Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/BDCiFk9tgBGZFS2Sva_3Di2p01c.roa
File: BDCiFk9tgBGZFS2Sva_3Di2p01c.roa (raw, json)
Hash identifier: DejK+iNxcOVssaqSlLAmQrZ2n9akbbdvpCB4TcuPm6g=
Subject key identifier: 04:30:A2:16:4F:6D:80:11:99:15:2D:92:BD:AF:F7:0E:2D:A9:D3:57
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 072AE4DA
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/BDCiFk9tgBGZFS2Sva_3Di2p01c.roa
Signing time: Sat 01 Jan 2022 04:56:38 +0000
ROA not before: Sat 01 Jan 2022 04:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60945
IP address blocks: 193.31.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120251610 (0x72ae4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 1 04:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0430a2164f6d801199152d92bdaff70e2da9d357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:28:7f:05:db:40:b8:79:1a:b2:e4:14:5e:9c:
e9:9e:e3:73:c2:4a:92:59:59:61:2a:af:7f:27:fe:
d2:7f:e7:58:3e:94:ac:e6:9b:8b:27:96:95:90:f9:
7a:13:ca:fa:61:49:45:e3:90:a0:4a:c6:69:8c:ff:
c2:32:20:e0:8e:20:0c:4a:49:f4:fa:cf:f3:8f:b5:
50:ef:d9:93:66:1f:48:97:36:6a:00:80:fc:01:f0:
2a:89:64:de:91:f7:56:07:62:98:3c:bc:27:8c:57:
98:72:7f:03:66:10:23:57:67:4c:2b:f1:c2:39:38:
59:ee:a3:b7:1f:5f:6d:12:74:9d:09:2d:fb:53:8c:
61:15:73:85:bd:3a:8f:09:b9:e9:d0:81:17:6d:b2:
d7:93:97:37:3c:a8:29:4a:1c:ae:91:1f:c2:3f:47:
15:53:dd:7e:4f:00:2c:68:85:25:bf:2c:a2:27:54:
ff:8b:56:5c:96:9c:ff:23:1f:78:8a:3f:31:c0:04:
86:96:c1:4e:35:c4:ad:1b:25:91:88:89:cc:c5:04:
51:5c:45:e2:0c:ed:8b:bf:fe:23:74:86:8f:9a:96:
a4:77:84:9d:4f:e2:74:e1:53:de:db:10:4c:e1:4b:
35:23:2a:0c:cb:2b:51:cf:a4:3f:27:c9:bf:52:4b:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:30:A2:16:4F:6D:80:11:99:15:2D:92:BD:AF:F7:0E:2D:A9:D3:57
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/BDCiFk9tgBGZFS2Sva_3Di2p01c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:11:7d:92:01:31:4b:9f:20:52:38:bc:97:5b:3b:43:1d:a5:
3d:1a:b5:7f:54:57:f6:bd:ce:eb:a3:6d:a3:5b:4e:f3:2d:62:
87:16:2c:d0:86:5f:2c:12:86:4d:c9:4f:62:f0:d2:eb:06:7a:
f3:ad:f7:eb:c7:f6:9c:22:e3:a8:71:eb:b0:16:21:bf:39:a7:
13:6a:a7:d4:a8:29:99:3c:bb:e2:6a:45:cf:f8:a7:d4:92:d7:
41:93:1f:6a:1f:5d:d1:33:64:60:a9:b2:b5:b8:5b:50:4f:5d:
31:4c:87:b4:74:8a:e7:87:4c:1f:eb:7a:1e:82:e3:5b:94:7a:
67:aa:31:ab:8a:a6:81:c2:06:63:76:c7:58:77:1b:3d:2c:1c:
37:e6:4a:ae:ed:66:8c:bb:c7:95:26:8a:dd:60:c6:8b:fb:4f:
99:3f:73:03:8e:31:0f:ab:f6:0a:ce:82:11:b7:bd:01:e4:65:
0c:86:86:50:f0:3e:26:43:fb:0b:99:ce:96:fc:43:e3:c3:81:
48:c9:cc:35:88:88:67:55:8b:6b:0b:4b:fa:08:6c:47:4f:16:
4f:8d:13:25:a8:4e:dc:ef:63:a6:a4:a8:2a:ae:8f:84:cc:a8:
e6:e5:49:35:82:b3:ec:92:f6:42:de:90:e6:38:d4:17:0d:62:
c6:ea:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:31 2024 by rpki-client on console-fra.rpki-client.org