Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/BZUAdXPARoU7LAPF__dJOBvahM4.roa
File: BZUAdXPARoU7LAPF__dJOBvahM4.roa (raw, json)
Hash identifier: C87GX+Gu35t1Dwcy3jlnYMbWrm61kfkf9ZkLgEHMeHI=
Subject key identifier: 05:95:00:75:73:C0:46:85:3B:2C:03:C5:FF:F7:49:38:1B:DA:84:CE
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0BA57585
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/BZUAdXPARoU7LAPF__dJOBvahM4.roa
Signing time: Thu 26 May 2022 09:48:13 +0000
ROA not before: Thu 26 May 2022 09:48:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.237.82.0/24 maxlen: 24
185.237.81.0/24 maxlen: 24
185.237.83.0/24 maxlen: 24
185.86.81.0/24 maxlen: 24
185.86.80.0/24 maxlen: 24
185.86.83.0/24 maxlen: 24
185.205.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195392901 (0xba57585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: May 26 09:48:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0595007573c046853b2c03c5fff749381bda84ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:c7:99:4d:60:4b:74:9d:40:39:75:11:53:
14:14:46:c6:5d:1a:39:71:8b:f6:11:97:28:ca:90:
54:fd:f0:ae:c0:f3:29:00:d9:ab:34:42:6e:ef:8a:
64:0f:01:34:e4:aa:52:e5:3c:9a:de:5c:bd:99:67:
ee:dc:f7:57:68:38:a7:2c:d7:06:bd:42:c9:0a:69:
ad:f9:42:38:b0:68:a8:f1:3f:15:b5:2f:3a:6e:a7:
4f:8f:af:f8:ba:10:3f:05:9e:98:57:a5:5b:e2:a6:
60:ca:5b:46:7f:3e:aa:3a:a4:af:d4:57:a0:d7:be:
c9:4e:23:8b:1a:d5:19:f5:8a:27:9a:69:b6:0e:35:
9a:5e:99:86:83:4d:4a:3d:f6:28:97:b2:05:fa:58:
69:75:f5:49:8c:4a:80:3b:19:dd:fd:ff:77:32:ac:
c5:34:d7:f5:3d:c7:03:7e:5b:11:91:a0:57:62:b0:
61:50:83:a0:a2:a9:16:2c:67:44:7e:15:d1:46:64:
dc:2c:17:54:83:81:68:97:58:7d:7c:5b:e4:7e:d3:
a3:5c:e0:86:a8:d8:d7:18:d4:40:72:4a:58:00:c2:
4b:bf:bb:d1:b7:94:02:f6:31:87:53:d3:3e:c4:7a:
78:99:1a:f9:75:b2:fb:c9:4a:f9:27:0d:33:67:da:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:00:75:73:C0:46:85:3B:2C:03:C5:FF:F7:49:38:1B:DA:84:CE
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/BZUAdXPARoU7LAPF__dJOBvahM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.80.0/23
185.86.83.0/24
185.205.19.0/24
185.237.81.0-185.237.83.255
Signature Algorithm: sha256WithRSAEncryption
66:66:6f:bd:7a:7b:81:3f:06:7d:d3:d7:a4:02:ac:40:52:32:
ed:48:6d:20:2b:b0:e7:02:15:f9:6d:cf:ed:18:cf:9d:9a:fa:
00:f1:e2:0d:0f:1a:2e:10:40:b7:c4:f8:6c:0c:0f:68:34:1a:
e7:81:74:22:81:59:47:0c:a6:92:c7:5f:20:9e:fb:05:a1:02:
b0:e6:8f:ac:74:5d:1b:45:0e:ad:b0:00:44:ab:92:ab:67:80:
0e:9e:b9:1f:b5:38:67:d6:46:11:1e:2a:88:23:77:2f:7c:e9:
61:1e:34:d2:ee:0c:c6:92:eb:8a:b4:4f:61:49:ed:65:64:b5:
ee:33:96:57:e9:19:33:e5:8a:d6:c5:c1:5c:b8:97:d3:9e:16:
67:68:f7:9e:de:3e:d5:12:ad:16:92:3b:c4:77:e6:9f:1e:0d:
fc:9d:20:8b:04:21:8d:5d:ba:28:db:18:f8:db:93:51:e4:db:
51:21:45:55:34:ba:1d:07:9a:d3:f8:bd:aa:a9:73:f9:d5:99:
52:2b:19:aa:4d:e0:f8:95:c2:d8:dd:5d:09:88:fd:e8:d2:33:
56:4d:00:79:79:71:18:e4:d6:39:6a:4c:19:16:a3:00:a7:47:
3b:0f:1f:2c:d4:fe:31:ea:56:96:50:4b:79:56:39:57:00:52:
3a:53:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org