Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/baJwyTs4P-EfuAFr6Tb1q8XBwDc.roa
File: baJwyTs4P-EfuAFr6Tb1q8XBwDc.roa (raw, json)
Hash identifier: M+etNjIYxwikQyLOc4GnvLtU7WS7iWSVXoTTJALPQh8=
Subject key identifier: 6D:A2:70:C9:3B:38:3F:E1:1F:B8:01:6B:E9:36:F5:AB:C5:C1:C0:37
Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial: CE8742
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/baJwyTs4P-EfuAFr6Tb1q8XBwDc.roa
Signing time: Sat 01 Jan 2022 06:55:35 +0000
ROA not before: Sat 01 Jan 2022 06:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55002
IP address blocks: 194.33.70.0/23 maxlen: 23
194.33.68.0/24 maxlen: 24
2001:67c:2994::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13535042 (0xce8742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Validity
Not Before: Jan 1 06:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6da270c93b383fe11fb8016be936f5abc5c1c037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:2b:79:7d:67:07:c1:1e:09:dc:17:b2:78:
90:de:02:02:5a:db:1d:a6:90:eb:f3:32:c3:38:bc:
89:3d:b8:87:6b:43:8d:a3:a1:54:9a:91:83:72:43:
c1:b8:47:37:56:21:48:6b:0f:0e:0f:9b:71:52:cb:
18:7f:1e:df:5a:ff:ef:d8:bc:53:17:81:a4:c3:fc:
60:36:b1:af:7a:79:70:79:d7:89:99:cc:41:b8:f2:
28:54:c3:18:0c:e5:f9:76:94:59:0c:48:a4:f2:f3:
3f:70:f2:3a:5f:4b:21:8e:25:cb:69:c9:f6:4a:0c:
4a:0c:dd:8d:9e:f2:91:19:8f:e0:5c:50:31:2b:21:
27:47:b6:2f:c5:1f:0d:a2:cf:7b:09:25:ec:f9:9b:
50:0f:07:d6:ff:95:ab:09:d0:d5:e9:bc:d2:97:28:
09:86:da:d8:72:ea:c6:1b:aa:a3:df:53:04:81:ce:
e3:45:50:d6:d9:6a:22:dd:29:33:80:65:f4:1f:27:
29:de:98:9a:5d:5e:58:b3:98:3e:65:f5:5c:11:eb:
7b:2d:24:6e:7b:85:7f:1b:7e:63:d4:ea:63:36:c5:
37:38:2a:63:71:55:6e:2b:71:56:f3:9b:03:04:f9:
ab:86:26:d6:e9:3c:3c:c9:cb:3f:ad:af:59:00:95:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:70:C9:3B:38:3F:E1:1F:B8:01:6B:E9:36:F5:AB:C5:C1:C0:37
X509v3 Authority Key Identifier:
keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/baJwyTs4P-EfuAFr6Tb1q8XBwDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.68.0/24
194.33.70.0/23
IPv6:
2001:67c:2994::/48
Signature Algorithm: sha256WithRSAEncryption
b2:11:2e:c0:ba:d9:16:68:5b:b0:15:ac:cd:5b:26:3c:ad:7e:
60:c9:b1:db:2e:be:53:38:0e:ea:6d:bb:e8:a3:ff:6a:5d:c9:
38:e9:73:14:f1:77:a1:d9:3a:a1:b8:22:e3:06:6f:9a:08:6e:
15:ed:64:e6:b1:2f:4e:3d:93:4d:84:ca:a6:14:f6:e5:de:cc:
c6:c3:0c:66:d5:ef:05:14:d7:71:c9:03:9f:09:9c:87:f4:2d:
1a:7e:a0:36:3a:ad:1e:3a:5a:08:f6:f6:bd:f5:82:0a:c2:c3:
ac:56:77:51:d8:6f:3e:41:dd:e7:99:c0:07:15:b9:c3:b8:71:
73:ea:2c:56:0b:e9:b9:f9:87:f0:9a:55:67:2e:d3:bf:66:73:
26:3e:44:cd:7a:97:5e:a6:e7:cc:a0:cd:5a:e4:ca:b7:f2:20:
67:45:33:36:56:12:cf:a0:35:d7:c4:10:65:13:4b:b2:80:82:
7c:6f:af:b5:a1:21:c6:66:01:47:62:9b:50:72:01:d5:93:db:
27:f8:20:7d:ce:18:68:8f:f4:ac:28:35:14:f9:cd:ca:a5:06:
db:69:ce:12:90:df:56:c2:43:5c:86:ea:32:c5:ad:2f:8d:dd:
22:e8:da:d6:fa:5d:ba:7d:2a:c9:92:97:b5:af:b3:a4:fd:1a:
eb:3c:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org