Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/BuZTvcWG2YdTJWXDEcXgiCAANh4.roa
File: BuZTvcWG2YdTJWXDEcXgiCAANh4.roa (raw, json)
Hash identifier: Zng1GqD3GmSLosMdtLFWbfrquXs9xSmT3IBn85MtLRM=
Subject key identifier: 06:E6:53:BD:C5:86:D9:87:53:25:65:C3:11:C5:E0:88:20:00:36:1E
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 3847A935
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/BuZTvcWG2YdTJWXDEcXgiCAANh4.roa
Signing time: Sat 01 Jan 2022 05:02:56 +0000
ROA not before: Sat 01 Jan 2022 05:02:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8265
IP address blocks: 195.96.192.0/19 maxlen: 24
185.28.52.0/22 maxlen: 24
2a02:2888::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944220469 (0x3847a935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Jan 1 05:02:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06e653bdc586d987532565c311c5e0882000361e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:3f:c5:29:a4:8e:29:d6:ba:94:25:2a:b9:
2c:d9:fd:68:79:f2:ae:ce:7e:12:ac:01:a6:19:5e:
44:74:be:1e:d2:9a:af:3a:d0:22:ed:9a:c0:72:53:
6d:79:f5:e4:0f:31:be:2d:d5:38:2c:99:34:dc:82:
4f:28:ef:a6:df:0c:d3:b4:04:09:e0:48:4d:a2:90:
d0:e5:fa:94:ce:da:fa:d6:06:0f:3b:23:c5:da:db:
c4:06:f0:1b:07:e2:f7:03:ce:1d:f6:43:82:9a:ce:
cd:e7:81:7e:27:d2:b3:d4:47:91:1e:5f:85:79:ee:
34:f4:54:b3:16:c5:4c:95:d8:3e:f1:79:42:e0:0c:
ae:65:b8:e9:c7:2b:06:c6:8b:8b:10:a6:30:1f:3c:
57:f2:9a:f2:62:4c:15:34:99:a0:9a:94:87:54:4d:
1f:b2:b5:e9:1a:e7:b3:ac:e1:2f:27:b4:b8:ec:1b:
ed:16:74:b7:23:44:69:e7:58:00:1b:c8:7e:b6:ba:
91:99:66:48:41:51:26:74:07:d0:8c:f2:2c:de:31:
fb:c5:ad:d3:bb:bd:87:07:de:63:89:fa:cf:b8:98:
85:2c:e4:33:0e:e6:50:58:46:ca:2c:17:fc:9a:5b:
69:60:b6:1b:58:85:b8:2a:e9:2c:ef:89:17:1d:7d:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:53:BD:C5:86:D9:87:53:25:65:C3:11:C5:E0:88:20:00:36:1E
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/BuZTvcWG2YdTJWXDEcXgiCAANh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.52.0/22
195.96.192.0/19
IPv6:
2a02:2888::/32
Signature Algorithm: sha256WithRSAEncryption
5a:28:96:d2:65:c8:10:07:e4:83:2f:20:fa:da:1e:68:a6:ce:
7f:da:16:54:35:05:d7:c5:09:ea:d1:65:fb:bf:1f:6c:db:40:
c9:fb:38:bd:fb:78:e6:bc:dc:6e:2b:a5:68:8b:d0:1a:0c:1e:
e4:51:12:8e:db:79:57:29:bc:22:82:b4:42:76:08:aa:67:75:
2e:e8:fe:6b:c8:91:5d:69:a6:d1:62:3d:1a:61:71:b7:39:d0:
56:1c:b4:26:fc:1f:b2:42:4f:c3:10:71:bd:c9:b5:d5:03:fc:
1c:4e:c1:2e:35:10:60:57:0a:28:d5:9b:17:ca:08:d1:25:e7:
da:91:c5:fa:b4:ff:7b:36:2f:cd:e3:43:4a:67:1b:87:bc:17:
78:82:17:b7:ab:eb:8c:e9:cd:16:fe:fa:8e:ac:23:3a:f1:2e:
4d:73:ba:9c:73:38:4f:54:5f:91:63:06:ab:fc:ba:67:55:ce:
d7:81:9b:0e:00:8b:b9:56:c8:af:77:50:d8:65:f9:43:13:43:
9f:ae:36:6e:bf:46:9a:83:e6:4a:1d:31:0d:8a:5f:9f:b7:39:
34:10:f8:14:67:60:8c:1f:d4:79:34:d1:c3:72:a1:9a:09:23:
57:56:d6:93:9e:5e:a1:8d:54:15:6d:5e:99:98:c7:71:2e:da:
bc:1f:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-fra.rpki-client.org