Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/BjV2gSc7yFS7LYk5j4vGL64IFUc.roa
File: BjV2gSc7yFS7LYk5j4vGL64IFUc.roa (raw, json)
Hash identifier: nlS8DADwpQtwDuahKj4SF2bpGLJvTl/yqCgOOwVU9Tc=
Subject key identifier: 06:35:76:81:27:3B:C8:54:BB:2D:89:39:8F:8B:C6:2F:AE:08:15:47
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 01853A06FD72FAB5EA749E97573CAF5610C7
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/BjV2gSc7yFS7LYk5j4vGL64IFUc.roa
Signing time: Thu 22 Dec 2022 13:30:14 +0000
ROA not before: Thu 22 Dec 2022 13:30:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201996
IP address blocks: 87.246.42.0/24 maxlen: 24
87.246.43.0/24 maxlen: 24
87.246.40.0/24 maxlen: 24
87.246.41.0/24 maxlen: 24
212.5.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3a:06:fd:72:fa:b5:ea:74:9e:97:57:3c:af:56:10:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Dec 22 13:30:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06357681273bc854bb2d89398f8bc62fae081547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:94:ae:ba:34:ad:dc:a7:1f:ee:f6:8a:df:
03:e1:c9:83:68:b8:c9:99:6f:6b:fd:33:3a:32:2e:
97:cd:7f:bd:97:f9:25:e4:4a:e1:2e:56:ce:26:4d:
9d:13:c8:fb:4d:bb:07:72:fe:8d:7f:8c:74:70:db:
78:1b:86:df:fe:c8:55:a7:29:dd:08:fe:0e:aa:45:
9f:6c:28:cb:a2:c6:72:b6:69:68:40:4b:b6:89:ce:
63:e6:88:45:e8:5e:6d:ac:e9:15:50:3d:4c:ad:62:
08:58:7b:4a:35:fe:50:e0:af:c2:c0:2b:cc:fc:d2:
f3:dd:de:42:46:46:a3:5b:1e:00:70:c0:f6:27:17:
4d:9a:ed:d1:5b:0c:86:78:a1:e5:4e:e8:aa:be:6d:
38:82:3f:1e:44:84:00:ae:d3:d0:99:69:62:15:d7:
a7:91:4b:c6:70:ce:0c:9c:24:dd:42:c6:24:d7:63:
60:01:c8:8d:72:a9:47:44:9b:0c:59:c0:8d:b9:34:
4f:22:89:58:64:9e:5a:04:09:21:4c:c9:1d:4f:16:
0e:75:91:84:38:18:fc:10:b6:b9:0c:96:11:bd:74:
3a:10:f3:c2:5a:08:b1:49:e4:cf:ff:ba:e8:5e:0b:
eb:1c:44:49:df:76:67:63:c8:95:b1:11:32:92:26:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:35:76:81:27:3B:C8:54:BB:2D:89:39:8F:8B:C6:2F:AE:08:15:47
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/BjV2gSc7yFS7LYk5j4vGL64IFUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.40.0/22
212.5.60.0/24
Signature Algorithm: sha256WithRSAEncryption
79:3a:53:ea:75:77:70:7a:a3:e2:ce:75:7a:f6:70:25:16:0b:
91:10:80:23:4d:34:9e:79:0b:ea:f5:d3:d2:c3:94:32:0c:45:
3b:be:52:e8:17:bb:20:ab:2c:0b:68:1a:16:fb:30:f1:bd:0b:
04:eb:f8:f9:c7:45:cd:f4:34:50:3f:30:26:44:1b:fe:20:2d:
55:71:16:e3:73:aa:6a:55:04:8c:e2:56:a4:59:55:a2:c0:24:
66:98:3b:e1:0a:5b:9b:06:5b:ca:c8:61:ff:40:ef:33:b5:a8:
b2:61:fd:ae:d4:04:e5:7b:74:5e:51:75:08:94:3e:14:ad:de:
41:96:df:9a:85:ab:bc:6e:ce:c9:b7:34:95:c6:8e:6e:2d:cc:
6b:67:4c:67:fc:8c:e9:fb:35:a9:6d:86:9d:27:15:0f:8d:85:
0c:2a:8c:1c:34:e9:2a:20:ec:63:3d:b2:27:8f:c2:bc:19:45:
2d:da:27:c7:9f:c9:87:df:64:18:24:f2:e6:85:d0:21:cb:c0:
62:77:01:11:61:b7:80:4c:4c:6a:11:24:4c:14:16:53:8d:c5:
b3:14:12:28:a7:b4:12:39:98:14:5f:25:5d:f7:d7:f7:8e:08:
40:86:b7:06:8c:b7:75:fd:b5:93:f0:51:a0:41:6b:e1:25:cf:
05:89:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:33 2023 by rpki-client on console-fra.rpki-client.org