Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/BJpHswsF-PThwWgGN3clEBa5Pww.roa
File: BJpHswsF-PThwWgGN3clEBa5Pww.roa (raw, json)
Hash identifier: t3x7ClBcuan6WxrjHywLR7FXi+71qSJx8L2hKl+D4G8=
Subject key identifier: 04:9A:47:B3:0B:05:F8:F4:E1:C1:68:06:37:77:25:10:16:B9:3F:0C
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01849AC5A9F2FB3118D2410E2FB25A19484B
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/BJpHswsF-PThwWgGN3clEBa5Pww.roa
Signing time: Mon 21 Nov 2022 15:19:16 +0000
ROA not before: Mon 21 Nov 2022 15:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3177
IP address blocks: 85.9.86.0/23 maxlen: 23
85.9.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:c5:a9:f2:fb:31:18:d2:41:0e:2f:b2:5a:19:48:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Nov 21 15:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=049a47b30b05f8f4e1c168063777251016b93f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:b6:bb:ac:89:b1:ee:45:6e:b6:89:b7:f9:
24:7e:8b:9e:01:66:00:68:5f:19:bc:dc:f7:ff:84:
81:da:0c:07:1e:83:c6:38:be:2a:e5:08:ee:dc:6b:
7c:45:75:30:05:fb:38:e7:d8:f7:ee:88:4f:0e:e6:
69:47:d6:39:84:ad:f0:83:e3:04:9a:3d:d8:cc:86:
c6:29:3f:ad:e1:e1:bc:f3:0f:2b:ad:e6:0d:57:1c:
9b:5d:c2:85:fa:b8:bd:c2:43:8a:aa:9b:41:72:4a:
b4:a0:44:8f:77:d5:4b:cd:0e:90:22:f6:32:ca:fd:
f9:5f:f4:4d:fa:34:3f:8d:63:ef:b7:95:46:e9:df:
5b:71:aa:c2:a3:f0:e5:c6:c0:69:18:be:b6:99:e1:
ec:e2:fb:15:88:de:23:2b:bb:ab:7b:7a:1d:6f:5e:
5c:40:16:ba:76:2c:08:84:8b:d4:9e:fb:73:09:c1:
da:c6:a4:40:58:f4:45:7f:4d:57:8d:f6:94:8f:b6:
94:35:4a:47:a7:23:b0:7d:01:16:db:a0:d3:d2:27:
43:e3:cd:c8:a2:14:cf:56:c0:b1:22:e3:21:87:ca:
ec:f6:e7:5e:0c:8f:f1:17:13:5e:82:44:db:aa:d6:
6b:3d:5b:e5:85:dc:7d:30:66:e4:e6:e2:b7:a5:69:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9A:47:B3:0B:05:F8:F4:E1:C1:68:06:37:77:25:10:16:B9:3F:0C
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/BJpHswsF-PThwWgGN3clEBa5Pww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.86.0/23
85.9.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:4e:e2:f6:96:b7:ef:49:53:cd:1d:89:7b:03:cb:9b:a8:d0:
04:4b:f4:d0:fe:8c:f9:1f:9d:19:13:49:62:54:df:31:f5:90:
31:c5:bb:29:3e:0b:e9:20:f4:c7:7e:80:cc:4a:fa:4b:47:61:
c1:69:27:6e:82:77:26:3e:50:e1:58:48:c0:11:13:40:69:b6:
8a:5f:d3:8b:da:34:b2:1a:8e:31:0f:3a:f0:a1:94:b9:0a:db:
b3:a4:3a:c5:ad:d5:43:e2:65:6a:bd:78:a4:13:1e:e5:10:ee:
6e:0c:f0:31:69:63:9f:79:90:33:bc:a6:f4:b6:cc:f8:67:b5:
91:83:05:58:4c:2b:04:66:c1:aa:a2:87:bf:e8:ef:e0:94:39:
72:67:90:ca:4d:69:6e:25:2e:39:4b:45:7e:29:a4:9d:eb:cf:
c4:29:67:ee:eb:b7:01:7c:ef:52:d5:2a:d3:c2:56:1f:c5:50:
0c:aa:4f:25:dd:37:49:90:8c:ae:e5:5f:44:2e:52:40:39:74:
32:f3:76:58:fc:90:9a:61:1e:c8:43:77:45:27:4b:f2:6c:94:
99:05:24:ed:55:d4:b8:e7:b7:bf:40:8d:0c:70:79:62:bf:36:
9d:ab:1f:48:32:af:56:50:49:e1:ef:aa:a7:5d:c2:6e:5b:d6:
62:7d:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org