Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/826b7c-4754-4abd-9875-e1b20077ed93/1/BiZco5CyZuT0ZlwhM6Da2cwWK8E.roa
File: BiZco5CyZuT0ZlwhM6Da2cwWK8E.roa (raw, json)
Hash identifier: FDc6Ei3QR0GswhieQ/Qd3F85kWJCE+cfIblU7qPw9Fw=
Subject key identifier: 06:26:5C:A3:90:B2:66:E4:F4:66:5C:21:33:A0:DA:D9:CC:16:2B:C1
Certificate issuer: /CN=5289a5765a9e836fd0fa811f760f0dcebe8f18ce
Certificate serial: 41B0964E
Authority key identifier: 52:89:A5:76:5A:9E:83:6F:D0:FA:81:1F:76:0F:0D:CE:BE:8F:18:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uomldlqeg2_Q-oEfdg8Nzr6PGM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/826b7c-4754-4abd-9875-e1b20077ed93/1/BiZco5CyZuT0ZlwhM6Da2cwWK8E.roa
Signing time: Sat 01 Jan 2022 10:54:29 +0000
ROA not before: Sat 01 Jan 2022 10:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25091
IP address blocks: 149.255.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102091854 (0x41b0964e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5289a5765a9e836fd0fa811f760f0dcebe8f18ce
Validity
Not Before: Jan 1 10:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06265ca390b266e4f4665c2133a0dad9cc162bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:ea:e2:fd:cc:ec:99:91:8b:29:a1:05:50:
43:ba:8e:14:43:fe:67:c3:50:67:f4:6d:8a:39:dc:
5f:42:30:be:5b:f2:9b:f7:99:68:af:1f:d3:1a:42:
ce:1b:d0:1c:03:2f:af:58:31:68:2f:c6:c8:f6:1b:
34:b5:03:c7:0b:35:29:43:ca:c4:de:eb:bb:7c:f5:
5c:aa:3c:c1:35:14:b7:f8:3c:2c:88:35:e2:70:ec:
15:c9:64:41:42:fa:e0:29:44:df:8f:43:e2:f7:93:
4c:ba:9b:99:a3:ae:d9:83:92:a4:6b:41:6f:c9:59:
a8:24:c8:76:58:d0:01:d4:39:30:2b:35:bf:23:66:
f5:af:c8:d7:57:10:21:b5:6e:4e:c6:34:df:69:35:
22:c8:b9:16:f1:a2:62:89:df:0a:16:b9:41:36:94:
a5:02:f8:d5:fb:1e:d7:e0:63:d4:28:8a:e5:aa:7d:
69:8b:5e:c6:f8:e8:c8:a2:c1:f1:7b:e8:e4:fe:ab:
b2:e6:2d:c5:57:56:66:a6:59:91:54:39:e6:12:9d:
9c:0a:e9:0d:22:78:d9:c8:3e:b4:68:09:d7:8f:41:
7c:99:9e:86:05:3e:37:eb:68:8b:ef:3b:81:15:6a:
49:53:d2:30:95:c4:b3:8e:3c:73:01:93:94:4a:aa:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:5C:A3:90:B2:66:E4:F4:66:5C:21:33:A0:DA:D9:CC:16:2B:C1
X509v3 Authority Key Identifier:
keyid:52:89:A5:76:5A:9E:83:6F:D0:FA:81:1F:76:0F:0D:CE:BE:8F:18:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uomldlqeg2_Q-oEfdg8Nzr6PGM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/826b7c-4754-4abd-9875-e1b20077ed93/1/BiZco5CyZuT0ZlwhM6Da2cwWK8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/826b7c-4754-4abd-9875-e1b20077ed93/1/Uomldlqeg2_Q-oEfdg8Nzr6PGM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.48.0/21
Signature Algorithm: sha256WithRSAEncryption
70:39:43:26:dc:bf:cd:c6:c4:0f:3e:ed:c8:d8:e3:a1:ea:e9:
62:ec:e5:c2:df:35:2b:72:d1:49:5e:22:1e:44:a8:8a:f3:5b:
39:2d:65:e5:62:ef:65:2e:fb:76:e6:26:0e:51:7c:f7:d4:16:
bf:9e:3a:ad:79:73:6b:ce:ae:03:6b:a0:9f:ff:c7:4e:28:7f:
9f:d7:b6:8a:6c:68:8d:ff:fd:d5:63:75:30:48:bd:34:0e:93:
25:9f:c9:a2:af:a7:3d:3f:39:0e:dd:68:a2:dd:70:8b:a8:63:
c0:63:a5:d6:ff:e2:fd:b2:28:b0:e1:80:05:90:be:d4:7f:35:
30:b5:d8:3c:64:f9:cd:6b:62:cc:65:5c:2a:67:e4:05:0f:54:
50:c4:b4:53:29:e7:31:22:3f:f3:bf:97:ee:0d:6a:1f:16:0e:
40:c7:cf:27:47:09:a7:7b:36:0e:a4:ce:dd:d0:df:3e:68:22:
cc:80:34:eb:55:40:c7:72:24:ac:89:f4:65:33:ea:68:7d:12:
c4:00:c5:22:81:d8:d2:87:8a:64:04:fe:4d:86:5f:41:aa:db:
03:db:5f:22:da:c4:75:d8:4f:2b:3a:6a:e7:02:0e:09:67:ce:
d5:0a:6d:21:83:d3:37:50:4b:69:12:ce:5a:f3:d5:b4:b7:d9:
36:fd:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:11 2024 by rpki-client on console-fra.rpki-client.org