Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/BYTGo5_Pj7a3bVLeTszZkJvijhQ.roa
File: BYTGo5_Pj7a3bVLeTszZkJvijhQ.roa (raw, json)
Hash identifier: bxExOvGAKh1QAkNv3pAES9eG88/J/i7tM6LI0K/HLww=
Subject key identifier: 05:84:C6:A3:9F:CF:8F:B6:B7:6D:52:DE:4E:CC:D9:90:9B:E2:8E:14
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 086B00E1
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/BYTGo5_Pj7a3bVLeTszZkJvijhQ.roa
Signing time: Sat 01 Jan 2022 03:54:43 +0000
ROA not before: Sat 01 Jan 2022 03:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 45.95.145.0/24 maxlen: 24
45.95.144.0/24 maxlen: 24
45.95.146.0/24 maxlen: 24
45.95.147.0/24 maxlen: 24
45.80.36.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141230305 (0x86b00e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jan 1 03:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0584c6a39fcf8fb6b76d52de4eccd9909be28e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:01:4d:b3:68:39:38:8f:fc:23:8d:da:d7:
fb:4b:3d:58:8b:87:77:b3:25:ee:60:29:64:54:25:
22:ac:c9:50:56:93:89:c0:fb:e6:de:ab:d6:2d:42:
c1:2a:75:10:af:cd:34:1b:b6:59:1f:ff:72:57:db:
70:ea:b0:40:1e:b2:4f:35:c4:28:90:62:9d:01:1e:
62:db:49:f6:d7:ed:c1:06:eb:a7:78:12:49:6c:1e:
da:0c:0c:47:73:7e:46:af:88:26:58:95:64:6e:e5:
1e:04:97:ad:0d:7d:76:02:f2:32:b2:a4:5e:ea:d8:
e5:0f:ce:28:c9:47:66:0d:5a:1f:80:2d:bd:85:05:
f1:b8:c5:2b:9b:09:ac:0e:97:69:3d:0e:26:3b:56:
78:c7:45:af:e8:a0:71:d9:1e:3e:1f:08:a8:4b:fe:
05:4a:e8:e7:3b:fb:66:65:2e:81:33:c7:c7:35:4d:
09:04:78:5c:c5:2d:5b:08:7a:bf:3e:83:b2:77:ba:
fd:58:ab:7c:f7:e0:d2:40:fa:82:f0:55:e2:dc:9a:
c0:a2:9c:7f:6f:b7:1a:70:90:88:2e:a5:4c:07:f4:
38:46:56:a1:6e:f6:69:23:30:9f:03:a6:52:f0:e6:
4f:38:9b:b8:6f:e8:bc:e2:bc:90:2c:34:12:e0:d2:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:C6:A3:9F:CF:8F:B6:B7:6D:52:DE:4E:CC:D9:90:9B:E2:8E:14
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/BYTGo5_Pj7a3bVLeTszZkJvijhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/23
45.95.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:67:a1:4a:e1:3f:90:f5:3b:c1:52:65:5f:b3:6c:22:da:6c:
78:a2:b2:79:2e:8f:f4:ab:ed:b4:cd:a3:e0:93:79:55:c1:a8:
f9:9c:48:c9:2f:98:fd:57:42:2c:a3:bc:72:a0:b0:fc:fc:c0:
7f:5c:9a:36:16:4d:92:73:c9:e9:32:c8:ea:f8:5e:7c:3f:bf:
3b:7a:b5:cb:55:c6:3c:d9:4f:68:90:84:f9:59:e8:5b:68:26:
e1:b1:3e:af:46:d8:05:86:ef:6b:7f:4b:36:e1:b2:0f:b2:32:
d7:82:93:1d:ce:e3:e4:a8:01:d9:08:4b:07:ad:c9:80:2a:fd:
fc:20:ed:c0:91:b5:64:76:34:fa:33:5d:6d:b7:16:36:95:af:
aa:bc:c6:49:71:91:ee:b6:e9:a8:16:ee:ea:3f:97:05:b9:68:
ba:37:b5:d4:27:41:52:06:b2:76:f5:bf:06:85:61:32:4a:91:
56:32:53:0b:12:00:2d:80:db:16:05:20:20:89:7b:64:ed:c4:
f0:1b:0f:bd:61:28:c3:15:da:19:4d:ca:bc:40:30:41:61:fe:
3c:08:ac:31:08:f7:57:34:2a:dc:cd:e8:f0:a5:3d:ed:68:fa:
d8:8f:90:ec:db:37:d0:2a:2d:3a:41:41:0f:6d:15:b3:d9:fc:
40:46:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:56 2023 by rpki-client on console-ams.rpki-client.org