Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/BXuKHUaV2XmlSzzxR2xJ2h5_178.roa
File: BXuKHUaV2XmlSzzxR2xJ2h5_178.roa (raw, json)
Hash identifier: gmu1vPe88jho0WxOMwIcRr5ItfopTnxFQOxnF6oIXNA=
Subject key identifier: 05:7B:8A:1D:46:95:D9:79:A5:4B:3C:F1:47:6C:49:DA:1E:7F:D7:BF
Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial: 03BFA764
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/BXuKHUaV2XmlSzzxR2xJ2h5_178.roa
Signing time: Sat 01 Jan 2022 00:51:39 +0000
ROA not before: Sat 01 Jan 2022 00:51:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50920
IP address blocks: 185.64.62.0/23 maxlen: 24
185.64.60.0/24 maxlen: 24
185.64.60.0/22 maxlen: 22
193.28.229.0/24 maxlen: 24
92.39.160.0/22 maxlen: 22
92.39.160.0/20 maxlen: 20
193.151.60.0/22 maxlen: 24
193.28.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62891876 (0x3bfa764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Validity
Not Before: Jan 1 00:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=057b8a1d4695d979a54b3cf1476c49da1e7fd7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:cd:4d:15:ba:7b:a1:4b:cd:5f:e6:34:2d:
17:ec:2e:6a:3d:23:a0:67:06:10:b9:3c:38:f1:b7:
7a:2d:e8:bc:7c:12:4e:55:5a:01:b2:be:bf:0a:b4:
72:9d:25:9b:a0:89:4c:cd:57:25:13:0d:71:6d:f7:
b0:b5:3f:28:ac:61:73:c5:dd:72:5c:ce:44:b0:fa:
8f:30:80:6c:b8:4e:e6:3d:1d:86:1f:68:82:fd:de:
b9:45:43:f6:35:0e:e5:e3:4b:3b:3a:c0:52:58:d5:
3f:97:2c:85:3f:d1:06:dc:ee:47:27:ad:17:6e:8d:
db:a0:a2:ee:37:40:72:58:2d:be:6e:45:8c:d9:fb:
64:36:b5:21:98:7e:f4:fe:96:bb:69:b4:28:e8:b3:
fa:a5:56:b4:c7:b7:c2:b9:1b:ee:69:a0:d4:ca:47:
73:53:51:75:92:ab:78:cf:fb:2b:34:12:d9:fd:a0:
96:ee:0d:41:34:a6:43:46:74:09:2f:52:e2:93:e8:
63:18:e3:71:ea:13:d3:6b:fe:cd:69:37:b5:aa:4a:
12:07:ea:7b:74:7f:d0:f4:c1:82:57:12:63:65:f3:
45:58:20:7b:01:da:62:54:07:eb:0a:7d:96:4b:73:
6a:8a:2d:b1:22:09:5b:9e:07:50:11:3d:39:82:5b:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:8A:1D:46:95:D9:79:A5:4B:3C:F1:47:6C:49:DA:1E:7F:D7:BF
X509v3 Authority Key Identifier:
keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/BXuKHUaV2XmlSzzxR2xJ2h5_178.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.160.0/20
185.64.60.0/22
193.28.91.0/24
193.28.229.0/24
193.151.60.0/22
Signature Algorithm: sha256WithRSAEncryption
39:b5:b0:64:06:2a:ca:c8:9a:5f:68:92:e4:19:2b:32:9d:85:
9b:68:61:07:a2:1d:43:72:5a:d6:2b:a1:30:15:43:2a:20:69:
3e:6a:55:35:39:f1:08:d3:7a:db:08:08:55:8c:4e:b0:ba:38:
2e:da:e7:de:b9:03:e5:3a:87:d0:7e:3f:b0:22:a5:92:34:fa:
67:f2:f3:ef:46:ab:cb:1c:2f:ce:f6:79:45:33:e0:7d:1d:4a:
d6:e8:97:33:ba:b8:bb:2a:5f:fc:4a:c6:10:de:ca:97:16:04:
43:e4:db:f7:87:21:fc:ea:e8:99:e4:66:7a:c3:80:3f:c3:f1:
40:09:1c:77:5f:30:ee:34:60:e1:bc:8a:85:e4:9a:42:e1:57:
56:85:15:7b:fc:0c:d6:c0:e7:2d:83:99:9e:ba:dc:ef:9e:96:
7f:f0:ef:ea:3c:34:dd:5f:9d:ca:3e:77:4a:3f:80:b3:11:3d:
20:d2:2c:8a:39:8a:bc:f9:89:d1:c8:ec:ef:f6:65:4d:b6:a5:
00:d1:ca:0f:ca:60:39:ba:30:a3:6d:54:dc:e7:56:d6:b1:90:
17:b3:08:cb:a4:f5:c9:06:f7:49:e1:80:92:e3:eb:11:09:34:
22:c5:06:d7:d0:36:66:67:66:e5:e9:df:13:a2:53:70:27:80:
ec:e3:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:33 2023 by rpki-client on console-fra.rpki-client.org