Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/bdlsitq9_cizOQmgi4beqaaERY8.roa
File: bdlsitq9_cizOQmgi4beqaaERY8.roa (raw, json)
Hash identifier: Y9H3eGuuxHYx7DcM4oG3QvPTdrTu0w3JPxQq3f73s0U=
Subject key identifier: 6D:D9:6C:8A:DA:BD:FD:C8:B3:39:09:A0:8B:86:DE:A9:A6:84:45:8F
Certificate issuer: /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Certificate serial: 01857082C374173170F4394FEE35261D83AB
Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/bdlsitq9_cizOQmgi4beqaaERY8.roa
Signing time: Mon 02 Jan 2023 03:24:55 +0000
ROA not before: Mon 02 Jan 2023 03:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211785
IP address blocks: 185.241.11.0/24 maxlen: 24
2a10:9ec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c3:74:17:31:70:f4:39:4f:ee:35:26:1d:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Validity
Not Before: Jan 2 03:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dd96c8adabdfdc8b33909a08b86dea9a684458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:07:f6:7f:10:af:04:2d:c1:4a:8b:00:09:
68:20:d0:51:e5:64:00:db:a1:2f:53:b2:7e:1e:ba:
e1:db:27:1e:89:f5:3c:f2:09:72:35:cc:39:bb:9d:
1d:e7:76:72:04:d2:04:5c:c3:f9:05:5a:f4:25:f8:
10:41:1d:ab:2d:95:d8:f2:9d:48:a1:6e:2a:fe:98:
14:67:4a:e3:20:58:d1:13:4f:28:98:eb:c0:19:1b:
f2:e6:91:eb:56:52:9a:52:2e:fe:dd:3f:39:4e:1a:
c7:e0:7a:6f:26:04:2b:41:00:5c:2c:db:0a:f3:bb:
8b:73:15:57:59:72:85:b9:28:43:62:aa:a8:1e:39:
23:a2:31:42:b8:41:3b:f6:db:67:ff:0c:fd:bc:6e:
ab:18:f3:61:c2:0a:69:68:68:12:2c:f2:4f:9e:67:
f3:a5:e2:9b:3c:49:35:47:bb:1c:0c:82:97:05:c4:
6e:4a:8a:ff:b0:f4:8f:8b:4a:8d:7c:9c:01:24:88:
13:98:3c:51:f8:e3:f8:57:b9:00:e8:c3:38:b3:db:
02:0c:bf:ce:35:0e:96:dd:4d:dd:01:58:f9:3a:ce:
f4:05:90:ae:a0:c3:5a:d1:fb:85:fe:80:e4:65:f9:
48:b4:47:0b:13:1f:5e:5a:0c:40:45:1a:af:ea:ab:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D9:6C:8A:DA:BD:FD:C8:B3:39:09:A0:8B:86:DE:A9:A6:84:45:8F
X509v3 Authority Key Identifier:
keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/bdlsitq9_cizOQmgi4beqaaERY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.11.0/24
IPv6:
2a10:9ec0::/29
Signature Algorithm: sha256WithRSAEncryption
53:8e:4a:67:bf:6c:c7:45:55:02:03:99:d2:62:d7:c0:71:60:
b5:45:99:9f:82:d8:18:c4:c0:8f:be:e7:9c:45:dd:19:9a:76:
9d:3f:18:e9:41:54:e4:9d:a0:49:f8:11:73:db:b8:f9:ac:fc:
43:ba:a4:96:c5:7a:69:e7:44:c3:7d:88:10:9f:f1:da:24:a6:
1b:ed:8f:5c:89:a5:a4:62:27:50:79:8c:84:ba:91:ea:82:50:
85:79:22:4f:dd:b4:03:11:f2:f9:e8:39:08:9a:31:f9:74:4d:
8a:2a:b3:9c:13:14:cc:0a:52:d5:c4:bf:d0:e1:3c:7f:8a:bb:
d7:0a:f6:34:1e:6f:e8:e5:a5:d7:bb:bd:aa:7c:e2:6b:c1:2c:
6f:0b:40:a3:fd:51:56:74:c2:73:43:25:ec:c8:01:a1:c1:a9:
79:e4:9b:54:98:ff:43:70:d1:5b:19:59:4c:46:7f:26:45:0d:
04:05:21:8c:1c:f8:4b:1f:9a:fc:17:0d:a8:c5:0b:06:32:6c:
09:f7:11:55:e0:bd:7d:1d:1b:dd:c4:a5:d4:c2:5f:e2:86:57:
e9:c0:1f:70:fe:ce:d8:69:c7:5e:fb:7c:ee:77:68:ee:bd:98:
4b:70:6c:99:62:44:97:86:7d:2e:4c:de:80:f7:24:88:e6:e3:
88:62:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:12 2025 by rpki-client