Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/BveZ8DWUP102YBa20VIqJZouzN8.roa
File: BveZ8DWUP102YBa20VIqJZouzN8.roa (raw, json)
Hash identifier: Tgp9TwZkJxK888x54sgcw7h+yOMsF+6pY2QQEXkwPuk=
Subject key identifier: 06:F7:99:F0:35:94:3F:5D:36:60:16:B6:D1:52:2A:25:9A:2E:CC:DF
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 085A341D
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/BveZ8DWUP102YBa20VIqJZouzN8.roa
Signing time: Fri 13 May 2022 06:26:02 +0000
ROA not before: Fri 13 May 2022 06:26:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.154.192.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
85.234.106.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
85.234.109.0/24 maxlen: 24
85.234.107.0/24 maxlen: 24
85.234.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140129309 (0x85a341d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: May 13 06:26:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06f799f035943f5d366016b6d1522a259a2eccdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:05:a4:c4:d1:7d:40:c9:f2:48:2d:d8:99:
95:22:94:55:d1:b4:79:a9:12:3a:d1:0d:1e:e5:50:
fd:d8:6e:6a:b7:2b:a3:60:26:bc:55:87:5f:ba:5f:
77:0d:7d:db:56:1b:1c:8b:86:1a:b6:c4:f3:80:17:
dc:1d:da:76:a0:7f:50:50:a7:f3:42:90:10:d2:58:
cc:d4:84:79:7a:f1:9c:bd:f5:52:b6:bf:36:5e:6f:
88:74:ea:9c:f2:15:f1:d6:bd:20:36:ca:8f:12:cb:
39:45:a0:e5:9d:2a:60:de:a6:26:e9:50:7b:3d:0d:
c0:e4:b6:4d:0e:91:b0:87:1c:c6:f4:24:23:32:39:
63:b1:c3:36:0d:59:a5:54:5c:75:92:2b:a5:fa:c8:
58:a9:be:12:cd:fa:c4:d2:5c:32:8f:6d:4d:ef:3c:
2d:f8:39:22:06:37:0b:75:ac:aa:40:5d:53:87:3e:
83:86:2b:85:a7:25:8a:6b:ef:93:ea:a8:48:7e:82:
2b:92:11:3c:03:09:2c:a2:da:08:f0:06:aa:4f:4a:
dc:e7:27:b0:c6:3b:ca:2f:6c:b4:7a:c2:ba:4a:2f:
1e:13:71:a2:15:98:f9:6e:bc:26:bc:a2:02:f6:64:
a4:05:72:92:e5:ff:1a:a7:60:b1:c8:2f:63:d5:58:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F7:99:F0:35:94:3F:5D:36:60:16:B6:D1:52:2A:25:9A:2E:CC:DF
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/BveZ8DWUP102YBa20VIqJZouzN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.106.0-85.234.110.255
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
95:27:30:3d:ce:2f:ee:40:4c:4d:a0:65:0f:27:21:9e:09:96:
9a:6c:4c:b7:31:b8:57:47:18:2a:59:d4:54:50:fb:44:2c:6c:
a5:5c:2a:11:a2:30:d8:e2:4b:b3:46:f1:2b:6f:85:f1:fd:57:
09:13:9d:61:da:1b:26:eb:ce:5f:13:e8:2b:c9:92:71:e0:e1:
60:f1:e1:d0:a9:fc:8a:15:df:57:c6:9d:54:33:64:d5:ba:f2:
0d:57:98:54:ca:3c:05:94:aa:3d:31:29:e8:11:e3:fc:bb:af:
ec:61:bb:3b:ee:6c:ed:fb:ad:5b:30:fa:23:de:d9:6c:6d:3e:
6a:77:91:fd:45:57:e8:69:50:3d:07:0f:01:4a:00:80:5b:93:
9f:c0:b8:5c:6c:18:ff:0b:61:3a:a1:31:6b:a9:99:87:88:63:
41:db:d2:b6:24:d3:3f:7b:c0:e6:84:71:53:18:53:42:20:d3:
01:21:d9:f4:4c:6a:65:87:50:33:bb:dd:5e:03:dc:f6:5c:91:
79:7c:37:32:5d:da:1a:be:3d:ca:f5:ef:ca:9c:06:53:99:9e:
20:9a:7d:49:80:8a:3a:56:af:f0:70:91:bb:bb:92:e0:62:af:
ad:c1:f0:04:97:42:0a:10:e4:08:e4:40:03:2b:9e:9f:f2:0a:
48:55:1c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org