Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/bKAUw7nbrCwK2evYU4vSaMIsMQs.roa
File: bKAUw7nbrCwK2evYU4vSaMIsMQs.roa (raw, json)
Hash identifier: bZpcpgoZSHaDcvCdZuVKIr404/7Sr0Y/LplBKUg/si8=
Subject key identifier: 6C:A0:14:C3:B9:DB:AC:2C:0A:D9:EB:D8:53:8B:D2:68:C2:2C:31:0B
Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial: 19DC44B8
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/bKAUw7nbrCwK2evYU4vSaMIsMQs.roa
Signing time: Sat 01 Jan 2022 07:57:42 +0000
ROA not before: Sat 01 Jan 2022 07:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35729
IP address blocks: 87.252.126.0/23 maxlen: 24
87.252.96.0/21 maxlen: 24
87.252.104.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433865912 (0x19dc44b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Validity
Not Before: Jan 1 07:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ca014c3b9dbac2c0ad9ebd8538bd268c22c310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:59:d2:aa:9b:d7:d2:ce:de:91:ce:1a:97:
83:81:3c:3c:74:7c:07:9d:5d:21:63:f8:2b:ce:47:
30:55:0d:8b:a6:27:28:6b:ae:04:13:1e:d1:97:0d:
d7:21:11:e8:3e:9b:d8:13:fa:cc:b1:df:9a:f0:b7:
a9:33:03:2e:10:ea:17:59:9a:b7:3b:c7:fe:04:45:
2a:ce:b4:01:e0:ad:00:2a:40:92:42:1c:b2:2a:84:
15:01:0d:58:6d:42:a8:70:85:9b:49:09:f3:59:fb:
d8:47:10:d4:a4:5a:12:24:b2:cb:8a:8a:2f:c7:68:
23:67:b6:02:dd:4f:68:43:41:44:81:34:4b:8b:d0:
6f:7e:76:97:dc:ae:b4:91:ae:a4:54:d2:28:ab:39:
1e:51:e8:ef:0f:0d:53:30:5d:77:07:79:ce:1f:48:
49:9a:fa:c6:24:7d:bb:27:3e:75:aa:68:51:30:ac:
7b:99:90:c4:a1:c6:e3:7d:d2:42:02:81:f4:ef:26:
bf:8d:13:3f:1f:37:5e:7d:44:5c:95:33:a2:1a:2d:
68:2b:be:8c:4d:7e:85:56:83:76:1d:0d:1a:f3:2c:
b0:20:3c:e6:af:df:9f:cc:be:39:d8:34:39:62:07:
ac:41:59:87:19:32:25:6a:e0:5f:c6:08:fd:19:75:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:14:C3:B9:DB:AC:2C:0A:D9:EB:D8:53:8B:D2:68:C2:2C:31:0B
X509v3 Authority Key Identifier:
keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/bKAUw7nbrCwK2evYU4vSaMIsMQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.96.0-87.252.105.255
87.252.126.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:99:22:58:22:ba:64:ae:d8:21:3f:2c:68:7a:a3:54:32:b9:
11:e3:0b:ff:fd:a0:fc:54:7e:62:da:f3:6c:e1:09:6e:c0:41:
07:a1:d5:d0:2c:b6:b1:c6:f4:6f:fa:30:9a:f1:1c:4d:04:ac:
13:6f:77:81:e9:9a:88:48:d3:8b:21:a8:1f:d9:c1:46:b7:e2:
36:39:8d:5a:0e:99:52:0a:79:ee:bf:39:ab:30:aa:63:ee:c3:
41:e2:70:ba:77:04:50:cd:db:72:aa:ff:a6:b4:bd:91:22:fb:
c2:0d:51:82:b8:ee:f3:9b:4c:1e:dd:92:8a:fd:1c:da:33:aa:
00:c8:34:46:02:de:bb:ef:17:6b:2a:c6:30:70:5c:0d:11:d6:
c0:ed:8d:c3:63:6b:b5:33:2b:aa:0c:75:0a:9b:15:73:4b:69:
e3:5c:9d:32:60:bc:c2:1a:d5:d9:bc:5e:73:55:a9:f8:e6:ab:
a7:c7:12:c4:95:b6:75:d5:e3:f1:65:60:0b:e4:d8:b9:89:bd:
76:38:32:41:df:8e:4c:a5:15:2e:4a:70:25:fd:cd:69:9f:56:
ea:cb:22:a8:a6:8d:38:18:33:52:a7:7f:da:96:e7:5f:13:6a:
ed:dc:ab:6a:e3:52:88:b0:99:23:c3:be:74:84:5d:ad:87:0b:
55:e7:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:53 2024 by rpki-client on console-ams.rpki-client.org