Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Bnt4FOLcb62OUVzwsl4kH7eu8lk.roa
File: Bnt4FOLcb62OUVzwsl4kH7eu8lk.roa (raw, json)
Hash identifier: Krh0lzzZKFJG4FA/xXstib+QZjhup0gvw2MWyhfpsEM=
Subject key identifier: 06:7B:78:14:E2:DC:6F:AD:8E:51:5C:F0:B2:5E:24:1F:B7:AE:F2:59
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 05363FCE
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Bnt4FOLcb62OUVzwsl4kH7eu8lk.roa
Signing time: Fri 04 Feb 2022 16:22:45 +0000
ROA not before: Fri 04 Feb 2022 16:22:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 185.100.156.0/23 maxlen: 24
185.77.136.0/23 maxlen: 24
185.104.150.0/24 maxlen: 24
185.104.148.0/23 maxlen: 24
185.101.202.0/24 maxlen: 24
185.101.200.0/23 maxlen: 24
185.111.24.0/23 maxlen: 24
185.111.26.0/24 maxlen: 24
185.78.78.0/23 maxlen: 24
185.97.78.0/24 maxlen: 24
185.97.76.0/23 maxlen: 24
185.98.42.0/24 maxlen: 24
185.98.40.0/23 maxlen: 24
185.103.62.0/24 maxlen: 24
185.103.60.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87441358 (0x5363fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 4 16:22:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=067b7814e2dc6fad8e515cf0b25e241fb7aef259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:fe:34:e8:17:96:39:1f:57:da:1a:16:f7:
a7:d1:0f:ca:2f:bb:13:82:9e:93:80:75:53:7c:6a:
a3:49:8a:69:c0:f1:40:13:62:08:bc:fd:6c:d4:88:
ba:6b:33:02:d3:77:0e:c0:70:0d:b0:95:c7:c1:6a:
8b:76:e3:2c:9a:9d:eb:bd:4e:6d:f0:32:dc:ba:82:
7d:25:51:e6:a6:39:0d:c8:16:c4:d1:ad:d4:55:d3:
64:f1:8c:1e:e3:69:5a:e9:04:b6:08:6b:93:37:b0:
42:44:10:1d:fa:58:34:3b:25:51:9b:8e:e6:e6:99:
6c:1f:97:e3:44:61:e8:d7:76:c0:47:e0:98:1f:45:
8f:29:ec:cc:d8:b5:8f:50:a2:c1:9e:0a:6e:3f:eb:
a1:f8:7f:46:40:f7:d5:0b:22:e3:4d:46:3c:79:a0:
8a:88:6f:f5:26:61:da:92:eb:aa:81:be:7a:ad:72:
0b:3a:d9:17:63:64:f0:f7:df:08:a4:3d:dd:32:93:
26:2c:59:d4:f8:e4:cf:90:84:e8:1c:f2:f3:ff:71:
83:f7:9a:96:14:b8:4c:97:e9:e9:7d:e9:6e:fe:3f:
0e:88:af:c6:ff:85:a6:02:a8:1a:8a:07:64:84:81:
39:7a:ec:a7:ed:be:63:9c:e5:f7:ec:ec:6f:42:d6:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:78:14:E2:DC:6F:AD:8E:51:5C:F0:B2:5E:24:1F:B7:AE:F2:59
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Bnt4FOLcb62OUVzwsl4kH7eu8lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.136.0/23
185.78.78.0/23
185.97.76.0-185.97.78.255
185.98.40.0-185.98.42.255
185.100.156.0/23
185.101.200.0-185.101.202.255
185.103.60.0-185.103.62.255
185.104.148.0-185.104.150.255
185.111.24.0-185.111.26.255
Signature Algorithm: sha256WithRSAEncryption
6b:b8:ac:e3:16:79:3c:6b:94:2c:8a:36:f7:fd:52:d4:db:6f:
9b:6a:50:cd:c1:af:9e:03:d9:89:06:ed:e1:d9:39:d5:a4:48:
94:15:4c:eb:11:38:90:e1:a0:2e:20:a4:f6:34:6c:d6:fe:b5:
55:66:0f:66:16:2a:ba:39:71:db:69:8d:8d:e7:eb:bf:49:ca:
6a:cf:09:76:26:f0:41:40:4f:f5:6e:59:3c:2b:6c:2a:32:e7:
fa:8a:c6:a7:d6:1c:22:9b:be:f4:31:34:00:2b:5e:e0:50:66:
3d:41:aa:cb:b2:03:08:81:11:b4:b8:7f:fb:8a:c0:15:b4:f2:
76:39:aa:59:26:31:93:ab:fa:6a:95:27:e4:9b:b9:a0:8f:02:
e1:bb:d8:63:09:dc:1b:5f:9b:da:c9:d4:8d:49:1a:73:f6:00:
70:22:31:19:9d:2f:ab:5c:59:a3:1f:9d:f4:64:43:cd:35:7c:
c2:4a:e2:9d:89:cb:c4:7d:3a:4d:39:0b:5f:e1:9e:e8:35:27:
12:ba:f2:e6:65:01:79:6d:7d:e4:ad:2c:2c:d6:d8:16:f2:85:
21:7e:17:c6:89:ef:3a:e3:7f:8d:d1:a9:47:2b:4a:70:5a:7f:
46:32:a4:97:2f:58:86:c3:b4:78:9b:fc:89:df:d8:2b:ef:ed:
71:65:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org