Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/BcgUXC4pwKIukPg1mo2QWrIC8Qw.roa
File: BcgUXC4pwKIukPg1mo2QWrIC8Qw.roa (raw, json)
Hash identifier: DRiHvqMxE98KHCbRLeDQBAh7ysv2lHMlOQPsaaBeLWk=
Subject key identifier: 05:C8:14:5C:2E:29:C0:A2:2E:90:F8:35:9A:8D:90:5A:B2:02:F1:0C
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 0183EB1CA0001E819D11B2826345581A9E24
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/BcgUXC4pwKIukPg1mo2QWrIC8Qw.roa
Signing time: Tue 18 Oct 2022 12:41:04 +0000
ROA not before: Tue 18 Oct 2022 12:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60555
IP address blocks: 93.113.254.0/24 maxlen: 24
185.13.212.0/23 maxlen: 23
91.217.114.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:1c:a0:00:1e:81:9d:11:b2:82:63:45:58:1a:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Oct 18 12:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05c8145c2e29c0a22e90f8359a8d905ab202f10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:3e:65:e6:9c:2a:32:77:f0:75:38:0f:0f:
4d:90:4e:77:13:06:1d:4d:47:6d:cc:98:3a:66:c4:
37:d4:47:6c:78:12:6f:f0:a8:a6:b3:b1:d2:7b:53:
1c:21:62:0a:a1:c9:df:82:4b:b1:9b:7f:40:10:51:
78:5d:09:6f:91:03:d4:03:40:5a:94:c2:a0:e8:5d:
72:10:20:ab:fc:ca:a7:27:3b:2c:c4:36:a1:44:bb:
d1:cd:68:87:d1:78:a1:f8:aa:c2:57:1d:7f:bf:ba:
1d:a2:62:b5:54:ab:fd:54:b4:64:21:64:57:30:a1:
c0:b8:cd:89:11:1d:9a:7a:e9:f3:96:56:63:d4:3f:
52:56:27:cd:97:78:3a:cd:33:34:bb:2d:ee:b4:6a:
d6:92:1a:61:a6:74:b6:ad:63:c8:bd:1a:32:a8:ea:
d2:a0:92:4d:04:4f:77:15:fc:a8:94:b4:14:91:df:
4a:79:b8:78:eb:22:51:72:50:7d:0e:3c:a2:96:3e:
89:98:26:e6:45:19:67:9f:29:66:f4:1d:84:71:8b:
62:cf:67:b0:cd:0f:97:c7:72:9c:9c:8e:64:dc:d1:
61:7f:23:7c:61:73:0e:05:e2:4f:af:d9:78:7c:66:
47:a6:e4:80:fc:26:95:4c:92:74:4f:3c:7f:4f:69:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:14:5C:2E:29:C0:A2:2E:90:F8:35:9A:8D:90:5A:B2:02:F1:0C
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/BcgUXC4pwKIukPg1mo2QWrIC8Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.114.0/23
93.113.254.0/24
185.13.212.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a6:03:e7:2f:a6:ad:2e:12:c0:2e:22:c7:9a:c0:ae:f2:0e:
5b:7b:af:2a:a6:0b:c3:52:5c:c5:6f:33:ce:96:3a:03:fc:fc:
49:b6:37:73:4a:ec:1d:e3:29:32:dc:c2:3c:db:e3:ab:e7:a3:
1a:50:1d:b0:79:64:b1:7f:11:a6:70:0e:37:3a:e0:40:a2:b6:
61:75:d6:8e:af:4d:e5:a2:05:94:2d:00:c3:09:37:8d:7f:fd:
a5:60:31:74:f2:6f:dc:59:d3:31:84:8b:d1:c2:78:d6:8c:7f:
25:89:44:86:69:59:fa:d8:00:19:5a:70:b7:22:54:8c:d9:09:
6f:fb:89:7f:32:f8:3d:ea:b1:51:77:46:eb:ce:6a:a0:c4:40:
4e:c2:91:4e:a8:86:70:32:07:0f:0c:19:54:72:72:5c:32:db:
ca:d7:01:c2:96:46:70:1c:bc:f7:ed:c1:e5:0d:eb:78:8c:1b:
14:1f:c3:ad:4d:11:77:ed:54:50:66:38:ae:0d:cd:d8:0b:72:
8d:f8:77:df:4d:c0:a4:49:19:e1:d9:be:31:f6:1a:1f:36:3d:
24:ed:62:8e:20:6d:20:1c:f7:ef:ba:00:b1:2b:09:c5:b1:7e:
b1:64:cb:19:a9:6d:68:59:03:ab:3a:07:08:35:8c:09:94:88:
74:ca:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org