Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BH6Pqad9yJtHgToEY29WE5sLUH0.roa
File: BH6Pqad9yJtHgToEY29WE5sLUH0.roa (raw, json)
Hash identifier: 0idx0XflVwvUOFBffTFowLerV/EfffSX2/25o4fIvzs=
Subject key identifier: 04:7E:8F:A9:A7:7D:C8:9B:47:81:3A:04:63:6F:56:13:9B:0B:50:7D
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0183A7EF2E99D5E92082EE0528237D7DD5DA
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BH6Pqad9yJtHgToEY29WE5sLUH0.roa
Signing time: Wed 05 Oct 2022 11:36:53 +0000
ROA not before: Wed 05 Oct 2022 11:36:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12389
IP address blocks: 82.137.176.0/21 maxlen: 21
82.137.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:ef:2e:99:d5:e9:20:82:ee:05:28:23:7d:7d:d5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 5 11:36:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=047e8fa9a77dc89b47813a04636f56139b0b507d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:79:c5:ef:43:f0:82:bb:86:8c:1e:f3:fd:
52:2b:c8:2e:03:d9:46:77:64:2d:1b:4e:87:d3:5b:
02:4c:00:4b:00:ee:30:57:58:8f:5d:1d:3c:ad:f2:
e7:2a:53:ea:bf:66:63:52:27:1a:14:c5:58:9b:62:
4b:ce:c8:83:ca:53:a2:1b:db:d4:e0:04:4a:fd:ee:
eb:a3:87:d4:37:6b:00:70:2e:1c:31:90:00:1c:bd:
33:61:65:7a:00:92:96:fe:83:07:fc:1d:ac:21:89:
66:e8:73:9d:57:a8:4a:21:9a:b3:29:34:88:8e:f6:
28:d2:61:69:56:db:dc:73:6e:69:77:e8:17:3c:80:
d1:4a:12:50:28:4e:7a:68:9a:19:0a:3f:b4:06:46:
ff:0e:cf:eb:c2:1f:fb:c2:55:8a:bc:dd:50:69:b0:
1d:3e:1c:2d:df:4f:d6:c3:3a:7e:3f:40:20:89:95:
44:83:5d:cf:98:71:25:c9:5f:68:59:a9:15:8c:83:
d9:5a:60:74:dc:21:0e:91:a0:3b:5f:cd:14:44:cd:
91:df:13:12:72:9d:c0:70:d1:b6:60:81:f2:6a:71:
f2:d4:53:45:19:bf:03:7b:70:6d:5a:97:ec:96:76:
1a:d7:97:b3:11:9a:68:b5:68:37:1e:f3:fe:a5:0c:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7E:8F:A9:A7:7D:C8:9B:47:81:3A:04:63:6F:56:13:9B:0B:50:7D
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BH6Pqad9yJtHgToEY29WE5sLUH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.137.176.0/20
Signature Algorithm: sha256WithRSAEncryption
52:f7:ee:23:f0:72:f6:b5:46:1f:69:f3:6c:06:45:b5:37:f4:
0f:40:31:72:db:52:43:88:06:15:e6:f7:ad:15:54:ad:90:4e:
d4:23:66:a0:fe:47:64:e1:67:9a:ac:cb:80:2b:92:12:a5:d9:
b0:15:33:c2:7a:52:95:a8:95:3f:05:94:cc:bd:46:f9:6d:99:
89:99:db:32:22:2c:0e:07:2d:14:c8:a8:b6:72:aa:fe:d8:c7:
52:e1:77:ff:8a:95:cd:5e:2f:7b:ce:0f:45:16:48:9c:64:b0:
58:78:37:f3:3d:73:64:2d:a1:25:0f:58:4f:99:74:cb:fe:ab:
e7:da:59:99:cd:d1:81:52:59:41:d0:41:0a:aa:a2:57:35:00:
90:60:62:6b:8d:2a:1f:8e:02:07:1b:90:d3:22:20:7f:d5:cd:
b4:9f:64:9d:6e:f2:c9:e6:28:7e:d0:6c:af:5c:bc:4b:5c:98:
5c:63:91:8f:18:26:b8:dd:68:f2:ce:c5:a9:08:29:c8:a0:67:
7b:99:7b:b5:99:16:16:77:d1:b5:2b:96:6f:aa:ed:a1:eb:e1:
2b:48:e3:05:42:d3:c2:ae:80:45:b6:7e:44:14:88:11:f6:a2:
82:0f:6d:02:28:5a:f0:ed:b7:d7:61:20:26:3f:ee:d7:7a:3f:
94:30:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org