Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/BWLlEZTYj9C6DGB09xQ646krn0E.roa
File: BWLlEZTYj9C6DGB09xQ646krn0E.roa (raw, json)
Hash identifier: CjmY9/le0Z66z0t9SOMCmwtZr0sFd3PEc8jcinEqSfc=
Subject key identifier: 05:62:E5:11:94:D8:8F:D0:BA:0C:60:74:F7:14:3A:E3:A9:2B:9F:41
Certificate issuer: /CN=11466326406436e31478b7bca2dda16c96d5a964
Certificate serial: 077719FA
Authority key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/BWLlEZTYj9C6DGB09xQ646krn0E.roa
Signing time: Tue 15 Mar 2022 21:07:29 +0000
ROA not before: Tue 15 Mar 2022 21:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49434
IP address blocks: 185.142.55.0/24 maxlen: 24
185.142.53.0/24 maxlen: 24
185.142.54.0/24 maxlen: 24
193.178.0.0/24 maxlen: 24
193.177.162.0/24 maxlen: 24
193.177.182.0/24 maxlen: 24
193.177.0.0/24 maxlen: 24
2a0f:9240::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125245946 (0x77719fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11466326406436e31478b7bca2dda16c96d5a964
Validity
Not Before: Mar 15 21:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0562e51194d88fd0ba0c6074f7143ae3a92b9f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:21:a1:8d:d5:ab:51:e2:2e:7d:cd:51:9f:
aa:b4:47:30:ec:84:a0:47:3e:b3:56:a7:4e:91:d2:
31:f2:6a:f3:4f:88:72:7f:dd:d6:8d:69:7b:70:ec:
6a:b3:d6:86:00:05:ea:0e:94:46:85:f4:ed:c2:b9:
de:d1:1b:82:c3:44:bf:11:50:06:5e:05:c5:a3:fa:
b1:b4:82:e2:77:6a:d3:59:d9:4a:78:af:b1:e8:8e:
ab:49:24:87:d9:67:19:b0:15:62:77:1b:d5:e5:10:
38:eb:d6:d1:89:39:cd:e0:08:c1:20:cb:ad:e6:62:
12:b4:80:e2:57:d3:1c:eb:cb:17:2c:29:c2:23:d3:
94:d2:db:ef:ca:86:cb:2b:2c:c2:9d:3b:8b:bf:8c:
9b:e8:4f:33:71:82:56:18:c2:03:88:34:1e:ba:01:
0c:b5:45:a2:c1:b4:cc:44:cc:e7:9b:ad:8f:75:40:
c4:b0:22:c6:73:19:58:37:0d:df:3b:cd:a0:db:38:
34:9d:ea:1f:0d:4c:d9:7b:80:0c:bf:73:7b:47:23:
56:a8:62:05:47:41:f4:34:19:e1:88:66:3f:d5:90:
f5:03:01:35:48:23:56:5e:f7:be:16:7e:9e:b8:0b:
2c:a5:73:9a:48:67:43:36:13:78:de:a2:a6:0d:52:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:E5:11:94:D8:8F:D0:BA:0C:60:74:F7:14:3A:E3:A9:2B:9F:41
X509v3 Authority Key Identifier:
keyid:11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/BWLlEZTYj9C6DGB09xQ646krn0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.53.0-185.142.55.255
193.177.0.0/24
193.177.162.0/24
193.177.182.0/24
193.178.0.0/24
IPv6:
2a0f:9240::/32
Signature Algorithm: sha256WithRSAEncryption
20:3a:de:e4:77:a3:c6:7d:e9:f0:ff:43:9d:db:3d:0a:04:f8:
8c:9c:02:bc:2f:2a:23:f7:b5:e6:4a:75:5f:b1:74:dd:ab:d5:
30:5c:2f:d3:f4:1d:e0:ce:ec:24:8c:c6:8f:e1:4b:40:5b:5a:
25:63:37:4d:43:06:20:07:96:28:2f:3d:ee:fd:9f:1d:91:fc:
5c:5b:3a:ee:23:6b:e7:bc:f4:d3:0e:4a:f7:09:b9:ea:c0:9c:
65:b8:cf:c9:7e:f8:55:10:64:26:d8:df:3c:27:90:75:f6:fe:
a3:be:cb:84:ad:9c:0f:14:a3:ce:46:7d:4e:e5:72:b3:f0:d9:
66:30:d8:42:98:4f:c7:ab:4b:56:75:2e:34:7a:a4:b2:11:95:
98:c4:7e:9c:ed:18:90:d0:23:bb:e5:38:01:b7:8f:16:11:14:
f8:f1:d9:82:11:a0:5e:0b:db:05:42:22:0a:99:7a:bb:dc:fb:
9c:05:93:77:b2:fb:8a:d1:f9:32:21:45:fc:1f:b3:61:af:32:
bf:d9:d6:28:19:a1:a0:d3:e8:7f:ba:cc:ec:9f:01:3e:d2:33:
d6:74:35:28:f0:be:ed:83:89:16:da:98:43:ae:5d:6f:61:a1:
9b:b0:ab:3c:42:2a:6a:bf:10:31:d9:0b:62:31:21:14:0d:52:
aa:de:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:10 2023 by rpki-client on console-ams.rpki-client.org