Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bwTZ61yU5b8ekxff28cKRcxbDME.roa
File: bwTZ61yU5b8ekxff28cKRcxbDME.roa (raw, json)
Hash identifier: KZaP95JLahhQAcmJZVSHA3dGAtf1IXO6R5n0vU1Aqm8=
Subject key identifier: 6F:04:D9:EB:5C:94:E5:BF:1E:93:17:DF:DB:C7:0A:45:CC:5B:0C:C1
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0184BFFA45E694099939516AED7DBA458D9F
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bwTZ61yU5b8ekxff28cKRcxbDME.roa
Signing time: Mon 28 Nov 2022 20:42:40 +0000
ROA not before: Mon 28 Nov 2022 20:42:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25227
IP address blocks: 188.130.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:fa:45:e6:94:09:99:39:51:6a:ed:7d:ba:45:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 28 20:42:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f04d9eb5c94e5bf1e9317dfdbc70a45cc5b0cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:f0:df:f9:0a:6e:77:01:03:58:d1:2d:b9:
de:cf:2a:8f:73:50:0d:fb:07:f5:ef:e2:74:b7:13:
03:4c:89:b0:3d:a8:58:c1:0f:bd:6a:18:12:1d:8b:
63:72:e6:36:04:ae:05:f1:48:65:7a:16:8f:a7:31:
4b:86:c1:53:30:9a:ab:32:e4:b0:c5:43:16:5c:4a:
77:44:9b:ad:61:9f:2f:88:d6:29:c3:37:58:97:3f:
b9:f6:f6:17:7e:88:ac:22:87:d3:2c:0a:a1:6e:87:
1d:6c:0d:f7:dd:7b:95:63:b2:87:6f:32:ba:a3:14:
9d:a9:3d:18:ee:68:f4:e6:36:16:5d:46:9a:72:f1:
77:10:66:7f:64:f9:e8:8d:c0:5f:f5:78:1b:85:87:
15:f4:fe:29:07:0d:2a:0e:ab:a7:d3:31:db:e8:07:
92:8d:af:fe:2a:2e:3d:52:c1:73:3d:70:eb:97:69:
89:61:f3:54:b1:a6:ff:7f:6b:eb:08:1e:78:65:21:
3d:35:4a:fe:b4:b6:5f:03:2f:36:5f:93:7c:b6:f8:
13:b1:4a:31:d7:0e:59:48:a1:e1:ad:30:76:0a:59:
9f:10:3f:3e:28:3e:45:b7:81:b6:e1:77:d0:cd:4b:
17:fb:ed:71:8b:9a:34:64:fd:f4:c2:c7:19:8d:22:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:04:D9:EB:5C:94:E5:BF:1E:93:17:DF:DB:C7:0A:45:CC:5B:0C:C1
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bwTZ61yU5b8ekxff28cKRcxbDME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ab:fe:3e:d8:b2:71:5d:74:04:39:5a:f1:83:4b:e1:a5:2c:
09:fa:96:99:40:ca:7b:e2:73:58:25:e1:8f:0c:c1:bd:25:b0:
e5:47:86:da:ff:7c:cd:ca:ae:34:8d:e8:7b:49:ed:02:b4:4f:
8a:ce:84:18:64:fa:7d:8f:b7:95:fa:6e:20:0c:b7:63:93:0d:
6f:a7:18:34:20:a4:47:24:1e:91:5e:db:e9:89:a2:57:2a:a8:
14:ca:80:ec:55:81:18:01:6b:c9:61:9b:71:10:d4:ee:fa:7f:
6e:e8:ca:e9:3e:e3:92:1c:58:6e:cb:60:75:b7:86:67:07:2c:
2f:be:89:e3:fa:66:ce:cf:63:61:7a:49:fb:3b:81:26:39:27:
71:0f:03:04:98:6a:bc:f9:a8:ff:9c:7b:dd:c3:77:13:bd:f1:
54:64:cc:9a:11:40:a5:69:8c:4d:28:39:d2:c9:f2:f7:44:71:
ec:e9:4c:2d:f0:2b:1c:cf:46:a5:2d:dd:55:a2:c8:5e:49:6f:
09:de:65:36:15:60:91:86:61:d3:c3:54:a0:13:65:e6:fd:30:
1b:e6:74:e4:27:dc:89:31:a5:88:6c:d7:25:4c:3e:55:a7:f5:
d3:aa:70:ee:f3:59:48:26:c0:d3:ee:24:d0:0e:f0:f3:c8:c5:
50:9b:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org