Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/Bmcl88CpUTjIer2YdPsNSXdvVfI.roa
File: Bmcl88CpUTjIer2YdPsNSXdvVfI.roa (raw, json)
Hash identifier: GxsOsnb3SpV+gPWURURVsK2zhPBZBrfcWfXRbEmd8i4=
Subject key identifier: 06:67:25:F3:C0:A9:51:38:C8:7A:BD:98:74:FB:0D:49:77:6F:55:F2
Certificate issuer: /CN=ec15f13b7c6ef4639af0fe0fe17045943c34f2af
Certificate serial: 0FAC6AE0
Authority key identifier: EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BXxO3xu9GOa8P4P4XBFlDw08q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/Bmcl88CpUTjIer2YdPsNSXdvVfI.roa
Signing time: Sat 01 Jan 2022 04:59:01 +0000
ROA not before: Sat 01 Jan 2022 04:59:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.150.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262957792 (0xfac6ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec15f13b7c6ef4639af0fe0fe17045943c34f2af
Validity
Not Before: Jan 1 04:59:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=066725f3c0a95138c87abd9874fb0d49776f55f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:aa:b8:08:8a:ff:db:5d:37:24:05:5b:44:
66:9f:0c:98:35:ed:99:48:08:f1:42:4a:64:0e:ea:
5d:87:57:e4:eb:e6:55:68:71:c3:22:54:6d:0c:8f:
b9:72:46:4a:39:7c:63:f3:b8:a7:d0:0c:00:f5:50:
90:50:6d:7c:5b:86:56:6a:88:9f:e3:f6:28:87:9d:
2a:41:a0:af:be:c2:27:28:5b:47:7e:06:7f:e7:45:
4b:35:23:9b:c7:e0:a0:e8:d0:64:66:56:e2:0c:a6:
09:3e:3d:87:bb:52:9b:0c:15:81:eb:b1:94:39:b6:
88:a6:96:be:d1:03:cf:48:b8:a6:e6:63:69:c9:fc:
e1:d0:71:ed:b5:30:4e:aa:60:e5:ef:25:4a:98:cb:
f8:e5:d0:40:ad:6b:7a:5d:dc:b0:f8:81:21:12:98:
23:7f:c8:d4:1b:0c:24:d0:c3:21:26:8d:9d:47:22:
0d:d2:22:2f:60:dc:fd:83:31:19:66:1e:42:39:a4:
fa:f3:42:26:a4:04:9f:8f:fb:b7:56:0a:af:3f:5d:
fe:68:9d:55:09:78:5c:57:d3:97:66:ee:ae:41:57:
ab:5c:52:b2:f1:ae:d7:a6:d6:8c:2c:1a:5b:cd:66:
22:d0:cd:5c:9b:c4:1c:90:73:c7:06:f5:15:eb:37:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:25:F3:C0:A9:51:38:C8:7A:BD:98:74:FB:0D:49:77:6F:55:F2
X509v3 Authority Key Identifier:
keyid:EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BXxO3xu9GOa8P4P4XBFlDw08q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/Bmcl88CpUTjIer2YdPsNSXdvVfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.104.0/24
Signature Algorithm: sha256WithRSAEncryption
03:44:b8:31:2d:30:8b:63:60:0f:ad:37:21:03:2d:b5:de:52:
39:d2:56:eb:af:ea:de:7b:a0:66:10:6b:83:25:c1:fc:3e:00:
44:1a:05:2a:4c:79:ea:38:dd:bb:01:36:f6:81:ba:ae:d0:33:
75:dc:24:dc:c5:a0:04:2c:9c:f3:3c:4e:13:e1:87:8c:5f:91:
d5:10:f2:8d:d2:ed:fc:9b:f4:19:d4:1c:46:b4:d8:68:27:d5:
fc:38:cf:9b:c1:95:ac:36:10:ea:10:55:e4:df:99:4a:7e:45:
6f:20:44:20:e5:9b:6d:48:f3:d6:f8:d4:f6:db:c8:c9:c3:29:
d5:7f:92:c8:d7:92:98:b2:99:50:70:dd:84:c2:e0:33:50:98:
8d:e5:06:9a:e9:25:ac:16:0d:a5:83:6f:34:f5:36:27:57:16:
5d:ac:f1:08:67:8e:62:5a:65:5e:b7:b4:c1:f2:da:82:54:96:
fd:eb:76:70:23:41:f5:02:84:af:2d:b7:34:e9:f3:8c:b7:3d:
4e:5d:94:60:f0:b0:21:0c:c2:b7:b6:90:a2:fd:d8:f9:54:1e:
bc:48:40:47:bf:91:45:9a:e2:98:4c:c6:df:4c:ca:21:09:7f:
2f:8e:8d:04:02:fd:33:e0:20:90:19:30:a7:e8:4e:12:bc:37:
b6:fe:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org