Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/bbWQAAb2USyApursuNT-EXrtyaA.roa
File: bbWQAAb2USyApursuNT-EXrtyaA.roa (raw, json)
Hash identifier: Gexh7mH7J/bnKHOm7lGNC10dh8mPiZEid/45pzRj1N0=
Subject key identifier: 6D:B5:90:00:06:F6:51:2C:80:A6:EA:EC:B8:D4:FE:11:7A:ED:C9:A0
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01825DB0DE3F2F746DEE52060582326B64B7
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/bbWQAAb2USyApursuNT-EXrtyaA.roa
Signing time: Tue 02 Aug 2022 08:34:08 +0000
ROA not before: Tue 02 Aug 2022 08:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.134.13.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
45.134.14.0/24 maxlen: 24
212.8.224.0/22 maxlen: 22
212.8.229.0/24 maxlen: 24
212.8.228.0/24 maxlen: 24
2a07:505::/32 maxlen: 32
2a0e:7c41::/32 maxlen: 32
2a0e:7c45::/32 maxlen: 32
2a07:501::/32 maxlen: 32
2a0e:7c44::/32 maxlen: 32
2a07:504::/32 maxlen: 32
2a0e:7c42::/32 maxlen: 32
2a07:502::/32 maxlen: 32
2a0e:7c43::/32 maxlen: 32
2a07:507::/32 maxlen: 32
2a0e:7c47::/32 maxlen: 32
2a07:506::/32 maxlen: 32
2a0e:7c40::/32 maxlen: 32
2a07:500::/32 maxlen: 32
2a0e:7c46::/32 maxlen: 32
2a07:503::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:b0:de:3f:2f:74:6d:ee:52:06:05:82:32:6b:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Aug 2 08:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6db5900006f6512c80a6eaecb8d4fe117aedc9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:64:29:d9:99:0f:fd:27:fc:74:d2:e2:2a:
74:dd:26:ff:9a:a4:b4:24:06:61:22:79:47:97:7a:
49:97:b1:62:e3:97:86:ee:8e:4f:fb:87:ea:47:0a:
e7:ee:10:5b:f1:bf:4c:0c:3f:13:ab:01:8e:ad:54:
ff:52:13:18:99:28:5a:18:68:60:11:c6:8d:5a:ea:
3f:37:38:70:f6:c9:d6:8f:5c:25:46:2a:66:95:84:
a6:78:9c:27:da:28:8d:46:9e:03:c1:67:d4:11:06:
c1:03:9f:3c:da:cb:fb:b1:e5:39:d5:0f:1d:41:ff:
97:36:43:90:83:37:93:57:0f:aa:17:6a:0e:8f:ba:
a9:f1:5c:dd:d0:c6:37:49:cc:1f:f5:78:b9:cb:26:
44:6e:23:85:36:87:00:9a:2f:a5:05:75:75:27:ad:
f3:5c:05:9d:0f:07:ea:09:fe:6c:85:cf:ef:5b:65:
5c:8b:91:22:36:25:13:49:0c:42:42:6e:66:75:77:
db:07:a5:e9:92:aa:a6:67:73:38:5c:51:d6:c4:7e:
bb:e9:30:ac:ff:bb:7e:f7:41:09:bd:59:47:39:4c:
2b:fd:af:60:31:36:f5:1c:d0:04:0e:4a:67:61:67:
45:ea:d6:88:b5:8a:95:da:1d:5e:8d:60:06:82:f2:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B5:90:00:06:F6:51:2C:80:A6:EA:EC:B8:D4:FE:11:7A:ED:C9:A0
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/bbWQAAb2USyApursuNT-EXrtyaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.13.0-45.134.15.255
212.8.224.0-212.8.229.255
IPv6:
2a07:500::/29
2a0e:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
8b:6e:85:29:f8:6a:50:4a:07:15:13:27:33:a3:80:e6:08:f0:
06:27:7d:00:d1:98:82:40:e8:77:b0:b0:ea:b6:61:52:67:8f:
28:bf:02:73:15:d0:26:76:3c:64:e8:3a:1d:3b:28:34:cf:43:
a0:3f:15:7b:09:23:67:c3:93:7f:c8:e0:61:d2:36:d6:84:1f:
26:05:70:b2:68:c3:96:36:65:72:62:81:66:eb:31:7c:a5:bb:
85:ab:75:81:ee:a5:03:c9:53:9b:5b:17:1b:02:4c:19:62:d9:
31:db:8d:c9:66:58:fe:e3:c2:5d:87:db:9e:59:f7:29:d6:15:
d3:38:75:86:8c:b4:13:3b:1f:3f:10:a4:84:da:7f:13:1b:f2:
21:d6:15:3f:39:06:e7:03:1f:25:0b:e5:0f:84:32:ff:9d:a7:
5a:4b:23:14:f7:6c:f7:29:a0:2d:15:42:9d:99:76:f1:9b:fe:
68:dc:fd:c8:80:28:b6:48:6a:49:c8:05:78:20:84:0c:10:dd:
65:aa:cd:96:ab:a3:fe:92:e2:fc:ac:f2:8b:84:1f:46:3f:2f:
1a:bf:ea:f5:88:ec:f8:08:c1:1b:ad:49:1d:72:51:68:62:65:
06:23:78:53:50:f2:42:a4:01:16:25:06:7d:09:0e:ce:60:0f:
32:53:83:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org