Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/BV8GZ4O_JcrV3-CLIo-Tg2mMUfY.roa
File: BV8GZ4O_JcrV3-CLIo-Tg2mMUfY.roa (raw, json)
Hash identifier: /liAX/zmDuNCaskgUOLY8a4A9Ocgefa3+NGYKbQY614=
Subject key identifier: 05:5F:06:67:83:BF:25:CA:D5:DF:E0:8B:22:8F:93:83:69:8C:51:F6
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 042A15AD
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/BV8GZ4O_JcrV3-CLIo-Tg2mMUfY.roa
Signing time: Sat 01 Jan 2022 15:55:52 +0000
ROA not before: Sat 01 Jan 2022 15:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8070
IP address blocks: 195.134.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69866925 (0x42a15ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jan 1 15:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=055f066783bf25cad5dfe08b228f9383698c51f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:23:44:be:62:29:9a:65:66:ca:c2:c8:97:
46:82:97:35:b9:24:2e:68:a4:8f:b8:42:86:88:1f:
f8:d0:32:89:64:9f:73:aa:39:bf:f1:23:c1:be:1c:
52:d4:5f:76:39:5a:7f:9a:c6:35:b5:a6:0a:bd:c5:
8d:c7:cf:a4:b4:33:60:76:41:99:4d:4b:9c:a9:d9:
cf:0c:0f:82:6f:e4:61:19:b9:c8:e3:3a:d8:41:d8:
1e:e2:00:d5:73:7a:56:8a:39:49:61:46:4e:46:49:
27:58:26:db:ce:63:d3:aa:bb:8a:73:e8:ab:39:97:
e3:9f:1d:b2:88:e9:d5:eb:af:fa:ce:81:2b:e6:e7:
13:b0:a7:9c:6d:f8:a3:ac:ee:e9:55:35:d1:ff:94:
d4:d4:c4:64:ef:ac:57:df:41:0a:b6:bb:47:08:03:
09:89:de:a7:7c:12:70:1f:c4:39:e0:47:a7:07:7a:
23:c5:7a:a6:89:33:f1:7b:92:c9:0d:46:a5:b5:b4:
53:b8:f6:a4:ab:7f:57:9e:5b:50:6e:d8:06:96:b5:
2a:d3:89:32:66:c3:94:0d:82:8d:5f:cb:65:a6:f0:
0a:b5:97:11:25:f7:e7:ac:8f:40:6c:b9:0c:08:b8:
c5:2a:c8:d0:db:d5:67:f4:f4:7b:4a:bf:b2:9b:ab:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:06:67:83:BF:25:CA:D5:DF:E0:8B:22:8F:93:83:69:8C:51:F6
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/BV8GZ4O_JcrV3-CLIo-Tg2mMUfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.134.224.0/19
Signature Algorithm: sha256WithRSAEncryption
88:00:8c:10:39:6b:13:d2:7a:0b:4b:3c:61:cc:01:e3:f3:08:
44:48:20:32:c6:c2:42:cb:e9:74:29:66:7f:3b:19:ff:59:82:
e1:0a:3d:1a:16:9e:8f:98:7b:30:2c:86:b5:24:4b:04:10:77:
87:5b:62:95:01:bc:80:8c:0d:8e:4b:1d:46:ab:d6:f4:6b:46:
fd:e8:ff:d0:b4:9e:0e:eb:cb:81:ac:c8:c7:76:c1:a8:d8:98:
e3:2f:ce:1d:67:83:c8:8b:92:be:60:17:7d:1a:18:a3:a0:f3:
d4:2d:c3:f4:7d:5f:10:39:a1:5d:02:9b:6f:29:17:3f:6a:23:
25:6a:77:1d:1d:34:1e:9c:bd:df:90:ab:c2:c5:40:31:94:23:
66:ac:94:74:98:7a:f5:20:f0:5b:56:09:04:b5:24:6f:db:c7:
fa:e1:d6:e1:07:8f:c4:b0:e3:00:15:98:12:e8:7e:61:55:9c:
52:9a:83:55:36:f3:b1:91:5f:1a:2d:31:f4:34:66:99:c5:5a:
dc:44:ea:65:ae:5a:b7:f6:ea:09:f5:fe:1c:02:a9:f9:78:60:
ab:4a:bc:ce:f8:e4:04:36:fc:48:78:65:e8:29:54:2d:b9:39:
48:e1:b0:49:9b:9b:b3:41:7a:a4:4b:37:0a:4f:d5:6e:4a:4c:
5b:00:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:14 2024 by rpki-client on console-fra.rpki-client.org