Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/BGtt2D29ZaNpu0tEl2SltAeBvDc.roa
File: BGtt2D29ZaNpu0tEl2SltAeBvDc.roa (raw, json)
Hash identifier: NZVgsm3jDZPfOQwHwdp+7gTzmJMnVhUxyNCcJz9J0DQ=
Subject key identifier: 04:6B:6D:D8:3D:BD:65:A3:69:BB:4B:44:97:64:A5:B4:07:81:BC:37
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 078CCA58
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/BGtt2D29ZaNpu0tEl2SltAeBvDc.roa
Signing time: Tue 01 Mar 2022 17:10:28 +0000
ROA not before: Tue 01 Mar 2022 17:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 192.35.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126667352 (0x78cca58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Mar 1 17:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=046b6dd83dbd65a369bb4b449764a5b40781bc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:6c:c9:ec:ee:f6:4b:f4:22:b2:bc:1f:93:
93:ab:73:12:da:0e:68:2e:07:73:98:f6:81:06:b2:
c0:90:af:9c:f2:33:ec:9a:53:3d:76:da:b2:d4:54:
8a:d8:8c:ba:b3:f6:2b:b0:e6:8f:07:f3:ca:03:b8:
a6:7a:8f:f8:44:b6:07:fc:87:68:41:aa:46:d5:31:
ec:ff:7d:a2:c4:fb:43:9d:9e:cd:c4:e6:8c:41:ae:
27:bc:40:f5:20:e0:21:8e:c7:90:6c:4b:e7:08:e9:
ba:3b:87:70:64:8b:d3:50:77:fd:06:46:1b:16:7d:
f3:a0:76:23:e4:0c:83:54:20:b0:0c:25:cb:18:c2:
df:9e:e8:82:6e:02:9d:25:b9:f6:2d:b3:cf:2b:c0:
43:b7:33:2b:06:06:13:de:aa:01:25:dd:67:69:66:
83:b1:9e:bb:c1:6e:e1:69:41:97:61:25:fe:77:42:
db:c1:1b:81:07:8e:26:e6:6e:47:5f:e1:52:a9:a4:
f3:5f:3a:51:75:05:38:3a:8d:5a:94:da:dd:f3:2c:
d2:df:b4:77:38:b6:bb:40:31:51:37:d5:4d:7c:cb:
59:99:7e:d6:a5:14:59:f9:0d:61:c9:8e:be:fc:5b:
a6:40:7b:91:28:2d:97:51:60:71:cd:dd:ce:7d:b5:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:6D:D8:3D:BD:65:A3:69:BB:4B:44:97:64:A5:B4:07:81:BC:37
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/BGtt2D29ZaNpu0tEl2SltAeBvDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.206.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8d:b2:67:87:1b:b8:e1:6b:b1:76:a4:a0:e4:3f:31:33:4a:
b2:10:51:00:a9:37:ee:dd:fa:a9:a6:7e:d3:ca:8f:ee:db:cc:
75:04:04:de:95:a4:29:83:01:50:3d:39:d5:ea:60:46:aa:6a:
59:90:c1:03:99:6a:2c:dd:98:70:c8:7c:d4:54:bf:13:67:16:
03:25:a2:1e:74:47:5e:ef:21:7f:06:b4:f1:a8:05:6e:8f:6a:
05:e7:ae:2a:aa:8a:63:d5:c0:bb:22:e9:51:d9:55:0e:d7:19:
b4:7f:22:99:a4:9d:b7:01:b6:1d:1b:21:35:40:77:e5:fa:bf:
7d:33:3c:96:0d:3c:03:08:ce:ec:d8:cf:71:da:31:c8:b9:48:
f1:d3:a2:44:e4:ac:00:17:83:d9:50:4b:36:12:5d:73:5f:ca:
f3:bd:87:25:b2:45:69:9d:e0:97:98:56:3f:65:3d:c6:cf:fb:
f1:30:ea:30:48:91:7d:5b:67:64:4c:0a:4b:55:ef:18:72:12:
f9:5e:4c:28:c1:e0:15:71:50:1b:1c:2a:60:7a:46:fe:04:58:
7d:6d:ee:be:ad:2c:99:c9:15:0e:7c:0e:1e:c1:1e:77:aa:f1:
39:41:32:be:19:08:80:a0:9d:9e:3f:0b:57:21:eb:bd:6f:ae:
fc:7e:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org