:e5:c4:ec:e7:58:69:f1:f5:59:
36:cb:70:c5:5a:b4:0f:d3:63:6d:9b:c2:c6:54:c3:e6:7d:3c:
71:3b:7e:2a:3f:e9:57:43:0e:ec:ec:f9:36:70:57:ac:39:db:
ee:1a:8c:0e:e4:d9:68:57:ab:b5:c7:5e:a1:95:5d:44:36:1e:
ad:70:03:03:4e:e7:dd:2d:97:56:ae:16:dd:64:0c:54:92:91:
f0:db:dc:4e:09:d6:89:71:f6:d1:8a:42:67:ca:b7:e2:cb:11:
4e:70:12:8c:e0:87:2b:61:44:2b:4e:8d:e7:8f:5b:46:30:64:
40:29:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org