Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/bpOpyGo_8tAdO_B2jfManJ1DvQk.roa
File: bpOpyGo_8tAdO_B2jfManJ1DvQk.roa (raw, json)
Hash identifier: jYvRB+c80QOSLidRfmyuCW35h8exg7XGEGpptLEKQuY=
Subject key identifier: 6E:93:A9:C8:6A:3F:F2:D0:1D:3B:F0:76:8D:F3:1A:9C:9D:43:BD:09
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 018570303991FDB9DC45C5D8AFEA8D3B1DE5
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/bpOpyGo_8tAdO_B2jfManJ1DvQk.roa
Signing time: Mon 02 Jan 2023 01:54:46 +0000
ROA not before: Mon 02 Jan 2023 01:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34934
IP address blocks: 78.24.89.0/24 maxlen: 24
185.55.76.0/24 maxlen: 24
185.160.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:39:91:fd:b9:dc:45:c5:d8:af:ea:8d:3b:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jan 2 01:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e93a9c86a3ff2d01d3bf0768df31a9c9d43bd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:26:f4:2d:72:7a:b0:06:19:ab:de:01:dd:
31:9e:56:83:90:29:1d:11:7b:5b:eb:7c:be:f8:9a:
fd:e1:7c:f8:20:bd:1b:20:d1:c2:b2:fc:0a:76:15:
aa:b7:0b:a1:b7:04:d5:90:2d:50:11:87:06:42:55:
ac:a9:d8:63:fa:06:5c:8d:ef:a3:93:a1:b0:98:1c:
38:c9:13:87:e0:8d:f2:3a:7f:90:06:3f:be:54:10:
a7:a4:f3:90:28:ab:99:ce:ff:10:d4:78:97:2d:b6:
fc:1a:bf:8c:fd:f5:9c:be:4c:50:82:6d:39:88:01:
47:0e:73:bb:6f:a7:fc:84:5d:54:61:61:3c:fd:91:
5d:de:67:d5:97:ca:81:85:86:f4:d0:b0:99:d6:74:
d0:4d:c6:1e:0f:42:f5:32:9e:17:f0:d7:f8:e8:05:
bb:6f:d0:8a:5e:3b:fa:79:7a:b9:a2:5a:4e:40:5f:
00:8d:4b:45:99:74:ef:a9:91:30:65:71:55:e1:7f:
26:ee:2d:2c:e2:03:cf:82:17:19:4f:9f:64:f8:6a:
35:5e:07:74:bf:79:8b:e8:7b:a4:ac:4b:8a:30:28:
87:5b:64:a8:00:52:2f:a5:73:06:ab:a6:65:ab:f4:
3c:ca:84:47:26:5a:34:6f:39:0a:75:a7:49:bd:99:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:A9:C8:6A:3F:F2:D0:1D:3B:F0:76:8D:F3:1A:9C:9D:43:BD:09
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/bpOpyGo_8tAdO_B2jfManJ1DvQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.89.0/24
185.55.76.0/24
185.160.255.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8d:3a:3f:80:92:40:17:66:63:0c:74:88:5f:7a:03:43:05:
ad:06:99:eb:b4:0f:5e:1e:29:56:5a:b3:4e:93:f2:e7:89:b6:
6e:dd:18:e0:76:7a:7f:2e:1a:03:57:3b:2e:32:5b:f6:fd:fb:
0f:70:cd:11:73:a0:f6:6a:67:49:ad:c7:d4:b6:43:48:54:ab:
35:ce:65:3a:f2:6f:4d:53:f9:ad:b7:19:ba:4e:20:cf:f7:9d:
f7:e2:b6:51:a3:eb:84:c4:3b:74:c6:b4:45:b9:f1:3e:12:d0:
3f:77:47:2a:a9:51:3e:ef:42:c7:48:4c:84:bd:3a:78:a9:b8:
1c:6e:28:04:f5:94:3f:dd:91:5e:32:a2:6e:5d:88:14:7b:14:
e0:a6:1b:91:12:a6:fa:b2:5d:8a:4a:63:25:10:57:f1:16:b8:
f1:c0:31:17:c6:3b:58:d6:28:dd:71:2c:ad:fa:4e:a0:32:61:
91:61:2d:41:3a:ae:78:b1:1a:06:41:ea:2e:c7:a1:bf:85:d9:
bc:ce:74:df:34:ad:60:60:c9:b2:2e:a9:19:65:a6:2e:ec:9a:
92:e6:3f:e5:13:5f:50:f7:70:2a:64:22:90:62:cd:d8:76:fc:
96:76:7c:5e:2c:19:2e:bf:67:71:c9:88:cc:9d:99:ec:4d:a7:
56:4e:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:34 2025 by rpki-client