Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/BrsqhXUtQHlOxhLrc0rzfeBZc_0.roa
File: BrsqhXUtQHlOxhLrc0rzfeBZc_0.roa (raw, json)
Hash identifier: QLBILxhoj2vZOT9sePQgSy54c1tNU4NFq6frD1WSSVw=
Subject key identifier: 06:BB:2A:85:75:2D:40:79:4E:C6:12:EB:73:4A:F3:7D:E0:59:73:FD
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 132268F6
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/BrsqhXUtQHlOxhLrc0rzfeBZc_0.roa
Signing time: Sat 01 Jan 2022 09:56:09 +0000
ROA not before: Sat 01 Jan 2022 09:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31431
IP address blocks: 195.128.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321022198 (0x132268f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Jan 1 09:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06bb2a85752d40794ec612eb734af37de05973fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:03:dd:ce:2a:73:5f:6d:46:87:2f:3d:85:
26:90:a7:b2:46:03:04:4b:79:7a:54:83:e9:de:15:
b3:6e:1a:e7:46:2e:e8:6d:05:b9:92:93:6c:24:7b:
a8:f2:87:86:b8:3f:0b:f1:55:ed:36:d5:8c:83:ba:
4e:d5:4f:ff:55:dd:2f:21:74:ee:b1:7e:a5:05:75:
94:fe:77:9a:07:02:f4:47:43:0b:f1:f5:26:f3:f3:
39:da:7b:3c:d2:88:c8:bb:e9:66:23:b8:3d:ac:cf:
c0:02:63:80:36:d6:54:51:f3:b4:82:ad:96:d7:9d:
df:ad:7d:0c:ac:01:98:7a:dd:e5:86:3f:d7:be:9a:
41:4e:79:72:03:cb:b8:3d:bb:90:d5:b2:e0:34:db:
a7:8a:ae:dc:10:f2:f5:ec:87:7c:59:c5:b8:4a:f2:
a3:f5:fb:68:12:59:db:a9:77:5c:91:41:5d:d8:c3:
41:40:2f:b7:42:64:ab:0b:58:ed:c5:9c:fd:3a:aa:
4f:09:f9:ff:a1:f7:15:e8:e5:08:b7:7b:aa:45:b5:
41:09:f8:31:cb:9f:31:57:90:af:69:0d:d6:88:86:
af:2c:cc:c5:14:21:01:8a:b6:69:d4:11:b6:c0:14:
82:87:64:9f:f4:fe:ed:18:94:c4:a3:ea:a8:85:3e:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:2A:85:75:2D:40:79:4E:C6:12:EB:73:4A:F3:7D:E0:59:73:FD
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/BrsqhXUtQHlOxhLrc0rzfeBZc_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.228.0/23
Signature Algorithm: sha256WithRSAEncryption
42:40:19:a4:53:bd:29:9c:25:eb:32:a3:2d:dc:ff:c5:ad:15:
77:6c:d2:b8:9d:8d:07:95:bd:5c:28:f1:17:c5:cb:62:4a:3b:
39:ea:3f:29:e1:f9:26:6c:fe:e0:46:5a:4f:e9:70:ea:ec:8d:
e3:ae:ff:c7:44:f8:d3:66:cc:9f:87:87:8c:26:63:19:15:12:
9b:04:2d:6e:cd:6e:0b:58:0a:2c:15:41:8c:d4:b7:56:fc:c0:
c4:cd:78:eb:df:0d:46:10:0f:c5:d6:f9:30:6d:6b:59:30:7a:
c9:54:5c:5b:71:5f:f2:64:9d:f7:0e:4f:1f:57:d8:ba:9e:c1:
8e:52:b6:87:23:48:f2:bb:df:e0:fe:a3:a2:1b:a8:cd:aa:c9:
48:ce:06:a2:cb:08:9d:1f:50:81:41:c5:5c:2f:34:32:b7:02:
52:c3:a2:b2:af:40:3a:a8:1c:02:c8:94:40:e3:c8:bb:f0:a0:
e3:1d:af:c4:b1:f4:31:9c:89:f0:70:7d:92:23:37:78:dd:c9:
ce:5b:55:a3:41:ac:21:d7:18:cf:18:1e:53:ed:da:8c:68:9b:
f5:6c:5d:ab:13:70:76:78:26:62:5c:57:4f:14:87:0a:f0:22:
7a:08:82:b6:05:dd:d2:a3:ed:f9:ad:e8:28:6e:5f:76:52:05:
ba:cd:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:09 2024 by rpki-client on console-ams.rpki-client.org