Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/bj59_zm1l5L18nFyXAGEdelV9MY.roa
File: bj59_zm1l5L18nFyXAGEdelV9MY.roa (raw, json)
Hash identifier: BlMAXJAm88efke3vRgnjVDSP9t46A1H7evhpAiYKJ7s=
Subject key identifier: 6E:3E:7D:FF:39:B5:97:92:F5:F2:71:72:5C:01:84:75:E9:55:F4:C6
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 01318708
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/bj59_zm1l5L18nFyXAGEdelV9MY.roa
Signing time: Tue 12 Apr 2022 07:40:09 +0000
ROA not before: Tue 12 Apr 2022 07:40:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.81.0/24 maxlen: 24
185.131.80.0/24 maxlen: 24
185.131.80.0/22 maxlen: 22
185.131.83.0/24 maxlen: 24
185.131.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20023048 (0x1318708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Apr 12 07:40:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e3e7dff39b59792f5f271725c018475e955f4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:3c:db:db:38:db:7e:b2:f8:e5:bb:9d:15:
7b:7c:dd:cb:49:6c:53:7c:b9:ad:f7:5b:8b:55:19:
d5:1a:52:75:7c:04:80:62:c9:b1:18:d8:52:d3:03:
93:fb:96:a7:f7:39:6d:25:4c:9a:95:3d:1d:23:64:
5c:ae:1b:da:e1:32:38:64:50:b6:0b:32:34:2b:6d:
4c:e4:65:81:a5:c8:4e:03:0c:3b:66:e5:73:3a:17:
9b:f9:6d:5f:4a:0f:06:3c:54:de:92:12:a6:04:73:
d1:34:87:47:12:45:c5:1f:ec:71:da:09:83:38:ad:
a3:fd:2b:96:77:48:d0:24:09:2e:06:da:46:f5:47:
73:14:4b:e9:cc:d0:8e:e1:af:34:f9:12:6e:73:c1:
45:ea:ff:cf:ed:c5:a2:67:d3:64:1d:c6:ba:ea:bf:
ef:58:14:a8:a8:2e:e5:04:78:52:30:ce:22:c2:ab:
92:6b:51:d8:90:41:7f:67:75:c1:c6:4e:ab:29:a6:
bc:e6:f6:99:1b:19:74:33:38:f0:29:64:0c:55:71:
65:d5:7e:f2:18:e9:b0:aa:b6:cc:fc:25:4e:e7:dd:
9b:ca:70:95:52:90:fa:51:9b:a4:d4:5f:2a:be:cf:
5b:3f:58:2a:6a:28:96:57:b9:94:a9:c0:8d:bb:6f:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:7D:FF:39:B5:97:92:F5:F2:71:72:5C:01:84:75:E9:55:F4:C6
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/bj59_zm1l5L18nFyXAGEdelV9MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
Signature Algorithm: sha256WithRSAEncryption
01:43:65:59:14:ea:96:1a:3f:0c:5b:0c:40:d6:a3:94:86:27:
1f:95:12:62:92:d1:6d:b4:6f:8c:1a:96:72:20:8c:8d:50:f6:
c1:5e:cc:b2:60:9e:72:12:f3:1a:28:ae:d0:24:69:b8:59:64:
a4:7e:c7:d5:68:50:e1:7b:e4:e5:46:ce:35:d8:db:b0:26:87:
82:55:ed:cb:43:52:ac:f5:4d:4b:18:f3:7a:4a:1e:90:71:4c:
40:63:63:09:ab:33:17:24:0e:0a:d4:6c:1c:20:20:f4:a2:88:
03:c4:a3:09:a8:f0:54:e5:5b:a7:25:b7:09:17:e8:c7:4b:e7:
33:a4:37:f7:bb:c5:62:18:e2:14:30:30:e0:1a:1c:05:21:b4:
58:3b:78:30:07:49:82:c0:82:41:2b:f5:2f:dc:64:29:fe:94:
71:29:1b:78:c4:be:e9:11:66:9b:69:d0:26:d1:ef:2b:dc:f3:
ca:7d:4e:18:5b:21:0a:89:38:a2:af:53:3f:3a:2f:78:02:f7:
4c:d6:78:ed:6c:20:0c:04:08:41:ef:ce:ef:fc:45:70:cb:7c:
05:cd:39:36:8f:1f:1e:58:0f:b2:9e:c6:7d:6b:20:f8:31:c2:
1f:84:62:93:07:e2:ae:12:c5:74:7c:36:9a:44:fa:73:02:d6:
db:a7:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org