Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/BzsTq4QE2PGKS5m1PTlQTasKMF0.roa
File: BzsTq4QE2PGKS5m1PTlQTasKMF0.roa (raw, json)
Hash identifier: oyjmg5ZAQO0Goi+g1cip0IYECn7d0g+ZYAHWwFtBQN4=
Subject key identifier: 07:3B:13:AB:84:04:D8:F1:8A:4B:99:B5:3D:39:50:4D:AB:0A:30:5D
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 1ADAA1C2
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/BzsTq4QE2PGKS5m1PTlQTasKMF0.roa
Signing time: Sat 01 Jan 2022 13:02:38 +0000
ROA not before: Sat 01 Jan 2022 13:02:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60185
IP address blocks: 185.2.245.0/24 maxlen: 24
185.2.244.0/23 maxlen: 23
185.2.244.0/22 maxlen: 22
185.2.246.0/24 maxlen: 24
185.2.246.0/23 maxlen: 23
185.2.244.0/24 maxlen: 24
185.2.247.0/24 maxlen: 24
2a02:4440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450535874 (0x1adaa1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Jan 1 13:02:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=073b13ab8404d8f18a4b99b53d39504dab0a305d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:ad:c1:86:00:ee:c5:22:0f:87:bf:11:fc:
34:1a:58:8b:a5:96:24:61:eb:72:4c:92:91:74:fb:
0a:6f:46:0e:10:87:94:59:58:8e:56:5f:bc:59:35:
01:81:7d:71:24:15:a8:f8:07:8a:04:b7:10:3e:42:
16:ca:f9:85:ca:38:9a:f5:f3:75:d4:66:d2:4d:e3:
cd:5b:a1:34:e6:4f:6e:d0:94:4f:06:b2:77:c3:51:
e7:86:7e:77:a7:65:97:f1:9a:35:87:b1:ab:18:21:
be:77:5a:75:83:1b:12:59:83:b8:96:fc:ab:05:64:
c9:74:ca:95:d0:46:7f:3e:bf:cd:c3:d6:22:d0:b6:
e4:cb:72:f0:5a:4f:90:cf:e0:a2:13:bb:56:c4:ba:
00:a8:23:42:da:8c:d0:c2:ee:42:6e:0d:02:59:88:
bb:0c:5d:02:c3:b8:3e:55:fa:41:bb:e1:89:c1:c2:
76:5a:cb:a4:43:c1:61:d8:9b:77:90:57:c7:93:40:
6a:36:1d:2e:de:17:2e:57:a3:60:c6:89:7b:fb:b9:
5c:54:91:4e:1f:20:e5:68:c2:56:9e:b1:14:eb:62:
4f:88:45:f4:67:9c:09:74:22:69:2b:09:12:f6:a7:
b1:88:d8:8c:7f:f3:2f:9b:f6:36:f3:bf:57:56:e2:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:13:AB:84:04:D8:F1:8A:4B:99:B5:3D:39:50:4D:AB:0A:30:5D
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/BzsTq4QE2PGKS5m1PTlQTasKMF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.244.0/22
IPv6:
2a02:4440::/32
Signature Algorithm: sha256WithRSAEncryption
03:30:1b:16:a2:0f:6c:a1:0f:0c:48:41:68:f6:20:2d:8a:d7:
d4:09:92:80:9a:e1:58:1c:c9:6c:bb:8f:2e:20:c5:6f:4f:85:
79:42:cf:96:26:ec:7a:42:50:c5:00:68:fa:94:23:25:d3:7f:
a0:2e:af:39:cd:a6:91:ef:fe:70:0f:07:b6:0e:be:e8:10:9e:
01:b7:09:22:71:da:ed:bb:f0:8d:10:f6:d7:f3:07:51:f6:b9:
42:61:c3:56:4d:b1:30:68:7c:be:48:88:a5:b7:c7:4f:33:53:
10:60:55:ff:cb:67:40:72:a7:43:6e:fe:1d:03:53:b0:bd:de:
c6:f0:1e:78:fd:02:9b:2a:08:eb:3f:7e:d6:da:23:19:6c:72:
a1:11:a5:bf:4e:87:04:99:48:c7:90:4a:08:71:1e:55:9b:72:
41:aa:fe:84:6f:19:db:89:96:07:e8:35:09:4b:09:53:52:d1:
03:69:ca:27:c5:cf:b3:ec:28:62:63:92:bc:f2:6f:a8:4c:3c:
9b:16:8b:3a:6f:cb:00:ca:18:5b:d2:04:88:ba:04:e6:e6:d8:
0f:f9:4d:08:9d:cf:03:a5:76:ee:01:95:39:38:fd:29:0d:0c:
a0:f9:cb:33:fd:66:44:ed:cd:13:78:bd:d3:fd:0f:e6:67:b1:
03:cd:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:11 2023 by rpki-client on console-fra.rpki-client.org