Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/1BLvGjKnio_40XuH-BkvoYbQntU.roa
File: 1BLvGjKnio_40XuH-BkvoYbQntU.roa (raw, json)
Hash identifier: nG8OgRzFln2eswI4tVc02qXeSggxOtU0w7+UP1tCAio=
Subject key identifier: D4:12:EF:1A:32:A7:8A:8F:F8:D1:7B:87:F8:19:2F:A1:86:D0:9E:D5
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 0182CE8B5B965FF9F8FA418BFA66D54F41DF
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/1BLvGjKnio_40XuH-BkvoYbQntU.roa
Signing time: Wed 24 Aug 2022 06:30:15 +0000
ROA not before: Wed 24 Aug 2022 06:30:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198089
IP address blocks: 185.98.124.0/24 maxlen: 24
185.98.124.0/23 maxlen: 24
185.98.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:8b:5b:96:5f:f9:f8:fa:41:8b:fa:66:d5:4f:41:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Aug 24 06:30:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d412ef1a32a78a8ff8d17b87f8192fa186d09ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:c6:0d:59:5f:b1:7e:01:68:ca:8b:3d:9a:
a9:cc:58:17:56:9c:f5:60:07:d9:5b:c7:40:36:9d:
26:66:4d:3d:14:82:38:61:16:ea:61:58:c9:b0:ff:
84:64:0c:10:ad:fe:38:80:d6:40:bb:15:32:f9:7d:
f0:ac:93:f9:c8:e0:21:66:62:46:25:e7:21:9c:45:
de:0d:5d:aa:6c:51:bb:0d:3d:55:26:d0:50:6b:ea:
44:06:cd:8f:1c:a1:95:2f:72:99:99:4d:ab:19:a9:
a6:72:56:ce:27:3e:a7:df:d1:7d:86:a6:73:44:a2:
66:1b:5a:7c:6e:02:89:3e:50:f3:eb:76:dc:94:05:
dd:71:89:c2:8d:c1:fd:c5:4c:c7:ba:dd:a8:a5:37:
7d:71:ab:85:7c:7d:02:a2:18:cd:ba:b9:4c:bf:88:
a3:6e:82:98:ca:79:72:65:bb:e9:0d:98:f4:23:14:
03:f4:53:8a:7c:83:a4:ce:27:da:35:ec:12:24:57:
8a:dd:4e:a5:84:99:62:a8:3e:d5:9b:a0:49:2d:0e:
04:f9:f7:e6:4f:05:33:11:38:23:5d:9d:62:cf:d4:
a9:a9:c6:4f:08:e7:eb:53:7c:b4:5b:36:fd:2d:fb:
37:35:58:2a:c9:2b:20:01:e0:f9:96:10:29:c1:10:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:12:EF:1A:32:A7:8A:8F:F8:D1:7B:87:F8:19:2F:A1:86:D0:9E:D5
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/1BLvGjKnio_40XuH-BkvoYbQntU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.124.0/23
Signature Algorithm: sha256WithRSAEncryption
56:d1:17:f9:59:0b:b7:7c:db:48:0f:04:16:d1:7a:31:56:e6:
81:67:b3:b9:8e:1c:62:96:b4:22:d3:3f:77:5f:24:e9:6e:c8:
a7:5e:7f:96:51:0b:95:ad:08:8d:e8:29:6e:e9:da:c1:05:e3:
a4:d6:81:6b:6f:b5:ad:07:b3:f8:91:53:3b:72:f4:57:92:22:
fc:9b:e3:a5:43:06:1c:81:7e:8b:8f:25:dd:cd:80:4e:da:e0:
83:93:1a:41:34:6f:ba:ff:94:fb:87:27:62:78:39:99:d5:c8:
12:2d:61:25:e9:1d:56:7e:d0:27:94:b3:6f:3a:5e:fd:f4:5d:
5a:04:23:a1:b4:a6:fd:01:93:e1:0f:bd:ca:a0:ba:16:36:78:
66:22:b1:eb:63:5f:c2:03:73:ed:d0:8b:cc:c8:55:ed:e6:88:
e4:e4:89:d7:bb:20:33:c1:2f:e6:ed:17:63:79:0a:c9:9c:ee:
23:a7:18:e1:54:11:6e:33:fc:db:ea:a4:d2:45:09:b5:06:47:
31:c1:3c:e9:e4:92:13:fa:ed:6c:bf:53:8b:53:b8:5f:d2:2e:
88:ff:7f:a2:82:5d:56:7e:0e:6e:c7:69:ec:87:df:d9:36:45:
8a:32:4c:92:c0:f4:5e:8b:ef:3d:26:8f:72:17:22:db:f2:f9:
5d:60:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:56 2023 by rpki-client on console-fra.rpki-client.org