Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BI7MeeZvCKfIcXBneapvhx5w1PQ.roa
File: BI7MeeZvCKfIcXBneapvhx5w1PQ.roa (raw, json)
Hash identifier: Ps4grKgAaDi7hReMN0dTuGnasnskH4dgjC1/L17NPfI=
Subject key identifier: 04:8E:CC:79:E6:6F:08:A7:C8:71:70:67:79:AA:6F:87:1E:70:D4:F4
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 151CDFB5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BI7MeeZvCKfIcXBneapvhx5w1PQ.roa
Signing time: Fri 27 May 2022 13:04:14 +0000
ROA not before: Fri 27 May 2022 13:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48024
IP address blocks: 178.173.224.0/19 maxlen: 24
91.132.57.0/24 maxlen: 24
213.173.32.0/24 maxlen: 24
213.173.34.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354213813 (0x151cdfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 27 13:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=048ecc79e66f08a7c871706779aa6f871e70d4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:3b:20:64:3e:c5:a5:1b:20:08:35:43:0a:
e8:d2:80:13:d5:10:dd:7a:4b:35:bf:95:12:b8:c0:
58:60:5c:8f:71:2d:f1:f1:42:f7:14:7e:c3:ed:5b:
66:cf:38:3e:7c:f8:f0:a2:65:79:95:02:f1:a7:93:
90:25:27:f8:e2:de:73:bc:93:5f:21:7a:63:00:81:
4f:06:a2:93:9b:b4:e1:14:d8:bc:7b:05:b7:30:1e:
22:aa:0e:a9:13:b5:d9:2e:3b:01:72:0d:08:99:27:
0c:0d:4b:2d:c0:c9:0a:02:7f:0d:e0:73:6b:99:6a:
34:90:95:e9:ba:48:59:40:4c:92:d4:38:fa:61:0e:
a5:37:a6:6f:66:d8:41:dd:4c:d1:d4:c4:33:d1:31:
27:66:45:7c:04:64:ec:44:ed:cb:6f:9e:86:c7:a0:
89:9c:07:33:c1:3a:a1:87:fa:1d:6d:8d:d4:70:04:
35:26:80:dd:61:e2:76:6e:44:be:0d:9c:be:2f:bf:
c3:b9:e9:9c:3d:7c:95:82:a4:cb:21:96:00:28:ff:
d7:c5:5b:b2:d7:a2:ac:22:6f:be:68:a0:e7:ab:77:
e9:9c:64:4c:2d:68:83:b1:4a:9a:de:c9:45:8e:b5:
63:4c:83:e6:63:74:d3:9a:ac:71:7b:1b:a2:82:21:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8E:CC:79:E6:6F:08:A7:C8:71:70:67:79:AA:6F:87:1E:70:D4:F4
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BI7MeeZvCKfIcXBneapvhx5w1PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.57.0/24
178.173.224.0/19
213.173.32.0/24
213.173.34.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:fb:dc:ab:bd:e1:6e:58:ea:25:ae:db:d3:a5:18:cb:3d:02:
5c:cd:76:89:3e:ce:87:5c:bf:52:e9:1e:c6:fc:56:bc:7b:f7:
df:8b:ca:6a:4b:54:9a:34:17:cf:8b:af:20:68:9f:80:9a:50:
bc:ea:17:4e:d6:62:1c:d7:96:b3:7b:d0:87:71:9d:b4:b1:49:
18:6b:15:a2:3f:49:c6:98:e3:53:64:a3:f9:29:c2:c2:4c:08:
b7:98:49:89:2f:5a:b3:3c:9a:77:89:8b:57:d4:d2:78:2b:d9:
45:d2:16:df:74:8e:b7:c7:fb:17:24:c5:a2:3a:23:87:11:07:
7b:5d:b2:a6:3f:d0:c4:28:5e:fb:9c:05:1a:e3:a5:43:ac:b3:
08:cc:b1:af:56:f2:d5:6c:ce:f2:3f:94:7b:37:82:61:3d:9e:
fb:d8:63:07:68:28:de:7d:64:40:bf:d7:ed:3d:57:3d:82:69:
02:7b:30:19:cb:21:cc:c5:d4:63:e1:66:bd:cb:11:cf:a9:b4:
f0:ec:27:dd:af:26:76:40:55:f9:a0:c6:e6:5a:62:0d:ca:4a:
e2:d9:81:40:06:13:d1:f5:14:66:a4:83:ec:9f:41:9f:ba:bf:
b6:e1:75:b4:b1:9a:12:1d:8d:ea:b3:f0:8c:2a:f8:b9:b2:a6:
ce:5d:14:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org