Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/B4pQlLWOcfEcbDfNjrc-tWYSPLo.roa
File: B4pQlLWOcfEcbDfNjrc-tWYSPLo.roa (raw, json)
Hash identifier: Pn3Fu8eZ6D8WwRdDJ+WpKdj2+W+vBfosuiM0HKd/U14=
Subject key identifier: 07:8A:50:94:B5:8E:71:F1:1C:6C:37:CD:8E:B7:3E:B5:66:12:3C:BA
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01852A0FA3457F4B25F05352353E3C624FC8
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/B4pQlLWOcfEcbDfNjrc-tWYSPLo.roa
Signing time: Mon 19 Dec 2022 11:05:45 +0000
ROA not before: Mon 19 Dec 2022 11:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 185.118.78.0/24 maxlen: 24
213.21.229.0/24 maxlen: 24
213.21.233.0/24 maxlen: 24
213.21.246.0/24 maxlen: 24
213.21.250.0/24 maxlen: 24
213.21.251.0/24 maxlen: 24
213.21.247.0/24 maxlen: 24
193.68.85.0/24 maxlen: 24
213.21.254.0/24 maxlen: 24
193.68.91.0/24 maxlen: 24
193.68.95.0/24 maxlen: 24
193.68.92.0/24 maxlen: 24
213.21.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:0f:a3:45:7f:4b:25:f0:53:52:35:3e:3c:62:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 19 11:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=078a5094b58e71f11c6c37cd8eb73eb566123cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:e1:69:5d:86:98:39:35:1a:d6:0f:dc:a0:
89:23:2b:70:51:69:e9:8e:63:44:07:20:5f:a5:d8:
62:85:3b:45:d3:5d:47:bf:40:2e:3e:85:bb:ac:e3:
71:57:5d:c1:e9:b2:34:32:68:fe:92:47:74:39:eb:
92:17:ed:fe:37:1f:75:6e:d0:89:3e:56:92:32:40:
e6:bc:a1:5b:d7:ed:91:eb:96:78:d8:c5:ea:86:76:
ea:57:bd:96:a9:45:f8:3a:6a:29:eb:6e:c5:43:2e:
d9:95:fc:51:54:d7:23:3e:d2:7b:01:d1:50:ef:74:
0b:a4:65:0e:76:bc:e3:b0:77:4b:8c:9e:65:4d:f0:
45:5c:e0:31:31:1b:c1:19:b8:08:25:86:a3:67:dd:
63:80:32:c4:dd:bd:05:1e:ca:eb:12:2a:26:dd:f6:
40:6a:53:9b:38:8f:b5:7f:db:b0:4c:87:5d:95:0a:
3e:10:d4:ad:88:c4:bb:ee:0a:ef:5d:6a:6f:5d:5e:
fc:5c:99:80:fe:5d:7b:90:fc:d2:8a:5a:c9:f3:14:
a3:6d:12:09:ff:7b:37:3b:8f:2e:d8:ca:f1:e2:d1:
0a:46:3c:9d:e9:87:7d:a2:30:46:11:ee:3e:b3:c0:
0b:5c:0c:64:f3:ea:f5:d0:a2:c1:29:1e:12:16:c3:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8A:50:94:B5:8E:71:F1:1C:6C:37:CD:8E:B7:3E:B5:66:12:3C:BA
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/B4pQlLWOcfEcbDfNjrc-tWYSPLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.78.0/24
193.68.85.0/24
193.68.91.0-193.68.92.255
193.68.95.0/24
213.21.226.0/24
213.21.229.0/24
213.21.233.0/24
213.21.246.0/23
213.21.250.0/23
213.21.254.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d2:a3:0a:29:e4:23:2c:a2:98:04:dc:9e:71:49:e3:1b:56:
35:bd:99:53:4d:65:ce:d4:e2:5c:3d:71:39:40:47:66:59:8a:
1a:b5:e8:60:d9:26:6f:df:4c:99:43:38:1a:38:44:93:0f:0f:
11:9b:87:cf:1d:85:dd:ee:54:62:02:53:f8:02:65:cd:4d:35:
d4:be:cd:48:e4:21:4b:7f:1c:65:d8:94:55:62:3c:48:dd:ef:
33:67:34:9f:14:3f:9c:ab:cd:a3:c5:87:c3:e9:4e:99:b3:71:
36:9e:fd:b8:39:c2:08:ec:6c:45:cb:8c:a3:a2:54:b0:db:94:
19:35:3a:00:cd:ce:06:b2:66:c6:15:8b:e8:dc:73:66:3f:ff:
c5:0f:e7:d1:47:80:0e:f6:f7:21:a6:20:f6:c4:24:5b:5f:6e:
70:df:6b:2e:3f:bc:3a:3a:dd:e1:9b:8e:6d:28:78:18:cf:75:
42:8e:98:4f:6c:35:d4:bb:5c:ff:3b:e4:be:6b:e1:d8:07:28:
69:1a:ed:69:8f:34:7d:99:9a:11:fd:65:18:9b:3a:ee:49:cd:
88:cf:60:00:22:ea:86:f5:80:83:e2:4b:95:e2:fd:ac:25:67:
29:bd:21:7f:17:88:0c:33:b7:5c:f7:d8:50:37:e5:e8:43:9a:
ce:0d:8c:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-ams.rpki-client.org