Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/Bv1fI73jp_OlM9wtnHOOKv_Lwuw.roa
File: Bv1fI73jp_OlM9wtnHOOKv_Lwuw.roa (raw, json)
Hash identifier: CQDz4pmpvORXT/P8WYt2TfB9mt1nHu7jtIiNCAa13HE=
Subject key identifier: 06:FD:5F:23:BD:E3:A7:F3:A5:33:DC:2D:9C:73:8E:2A:FF:CB:C2:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 01840E53518DDD25AEB87F3B6635D7EDDD7D
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/Bv1fI73jp_OlM9wtnHOOKv_Lwuw.roa
Signing time: Tue 25 Oct 2022 08:47:32 +0000
ROA not before: Tue 25 Oct 2022 08:47:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41107
IP address blocks: 91.108.160.0/21 maxlen: 21
185.31.152.0/22 maxlen: 22
109.68.196.0/22 maxlen: 22
159.253.160.0/21 maxlen: 21
159.253.160.0/22 maxlen: 22
159.253.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:53:51:8d:dd:25:ae:b8:7f:3b:66:35:d7:ed:dd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Oct 25 08:47:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06fd5f23bde3a7f3a533dc2d9c738e2affcbc2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:47:41:fe:54:90:a8:c4:3e:f9:3a:37:c1:
df:24:a6:49:d7:60:3b:e3:91:24:53:78:aa:23:30:
08:34:f3:b9:37:52:9c:5e:7a:8f:23:e8:6e:ec:f4:
46:e5:d2:ae:9f:d5:35:16:65:42:ce:c0:b7:77:c6:
7c:02:c3:35:ad:e1:95:8a:ec:fc:27:82:2c:f9:00:
8d:3d:8d:21:1a:5f:d6:b4:97:91:c5:36:d7:c6:49:
58:b5:51:b5:13:5f:bc:2d:b3:8e:e5:14:ae:02:1a:
5d:bc:79:ae:bc:85:3a:a6:26:f6:27:0f:f5:a7:c3:
9b:d0:28:ad:f9:52:8f:e2:d2:fd:05:2e:ff:77:3c:
60:12:1b:79:62:cc:01:e9:a7:95:de:58:1c:8b:a3:
7e:a1:e9:72:f5:d5:26:7b:10:2d:a1:6f:1b:1b:1e:
ea:09:24:d0:a6:5c:71:7d:25:ed:23:da:34:5b:8c:
33:1f:c4:73:f3:ce:38:a8:3b:dd:c6:e8:34:18:c5:
0f:27:46:13:3c:0d:33:70:23:27:0b:85:5b:6a:10:
8f:33:56:e6:80:5f:e2:3f:15:6c:c9:fd:5c:34:99:
1f:8f:d7:33:69:54:6a:ba:8d:63:93:61:c5:d0:db:
fc:ba:1c:14:87:7a:58:8c:73:37:8d:80:28:b2:38:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:5F:23:BD:E3:A7:F3:A5:33:DC:2D:9C:73:8E:2A:FF:CB:C2:EC
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/Bv1fI73jp_OlM9wtnHOOKv_Lwuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.160.0/21
109.68.196.0/22
159.253.160.0/21
185.31.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:59:27:df:62:79:7c:d2:a6:b2:48:51:6d:06:c2:28:48:09:
30:4f:40:f3:3d:52:0f:83:7b:f3:30:98:97:a1:1c:5e:8c:5f:
60:46:e0:f9:7f:69:08:2d:cd:97:b5:5f:6d:e5:a0:b7:03:db:
4a:3b:fa:1a:0e:ec:00:b7:2b:75:fd:99:9f:92:f2:f7:b3:a5:
8d:9f:f0:58:a5:20:c1:a9:a5:3b:c8:02:21:ba:ba:e9:4d:8c:
c7:d0:e5:21:9f:95:89:c9:b0:dd:29:65:17:3f:16:6d:db:78:
5e:6c:25:e6:88:c4:f1:b6:3f:61:c5:ca:35:44:90:62:e7:57:
c4:ff:14:b2:db:a2:1e:fc:b4:c8:51:fd:b9:8b:73:e1:3d:e1:
bf:b5:9a:38:39:eb:fb:2b:15:f8:28:54:63:70:d4:03:d1:e1:
7f:61:e0:14:6c:ad:4d:04:d4:de:b0:3e:c8:d3:81:12:64:c9:
95:7f:06:83:37:ec:11:04:21:f5:c2:9f:93:82:4d:fa:89:fb:
c6:8f:5d:02:ef:76:1d:a9:1b:31:9f:e2:6b:c2:34:db:20:04:
a3:dc:a3:5e:67:b2:eb:23:3e:26:1b:46:77:b1:11:eb:86:30:
c4:00:29:53:e2:ea:d6:fa:fd:a3:60:8c:76:6f:63:cd:61:d9:
fc:81:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:41 2023 by rpki-client on console-fra.rpki-client.org