Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bhiVwbZZ27JJLEmPTA_qEY8M-3I.roa
File: bhiVwbZZ27JJLEmPTA_qEY8M-3I.roa (raw, json)
Hash identifier: KXw21703ZVXBGso0khVtnHliCUij4XT3UclaolzYn/c=
Subject key identifier: 6E:18:95:C1:B6:59:DB:B2:49:2C:49:8F:4C:0F:EA:11:8F:0C:FB:72
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03D401F5
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bhiVwbZZ27JJLEmPTA_qEY8M-3I.roa
Signing time: Sat 01 Jan 2022 13:04:01 +0000
ROA not before: Sat 01 Jan 2022 13:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 185.241.122.0/24 maxlen: 24
185.241.123.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
185.225.244.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.246.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
185.225.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64225781 (0x3d401f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e1895c1b659dbb2492c498f4c0fea118f0cfb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:95:b6:1b:46:61:4f:89:5f:97:00:07:9e:
1b:41:f5:da:35:14:ba:92:81:23:0c:87:f2:86:17:
88:3d:52:f8:95:96:38:31:6d:c6:d7:26:f7:c1:f4:
48:e6:2e:cb:6a:0d:a8:87:34:c1:32:f3:c1:3a:8f:
37:a4:c2:99:b0:55:ee:c5:ba:42:15:a4:86:ff:63:
01:80:5d:99:4d:ea:9c:ba:ad:da:a0:e2:22:3a:a5:
a0:19:e2:c0:94:53:8e:98:41:2e:e2:90:63:c5:17:
c0:50:78:8d:9f:c6:ea:88:4a:2c:db:4b:b8:a6:6a:
d6:33:44:49:12:5b:ba:de:73:56:5b:1f:11:1d:01:
4e:85:b4:09:03:c2:68:63:59:f9:d4:1f:17:71:34:
cf:86:0e:19:df:8a:64:5e:93:d3:ea:95:7f:d7:3e:
f8:b3:a2:79:ee:a3:96:b8:a6:03:54:f9:88:0b:d3:
d1:ac:b9:9d:e6:d3:7e:42:4d:1d:7a:43:77:d8:ad:
57:cf:b2:40:dc:c4:7b:0e:b2:88:a0:65:be:63:84:
b3:68:e4:e3:09:78:e5:fe:cb:f4:69:a5:1c:63:fe:
8f:f3:33:52:dc:db:18:d8:7f:11:a7:11:5e:bb:7b:
46:37:6b:f3:dd:0c:aa:6b:ae:f2:49:04:bf:2f:78:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:18:95:C1:B6:59:DB:B2:49:2C:49:8F:4C:0F:EA:11:8F:0C:FB:72
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bhiVwbZZ27JJLEmPTA_qEY8M-3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
185.225.244.0/22
185.241.122.0/23
194.31.104.0/22
Signature Algorithm: sha256WithRSAEncryption
85:12:a3:dd:bf:0e:97:26:59:ab:38:68:ea:4c:2e:9a:c0:84:
bf:dc:e3:f1:83:56:f4:6c:51:72:76:f8:d6:3e:7b:6a:22:75:
0b:46:11:4a:5a:c4:2a:2c:d8:4e:7d:dd:88:00:c4:7c:59:ba:
24:e4:b1:18:16:29:12:8e:27:03:bb:7a:6d:ca:50:00:04:e0:
23:d9:a6:0e:a7:51:27:61:97:9b:04:55:ff:4c:1b:2d:1f:59:
8c:e1:b0:55:33:5d:c2:1e:7e:7c:23:9f:f9:aa:e6:3c:d4:71:
fc:51:20:9e:8a:16:21:17:ca:1a:58:ba:f9:11:45:8e:27:02:
64:c6:a1:88:b5:bc:b4:9e:fd:65:49:de:9d:55:6e:9d:ac:2e:
fb:42:fe:5e:f1:c5:a9:50:07:73:ae:dc:e0:a3:23:9e:b8:07:
87:d4:49:01:c7:76:ce:f3:74:b6:da:e9:1a:26:aa:d5:b4:07:
12:6f:04:af:08:e2:25:a9:81:89:b0:be:8e:f6:a6:af:12:a2:
34:3a:04:17:e7:bf:6b:de:f4:81:75:49:39:10:35:58:ad:73:
46:14:f3:a5:16:2e:e3:29:cd:6a:a2:3c:62:ad:18:07:7a:f8:
dd:c8:17:18:bc:c5:6e:89:de:3d:48:ed:97:e0:05:c1:fa:55:
a6:e2:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org