Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BgCpu4k-lVSo6MiUX_p0t1npkCs.roa
File: BgCpu4k-lVSo6MiUX_p0t1npkCs.roa (raw, json)
Hash identifier: lGkYNC/qLr/hLpgxIIJ4Z7Ovg4DOcCodykWUdBaThGo=
Subject key identifier: 06:00:A9:BB:89:3E:95:54:A8:E8:C8:94:5F:FA:74:B7:59:E9:90:2B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0725196D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BgCpu4k-lVSo6MiUX_p0t1npkCs.roa
Signing time: Thu 10 Mar 2022 16:47:07 +0000
ROA not before: Thu 10 Mar 2022 16:47:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.240.122.0/24 maxlen: 24
45.8.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119871853 (0x725196d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 10 16:47:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0600a9bb893e9554a8e8c8945ffa74b759e9902b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:aa:ef:a3:77:ad:49:28:ee:3a:dd:18:80:
11:ce:09:4f:93:3e:cf:80:0c:9c:63:5a:65:46:28:
ac:f3:d6:37:7d:79:c1:b3:14:28:43:f3:73:93:46:
f1:c6:fb:a0:f9:ac:d6:07:99:5d:13:15:29:eb:d2:
61:3c:bd:95:e0:6a:95:76:df:d1:71:05:29:24:45:
f9:43:dd:09:13:6d:80:5d:34:71:b4:be:c7:c6:a9:
ca:d6:c7:e7:9a:de:b2:8d:2a:c0:64:ef:07:56:e2:
32:b6:0e:63:06:c1:81:ed:5b:47:dc:2a:48:1b:29:
5b:d5:25:b6:6c:54:95:b4:84:ac:b3:6f:b4:f7:35:
e2:42:4d:a0:af:75:e2:0f:72:59:68:53:0f:34:d1:
d2:bd:b0:9e:e1:41:1e:b0:cf:e6:56:8a:61:d9:cb:
67:b5:98:c2:ae:23:fa:b7:01:e3:d3:e1:8c:02:be:
98:0b:4d:2f:24:c2:f7:ae:45:70:8c:7f:f9:bf:c1:
60:1d:1f:90:49:bc:f3:a6:a2:6b:fc:2a:33:c3:dd:
ac:d4:02:d5:89:6b:e1:4b:a2:8c:2b:16:29:98:d0:
95:2d:d7:ac:3d:e2:13:6b:b5:a8:26:68:bc:85:8a:
2a:d0:ea:e2:40:5b:e7:41:12:da:79:d4:e4:8b:00:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:A9:BB:89:3E:95:54:A8:E8:C8:94:5F:FA:74:B7:59:E9:90:2B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BgCpu4k-lVSo6MiUX_p0t1npkCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c4:8d:ca:bb:c3:b7:89:82:dd:7a:86:76:d3:f0:69:cb:e6:
4a:b6:42:65:6e:ca:f1:94:00:54:f6:96:f0:2d:e6:5a:25:1c:
c8:81:ac:c6:a3:a2:90:5a:cb:53:a7:a0:fa:fd:08:59:e7:70:
1e:e0:89:85:1d:18:c6:f8:99:7e:49:17:f9:73:46:1e:75:69:
0b:bf:f6:2a:16:64:9b:b0:e9:ca:96:df:d8:69:54:68:7b:bf:
ed:74:36:cd:ba:18:f1:b5:06:10:8b:18:27:03:6e:a9:af:c9:
b8:c6:5a:b7:bf:4e:0f:c2:3a:b9:71:79:2d:31:76:03:4b:59:
65:5c:b4:e9:aa:f9:3c:b9:46:3e:3c:8f:52:f6:ed:a3:1e:95:
1f:1b:98:16:15:ed:d7:2a:5b:b3:b8:3c:6e:78:5f:40:2c:3d:
af:4a:a2:c4:a9:18:08:cc:7e:e0:5b:4f:8d:31:2c:07:98:ef:
75:e7:ae:d2:76:c8:c9:48:bb:9d:95:be:06:dc:77:06:94:de:
90:b6:5d:5f:6b:9a:2c:ff:fb:db:72:56:fa:21:ee:58:84:67:
a6:2b:3a:cc:ac:18:da:a3:31:62:e5:88:ea:38:7a:d8:31:76:
a5:e6:b3:7a:3b:77:31:1f:82:48:43:7b:f8:9e:3f:d1:39:d2:
c7:f2:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org