Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/bCUhG22txz-9BgYyYyuJwmYIm6A.roa
File: bCUhG22txz-9BgYyYyuJwmYIm6A.roa (raw, json)
Hash identifier: AMReQ5HXGDduQ2Xt08a6sXD9tY/UYkYS/zNSOJ6JERU=
Subject key identifier: 6C:25:21:1B:6D:AD:C7:3F:BD:06:06:32:63:2B:89:C2:66:08:9B:A0
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 018506F58B438979BCE8645F5F8AB7CDEC51
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/bCUhG22txz-9BgYyYyuJwmYIm6A.roa
Signing time: Mon 12 Dec 2022 15:30:33 +0000
ROA not before: Mon 12 Dec 2022 15:30:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 92.246.88.0/24 maxlen: 24
92.246.91.0/24 maxlen: 24
92.246.90.0/24 maxlen: 24
92.246.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:f5:8b:43:89:79:bc:e8:64:5f:5f:8a:b7:cd:ec:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Dec 12 15:30:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c25211b6dadc73fbd060632632b89c266089ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:6b:c3:b5:9c:dd:f1:83:68:96:79:02:ba:
f7:dc:6d:e4:e1:4f:78:96:ee:16:c1:57:bb:90:69:
99:27:2e:3b:1a:62:e9:09:3c:00:6d:58:ec:a4:82:
e4:34:92:eb:58:bd:e5:50:f2:75:db:c0:4a:d1:2e:
fe:e5:71:f6:57:15:d0:f9:35:93:47:96:f2:41:e3:
1c:3e:2c:d8:8d:29:ec:93:93:8b:81:b2:0f:75:00:
aa:b8:5f:f7:38:5d:60:5e:ae:c4:8c:71:77:6d:66:
aa:06:1e:09:72:78:d8:44:3a:1f:3f:a7:4a:de:8e:
9e:f4:d8:a7:fd:66:23:7e:19:a6:61:bd:39:ad:0f:
b2:f6:e8:fe:4c:3a:84:4f:b7:df:00:7f:df:8e:15:
7b:e7:7b:77:cb:fa:cd:18:cb:33:e3:be:94:8f:17:
14:4f:5c:50:72:b7:1d:82:58:40:8c:75:3c:0d:a3:
b6:63:f5:fa:54:16:f2:08:59:e5:f0:ba:aa:ba:ad:
c3:97:76:8e:16:7d:d8:c9:75:55:9a:af:85:9d:d1:
fc:20:ff:e2:cc:f0:f5:b5:92:9c:56:e3:64:57:0f:
b2:a8:21:01:5b:0e:ab:85:b2:fd:3e:73:06:b4:01:
e3:14:9d:6d:99:db:9c:8c:23:6c:b7:72:be:56:6b:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:25:21:1B:6D:AD:C7:3F:BD:06:06:32:63:2B:89:C2:66:08:9B:A0
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/bCUhG22txz-9BgYyYyuJwmYIm6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
51:5b:3f:24:fe:a7:ea:a1:d0:6d:71:6b:c1:a9:1f:2a:da:e8:
ff:df:79:ac:ef:ab:15:d5:d7:c1:68:b1:eb:d1:48:58:ff:98:
35:1a:14:54:83:9f:21:1c:78:34:99:fe:13:ea:ca:be:be:65:
ad:76:41:4f:0f:8e:b8:7d:4a:6e:72:b0:aa:d7:a8:1e:38:04:
4e:75:75:76:97:50:d9:be:9e:56:c8:a8:67:1d:f2:0d:34:2f:
39:3d:98:a7:2b:cd:75:d7:82:21:02:c7:8e:c7:57:03:ec:48:
7f:14:2f:da:bf:a4:fd:67:9c:7c:ff:d2:70:8c:d2:cd:9c:4b:
5b:e4:b8:5c:d1:8b:4c:62:93:d0:98:22:02:7a:35:3d:11:75:
4f:bc:90:e9:5e:8f:a7:fe:8b:83:05:b7:2e:ee:a8:cf:cd:e9:
51:87:10:28:4e:d4:a6:b6:13:63:7d:e6:32:3e:8f:b0:65:56:
80:79:ff:25:eb:d5:95:ba:43:b8:a2:57:66:0a:cf:ee:26:21:
08:cb:37:e1:44:0f:a4:7d:c6:41:64:55:0f:ef:38:3b:c8:8a:
c0:88:f6:ff:89:8e:63:c0:01:2e:00:7a:59:34:41:00:49:cc:
53:36:bf:02:15:a6:04:56:ef:17:7d:37:30:36:2e:99:eb:30:
3c:35:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:18 2024 by rpki-client on console-ams.rpki-client.org