Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/COovY0QcA8OOgxrh1I0pQdUCBPY.roa
File: COovY0QcA8OOgxrh1I0pQdUCBPY.roa (raw, json)
Hash identifier: OE8l4XWRaP0GkumaTRaoo2BkCCZodj+p1OmEZZ9MbwQ=
Subject key identifier: 08:EA:2F:63:44:1C:03:C3:8E:83:1A:E1:D4:8D:29:41:D5:02:04:F6
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 016FD43A
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/COovY0QcA8OOgxrh1I0pQdUCBPY.roa
Signing time: Tue 22 Mar 2022 20:28:02 +0000
ROA not before: Tue 22 Mar 2022 20:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8290
IP address blocks: 195.28.128.0/19 maxlen: 21
185.77.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24106042 (0x16fd43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Mar 22 20:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08ea2f63441c03c38e831ae1d48d2941d50204f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:15:0f:6f:fe:5c:6f:fe:68:ac:bb:04:d0:
ca:28:55:ee:e7:0e:36:3d:9b:6f:49:b6:17:64:b0:
f6:7f:b3:30:ba:54:f6:8f:6f:7c:09:e6:95:b2:2f:
da:8d:e4:02:f4:0a:f2:56:97:51:06:81:0e:cd:3e:
ef:ce:35:1a:fe:a5:ae:5d:69:88:6f:5a:e7:41:c7:
c8:4c:4a:8a:cd:c6:8b:79:ba:5a:5e:06:ba:9c:46:
af:68:57:be:27:c6:6f:30:e8:ff:84:ad:e0:3f:e6:
73:75:36:99:01:ad:de:f5:94:b1:e0:15:ba:64:dd:
69:f9:4b:1b:56:92:25:ab:2a:46:83:ee:8d:7a:6c:
ad:82:31:22:81:2e:fa:3b:43:8c:85:d0:cd:f4:dc:
dc:7d:27:02:df:d1:20:11:0b:c1:f9:e0:14:dc:93:
ff:9c:2c:0b:3b:c5:3a:8e:f3:1e:9c:4f:60:08:ad:
e6:81:f8:17:39:b4:b1:ef:06:99:fb:15:ab:c5:22:
51:a5:56:ac:47:d8:28:7e:17:90:96:3a:62:a4:1f:
73:c0:0e:96:89:94:0d:c9:d7:2f:2e:b2:68:9e:4a:
66:98:c3:ea:fa:84:d5:c2:86:9c:30:83:d1:c6:b5:
f9:85:06:32:41:16:97:41:a0:bd:5f:0d:8f:f3:6f:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:2F:63:44:1C:03:C3:8E:83:1A:E1:D4:8D:29:41:D5:02:04:F6
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/COovY0QcA8OOgxrh1I0pQdUCBPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.144.0/22
195.28.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:14:7a:12:ec:bd:35:e3:70:20:72:ae:b8:6c:8b:59:34:8c:
2e:b4:10:98:90:27:db:29:90:94:1e:6e:6c:9c:97:9b:69:59:
2c:74:ee:90:07:4e:d8:00:06:85:56:d5:80:8a:d3:1b:4e:26:
f7:96:6f:ea:64:1f:36:33:42:9b:d4:5e:42:e0:80:2f:20:12:
b8:38:28:72:4a:17:24:9c:07:48:83:00:ee:57:52:7d:19:f9:
3f:45:fc:ff:64:08:ed:e1:5f:0a:ee:af:3c:66:69:16:0b:9e:
ff:be:4b:2b:fb:59:78:fa:52:04:54:14:bc:bd:27:81:36:fd:
c2:c8:80:c5:c4:0e:2d:d3:8b:28:e3:2d:25:8a:af:4b:67:01:
15:fe:f6:75:47:e4:30:4a:b9:63:ec:9c:32:3a:69:a3:59:d3:
3a:15:01:ad:40:ab:5e:26:f6:23:81:42:f4:5e:50:79:a2:fb:
0c:8a:8e:7e:0a:70:34:dd:f3:8f:e8:0d:53:00:8f:10:c0:f0:
e2:e5:e9:42:d9:6e:a9:76:f2:28:85:1b:8f:e5:5e:02:83:5c:
1c:9e:14:33:9d:1d:ee:d2:a3:80:9b:31:8d:8b:b7:63:f8:43:
7c:76:c2:04:c5:3a:52:02:19:13:55:f3:7c:74:c3:24:b3:55:
17:50:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:46 2024 by rpki-client on console-ams.rpki-client.org