Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/Bbxcm4DVXKyCrzl1hE3SrGHC16k.roa
File: Bbxcm4DVXKyCrzl1hE3SrGHC16k.roa (raw, json)
Hash identifier: XGqp4mVVQYv1Tdf8RU3Z37wH2ckY06P9gHhDKLiQEHs=
Subject key identifier: 05:BC:5C:9B:80:D5:5C:AC:82:AF:39:75:84:4D:D2:AC:61:C2:D7:A9
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 031502E8
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/Bbxcm4DVXKyCrzl1hE3SrGHC16k.roa
Signing time: Sat 01 Jan 2022 06:57:31 +0000
ROA not before: Sat 01 Jan 2022 06:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203851
IP address blocks: 185.154.48.0/24 maxlen: 24
185.154.49.0/24 maxlen: 24
185.154.50.0/24 maxlen: 24
185.154.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51708648 (0x31502e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Jan 1 06:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05bc5c9b80d55cac82af3975844dd2ac61c2d7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:98:e9:6d:0c:7c:e9:6b:42:b2:bf:d3:44:
19:e6:08:58:ac:8f:0c:69:36:9b:74:84:50:67:54:
b3:d0:04:60:b0:9c:68:28:ad:82:11:56:5b:b5:a1:
65:d1:8b:aa:7b:89:da:89:cf:5c:b9:c0:79:e5:5c:
08:8d:c1:f1:d0:57:a4:21:9c:a5:9d:fe:ac:0e:9f:
fc:69:2c:aa:a2:c8:98:c3:1f:53:cb:9a:5f:8e:1f:
bf:d4:d1:f1:2f:54:30:9e:93:75:95:3f:15:99:94:
8c:a8:ab:b4:46:c2:7a:04:3b:00:29:eb:5e:15:19:
9e:a7:df:4d:1b:a1:08:16:e4:98:99:1e:6f:8f:4d:
34:04:2b:83:22:68:ee:0f:3c:48:07:eb:cb:14:99:
21:fd:1c:6c:71:e6:53:66:5e:90:3a:62:be:a9:aa:
03:aa:ea:73:81:31:52:e0:55:02:66:12:62:69:87:
44:09:4d:15:20:67:8b:83:b0:30:92:38:66:08:8a:
e9:d0:6a:17:1e:d2:62:40:53:87:da:39:75:d1:b6:
d2:a2:1f:a4:af:f2:ed:99:80:f4:5d:6f:82:4d:7d:
2e:c9:4a:3a:b5:0d:25:f6:ff:0b:64:93:f7:66:08:
43:67:d8:87:08:d5:17:d3:fe:f4:8e:25:00:65:6a:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:5C:9B:80:D5:5C:AC:82:AF:39:75:84:4D:D2:AC:61:C2:D7:A9
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/Bbxcm4DVXKyCrzl1hE3SrGHC16k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.48.0/22
Signature Algorithm: sha256WithRSAEncryption
55:b7:e4:f2:12:9c:31:43:8f:00:d2:00:05:c8:ae:b0:98:9a:
69:3e:d9:e1:d9:2b:42:2f:8f:4d:f2:f7:46:98:40:b3:c4:6e:
fb:84:09:06:4e:2f:5e:c2:b1:0c:48:40:4e:b1:2a:b5:19:dc:
c9:ca:e1:ed:c7:89:cb:32:6f:d7:28:f9:29:84:4e:70:12:35:
71:d5:65:3c:60:da:e9:08:67:97:85:96:e7:0b:ca:f6:b2:67:
d2:c8:5e:4e:25:d9:31:91:a6:bc:8a:c2:25:c9:88:88:89:a4:
8b:18:f2:3c:d2:86:34:24:f9:cc:b2:73:5f:c4:41:47:62:fe:
87:dc:c6:12:15:61:b1:84:97:9a:fe:f4:a3:73:e4:89:6e:d8:
6c:05:67:2f:a4:fc:7f:20:d3:97:05:5d:0e:f4:69:b8:d3:32:
29:24:f9:7f:30:e0:cd:1c:4a:ca:7a:f0:2f:84:26:15:a8:03:
26:c0:b5:36:fb:7d:02:71:ea:a1:0f:cc:de:74:ae:bc:a3:5f:
d3:4f:59:85:f9:8b:08:f5:5a:b6:2f:8e:4a:ef:85:22:d8:78:
e0:13:0e:06:72:37:99:aa:a1:42:70:a7:8d:3b:7f:03:b5:2f:
5c:38:f4:f9:3e:24:0b:35:5e:7d:15:99:7f:09:41:d4:32:25:
5e:f4:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:15 2024 by rpki-client on console-fra.rpki-client.org