Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BmT52wPFlz9pk9BBHBNZa3_UQiA.roa
File: BmT52wPFlz9pk9BBHBNZa3_UQiA.roa (raw, json)
Hash identifier: mllZkly3/3MiEHAXF7Ok63TEvkJ6XTuI6282O7VjVHs=
Subject key identifier: 06:64:F9:DB:03:C5:97:3F:69:93:D0:41:1C:13:59:6B:7F:D4:42:20
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0183CCF9F51FAEADC60AC4717BA7A8D2AAE4
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BmT52wPFlz9pk9BBHBNZa3_UQiA.roa
Signing time: Wed 12 Oct 2022 16:14:36 +0000
ROA not before: Wed 12 Oct 2022 16:14:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 37.218.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:f9:f5:1f:ae:ad:c6:0a:c4:71:7b:a7:a8:d2:aa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 12 16:14:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0664f9db03c5973f6993d0411c13596b7fd44220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:5e:e2:80:81:9a:73:13:a8:df:70:c2:cc:
fa:e0:29:f6:7b:81:39:d8:43:d1:c2:d1:53:ba:a3:
47:bb:a7:8b:0c:f2:75:32:b5:5f:1e:e4:9c:96:fb:
76:c0:41:9f:d0:9c:5a:2b:a2:a7:94:60:2f:13:cb:
30:45:6a:13:e2:da:0c:23:92:f2:5a:de:60:89:97:
69:a9:b2:be:77:01:3f:41:d6:bf:24:f4:d2:5f:f5:
ec:96:e7:66:61:e0:3a:bc:e3:00:b4:59:c8:4e:cf:
90:19:f6:77:3e:ce:ac:20:7e:d8:02:ea:9f:8d:18:
02:82:53:3d:d5:93:47:84:cd:17:60:6d:3e:0f:9d:
3c:bf:36:44:b7:49:9a:82:c6:63:fe:b1:a0:68:6a:
26:69:87:d1:c0:45:82:b0:b2:60:08:08:d9:56:3d:
6d:5a:02:58:e2:af:c1:2a:01:48:c4:58:39:9a:be:
3c:f7:bf:fb:3a:01:d6:1f:3b:6b:fb:8f:3d:a3:5f:
ff:99:98:4a:bf:80:e9:8f:86:20:be:f4:ad:53:84:
fb:44:69:a4:d7:3d:ea:35:35:f5:bb:23:c1:e2:78:
b1:11:55:f0:c8:00:0e:fd:5a:3e:dc:67:66:99:6a:
2f:46:48:de:3d:d9:2a:a4:a6:79:f2:28:9c:a1:aa:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:64:F9:DB:03:C5:97:3F:69:93:D0:41:1C:13:59:6B:7F:D4:42:20
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BmT52wPFlz9pk9BBHBNZa3_UQiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.208.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:70:83:f2:7a:93:09:c8:76:9a:67:78:53:c0:a7:b6:f9:cf:
74:45:59:a3:04:80:e7:98:c7:98:0e:47:b4:5b:00:56:08:82:
4d:72:e3:51:3d:d0:87:12:47:3f:31:9d:34:8f:b9:99:e7:ee:
d7:e6:b4:a9:b5:fa:a8:c0:24:e3:9c:c0:dc:77:18:a2:16:2e:
5e:8f:3b:0e:95:bf:62:92:11:0b:8e:1d:b3:b0:e3:8f:8a:8e:
a2:f2:63:51:b2:76:53:4f:4a:f0:f2:96:60:5b:37:07:b1:fa:
d2:4f:c2:d0:f6:9e:88:26:fe:6e:0e:68:21:36:d1:56:e5:ba:
f8:21:b4:af:7d:da:8e:88:d3:6c:d9:a0:0a:aa:37:da:b8:8d:
c4:08:8b:14:ab:80:1d:79:6e:04:f3:37:46:7b:fc:af:99:2e:
6d:79:90:2f:78:73:ae:a8:10:65:60:ae:82:aa:67:cd:69:32:
e5:7a:a2:4c:81:5c:d7:25:08:de:96:66:21:08:59:14:dc:f2:
26:c3:c6:dd:66:5c:b1:06:cf:4b:9e:6b:13:95:90:a7:22:1c:
7c:8a:f6:be:e7:7e:44:fd:9f:0d:34:e6:34:71:67:b9:e9:70:
9f:49:1b:21:a8:e1:a1:7e:04:3d:7f:a1:c1:16:85:ee:c8:3f:
2d:bc:de:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org