Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/BT36HON4-TDCRmYmTDDyXtTvyP0.roa
File: BT36HON4-TDCRmYmTDDyXtTvyP0.roa (raw, json)
Hash identifier: 0Cfpti3O/sosL2MtXjXWbpPQtuNPEyut2P4QvFYL01Q=
Subject key identifier: 05:3D:FA:1C:E3:78:F9:30:C2:46:66:26:4C:30:F2:5E:D4:EF:C8:FD
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01837091D4AA3680A3D0BF048B5A52002F8A
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/BT36HON4-TDCRmYmTDDyXtTvyP0.roa
Signing time: Sat 24 Sep 2022 17:35:48 +0000
ROA not before: Sat 24 Sep 2022 17:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 80.66.199.0/24 maxlen: 24
194.104.144.0/24 maxlen: 24
45.87.92.0/24 maxlen: 24
45.87.93.0/24 maxlen: 24
95.214.166.0/24 maxlen: 24
95.214.167.0/24 maxlen: 24
45.139.192.0/24 maxlen: 24
45.139.194.0/24 maxlen: 24
45.139.195.0/24 maxlen: 24
45.141.44.0/24 maxlen: 24
45.141.46.0/24 maxlen: 24
45.141.45.0/24 maxlen: 24
45.141.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:70:91:d4:aa:36:80:a3:d0:bf:04:8b:5a:52:00:2f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Sep 24 17:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=053dfa1ce378f930c24666264c30f25ed4efc8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:0f:ab:36:19:57:53:67:d1:09:8a:04:e3:
1d:3a:e6:97:53:25:93:95:61:48:3c:d5:0c:e9:c3:
a5:75:09:5a:86:a7:8e:e5:2a:11:78:81:5b:66:5a:
f5:6f:5d:7f:60:52:93:5f:81:8e:08:9f:f7:ff:05:
9c:4f:53:80:4b:24:8f:a8:4b:5d:3d:41:8c:df:f1:
5c:2a:44:d4:34:03:c1:fe:e2:06:92:ec:79:1f:01:
47:d3:f8:82:8d:20:80:e2:14:d8:97:28:15:ed:eb:
f2:88:64:8b:2c:7c:80:87:32:ff:59:bf:4b:85:a6:
fa:99:69:56:b8:fc:70:bd:76:0c:09:2f:2e:ff:86:
dd:2d:31:02:bf:cd:71:66:e1:19:b9:88:f8:ca:d2:
01:e0:3a:96:68:52:24:b3:b1:a2:7a:3a:7c:55:48:
39:d8:49:5b:53:85:b3:82:46:05:d8:94:fa:53:1c:
71:07:b4:53:34:53:87:2f:11:76:6a:43:b2:53:4c:
ed:b7:66:5a:03:53:83:99:b3:7b:04:17:5f:96:9b:
16:11:8c:52:d2:4e:be:54:f9:bc:41:ed:ad:3a:45:
e3:e9:e7:04:5b:7c:73:8d:05:2d:7e:4a:90:bc:0e:
cf:08:88:0a:b7:59:47:ec:7f:eb:f3:d8:fa:95:4f:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3D:FA:1C:E3:78:F9:30:C2:46:66:26:4C:30:F2:5E:D4:EF:C8:FD
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/BT36HON4-TDCRmYmTDDyXtTvyP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.92.0/23
45.139.192.0/24
45.139.194.0/23
45.141.44.0/22
80.66.199.0/24
95.214.166.0/23
194.104.144.0/24
Signature Algorithm: sha256WithRSAEncryption
24:43:8b:b2:99:67:45:c1:65:51:04:03:02:9f:fe:cd:46:98:
ef:c9:a8:ca:52:37:ef:c7:1d:1f:98:b9:dd:3d:76:5e:2f:03:
7e:83:67:eb:df:26:0f:db:96:2b:b9:af:04:86:cf:77:e8:9b:
60:29:c6:d0:ad:55:a6:76:1a:26:f9:bd:7b:c8:da:08:f9:dd:
b4:3e:3a:fa:e7:10:76:07:f9:79:45:e2:6d:ae:9d:ff:3a:e3:
b1:01:40:48:7f:63:b0:34:28:b8:79:6c:98:b5:ae:ae:79:89:
41:b7:32:c0:e8:36:f1:ec:01:06:4b:d7:7a:ff:06:c2:13:33:
1b:b3:4f:ad:ea:7e:2f:d6:a3:c3:eb:a5:5f:44:08:e9:3d:39:
7a:c7:4f:58:13:a3:b1:d1:35:b5:64:ac:18:29:1f:98:3d:0e:
e4:40:12:8b:94:55:f6:e8:fa:18:a4:c5:79:a3:82:9d:67:6e:
84:3e:d8:5a:a5:d8:e1:40:c0:88:63:07:20:7c:61:79:cb:cc:
98:37:b0:00:74:9e:e4:f0:12:40:d9:37:da:4c:31:bc:1a:b8:
08:e1:08:04:5e:4f:33:fd:65:ea:96:50:2f:3a:43:3a:8c:16:
92:29:4c:ce:83:d2:b3:95:9b:51:c9:f5:3d:16:e0:01:23:bd:
48:89:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org