Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/BVtU47khPyyx7ZefbdGAMr6sHj8.roa
File: BVtU47khPyyx7ZefbdGAMr6sHj8.roa (raw, json)
Hash identifier: kyLH/f9jLQSPT4/2gIbj/mDz9d+lB3EXdR29K72kSBQ=
Subject key identifier: 05:5B:54:E3:B9:21:3F:2C:B1:ED:97:9F:6D:D1:80:32:BE:AC:1E:3F
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 01A55E
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/BVtU47khPyyx7ZefbdGAMr6sHj8.roa
Signing time: Tue 15 Feb 2022 09:49:20 +0000
ROA not before: Tue 15 Feb 2022 09:49:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6758
IP address blocks: 185.243.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107870 (0x1a55e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Feb 15 09:49:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=055b54e3b9213f2cb1ed979f6dd18032beac1e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:1c:85:61:3f:77:6e:45:6a:cb:35:9c:64:
c8:b4:85:aa:ec:3e:a2:34:e0:ee:da:b0:7c:fe:ea:
a9:46:f0:a5:6f:ad:5c:4d:b5:50:8c:12:a1:71:4e:
5e:44:48:eb:e7:be:47:d9:94:93:c9:62:f3:78:50:
56:1b:d4:04:18:c4:e4:ed:97:7e:14:dd:c0:34:11:
f7:dc:65:72:fb:88:db:f2:44:79:30:41:27:48:8b:
15:1c:4d:03:40:42:11:e6:9d:2e:bb:fb:e4:78:39:
9b:46:c5:63:9c:19:81:1b:7a:2c:05:35:d4:ea:4e:
26:3c:82:3f:08:99:84:7e:be:73:77:34:26:03:c4:
8a:bf:22:59:cd:84:c6:39:35:7f:3c:d4:12:ea:b8:
d2:e1:9c:22:40:f1:c5:b9:44:f6:bf:3a:0d:83:5d:
65:1b:13:d5:18:95:13:c5:56:0b:d3:d3:31:ff:b6:
07:3e:ab:45:2c:f5:19:ef:27:cd:c2:65:b9:2b:1e:
9d:8e:52:01:fd:75:00:f9:3c:66:05:71:64:e2:9c:
a6:37:9b:4f:21:1d:b8:44:cd:93:7b:37:cb:4b:2c:
de:ea:ac:7e:2f:44:9f:68:5d:5f:95:04:da:a1:d7:
84:62:77:be:1c:48:95:97:5d:33:85:5f:69:4d:79:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5B:54:E3:B9:21:3F:2C:B1:ED:97:9F:6D:D1:80:32:BE:AC:1E:3F
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/BVtU47khPyyx7ZefbdGAMr6sHj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.3.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ca:30:17:85:53:c1:67:29:4c:64:7c:81:e8:f2:8b:71:22:
a1:cd:9a:b1:08:1f:f0:f2:91:56:00:b8:4a:e6:37:d8:61:ca:
c0:4d:6d:e9:62:20:37:9c:69:ad:6f:cb:34:f2:26:4d:4e:7e:
fb:9e:64:4c:45:b0:68:9b:de:31:2f:cd:5a:aa:a7:a8:6c:a9:
d5:8e:15:58:c5:c5:69:da:5a:ea:9b:59:0b:69:8a:47:47:44:
e4:89:b3:af:8e:1d:43:e6:be:73:e2:f7:b4:26:b2:0d:56:36:
29:ce:9b:03:bf:24:d8:1e:b2:bd:de:d8:4f:24:d1:19:74:ee:
fa:fc:7b:64:ec:6f:ee:8a:22:4f:bf:bc:0f:af:6f:29:d7:9a:
f9:27:e3:22:14:8d:8c:19:36:bb:58:12:08:1a:74:73:b0:40:
46:b0:f1:11:05:91:61:89:8a:d2:73:86:cf:c6:49:ca:40:f6:
b0:5f:56:b0:e9:f8:5b:00:09:17:53:7b:b3:70:0b:7d:87:e8:
83:7d:89:35:74:8e:4b:84:ff:7a:f7:4c:85:81:f3:c3:c6:9b:
78:22:26:27:a2:d4:ee:36:a6:63:a6:78:0a:27:96:0a:f1:1c:
12:2c:b7:d7:4f:ff:8a:14:08:60:3c:3c:aa:11:5b:82:a0:5b:
19:a6:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:52 2024 by rpki-client on console-ams.rpki-client.org