Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/BvoBUhFGrw3VXLT3Zn2qpTvcqbQ.roa
File: BvoBUhFGrw3VXLT3Zn2qpTvcqbQ.roa (raw, json)
Hash identifier: fqiwyzQuO/X3bQTXFB4MXo4GrQRGS/gKnGpgDSeC3fw=
Subject key identifier: 06:FA:01:52:11:46:AF:0D:D5:5C:B4:F7:66:7D:AA:A5:3B:DC:A9:B4
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 383C2AAD
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/BvoBUhFGrw3VXLT3Zn2qpTvcqbQ.roa
Signing time: Sat 01 Jan 2022 09:56:21 +0000
ROA not before: Sat 01 Jan 2022 09:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 178.236.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943467181 (0x383c2aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 1 09:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06fa01521146af0dd55cb4f7667daaa53bdca9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:4d:6c:d1:3e:5b:5a:c8:1f:c2:c0:17:4e:
c0:45:36:ed:29:92:48:f4:1b:1d:d2:0a:58:76:02:
f4:52:81:27:69:33:c2:61:49:34:b6:a1:0f:4f:bf:
45:52:34:2a:7a:8c:17:ec:6b:d9:83:8a:e7:07:b7:
21:1c:73:fa:64:e0:39:3a:06:8c:e1:4c:d6:8e:b6:
cf:82:25:3b:c6:2b:ab:a5:ff:87:3b:92:af:5d:47:
3d:74:6d:0a:96:0a:23:a2:6f:cf:47:2f:3d:22:35:
41:72:40:82:2b:3f:19:b9:5b:24:63:bb:6f:0f:4e:
eb:34:58:14:11:7b:80:c4:0c:11:c0:5d:e5:a7:b5:
46:5d:c7:7c:18:d1:e8:8c:fe:07:e3:c2:68:3b:75:
7d:0c:27:dc:b9:c9:6f:80:b0:2e:42:b1:a2:90:b2:
9f:c2:e6:2d:38:fb:8c:13:c0:5c:9b:a0:fc:03:0e:
9d:8b:d6:ce:ed:62:1b:c1:1e:bf:58:50:e8:fb:19:
db:2a:91:7e:92:8a:d4:53:1b:1a:1a:7d:cf:50:fc:
6b:0e:33:dd:80:b6:a5:33:2f:d9:68:55:37:3f:c6:
cb:8e:92:3e:42:28:bb:08:5c:1f:01:7c:65:5b:45:
a6:54:4a:64:a4:b4:0b:91:17:1c:23:47:c4:75:6e:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:01:52:11:46:AF:0D:D5:5C:B4:F7:66:7D:AA:A5:3B:DC:A9:B4
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/BvoBUhFGrw3VXLT3Zn2qpTvcqbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8f:db:f8:93:23:a3:ed:5b:c1:28:27:b8:4d:c9:08:57:ab:
f2:65:72:55:2f:4f:9e:a9:99:67:62:f1:bb:01:f0:8a:31:f5:
1d:ec:a3:fd:18:e0:60:42:b8:ff:9e:81:24:21:07:46:97:0e:
c9:b6:c1:8f:1a:3d:6b:ae:94:e9:8b:40:00:19:b3:fc:aa:69:
ee:d3:4c:6a:9d:64:6a:6c:b5:49:6a:30:4c:43:e8:79:06:b4:
35:20:7e:bc:32:62:d5:89:3b:84:71:cb:71:88:59:81:fd:16:
47:f3:0f:25:81:fe:ef:ea:14:c6:28:bb:53:01:3e:1d:47:6b:
bd:bc:1b:02:cb:37:88:be:ac:f8:1c:a1:36:2f:e6:06:f5:ee:
3d:d2:87:b2:48:5a:71:f8:a5:b1:7b:24:a2:fc:56:4d:7d:1a:
0b:00:20:10:f9:c4:13:69:05:97:8b:b5:5d:3d:4b:67:31:9d:
92:67:5c:a1:27:62:b8:80:b0:65:c3:8d:f8:9d:5c:4b:7f:15:
c5:e1:ab:e2:89:86:5a:1c:b8:b5:8c:3a:89:57:26:d0:a1:6b:
69:64:77:1f:8b:f3:17:01:5d:40:73:c0:6b:b6:dd:32:33:46:
fb:6a:3b:48:9a:2f:ec:c8:b9:0d:12:8c:52:f9:33:54:c1:b8:
0f:11:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:19 2024 by rpki-client on console-fra.rpki-client.org