Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/bBUpLe9ojMGgIkOMOkw56h_VD-8.roa
File: bBUpLe9ojMGgIkOMOkw56h_VD-8.roa (raw, json)
Hash identifier: 1cmypOXAMW36V3bsFnKoHLzM27iQm9jzMXGvT0bmO/8=
Subject key identifier: 6C:15:29:2D:EF:68:8C:C1:A0:22:43:8C:3A:4C:39:EA:1F:D5:0F:EF
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018B23FCAFC41E0F70223BFFDFA5F38F7305
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/bBUpLe9ojMGgIkOMOkw56h_VD-8.roa
Signing time: Thu 12 Oct 2023 13:04:04 +0000
ROA not before: Thu 12 Oct 2023 13:04:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 185.187.46.0/23 maxlen: 23
92.42.21.0/24 maxlen: 24
92.42.20.0/24 maxlen: 24
92.42.22.0/24 maxlen: 24
92.42.23.0/24 maxlen: 24
194.50.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:fc:af:c4:1e:0f:70:22:3b:ff:df:a5:f3:8f:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Oct 12 13:04:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c15292def688cc1a022438c3a4c39ea1fd50fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:56:c6:42:2a:4b:c4:2a:bd:22:51:8c:98:
d2:ac:d5:33:22:79:2d:35:02:41:41:8a:ad:f3:96:
de:9e:f4:a0:1f:c1:dd:44:d8:85:fa:39:01:5f:20:
37:ac:ca:ba:b0:2b:f2:4c:b9:1b:96:de:41:c9:b4:
54:00:ff:44:6c:01:4d:83:5f:8a:8e:35:8d:3e:80:
cc:34:da:97:87:1f:c4:ba:f3:93:ef:dd:7d:f3:2f:
62:af:5f:df:2b:6c:4f:78:90:cd:ef:7d:a2:f3:f1:
64:04:cb:d1:c8:b4:45:5b:d3:21:2d:bb:9a:f9:92:
d1:91:e6:5d:08:34:85:19:a1:db:2d:9e:a6:b9:36:
af:04:ca:83:67:33:58:54:26:6c:f0:8a:c5:aa:76:
ea:a9:93:99:3e:81:17:c5:f1:4c:2f:a2:e1:5c:bf:
9e:0b:14:aa:8a:a4:c2:ad:cf:fe:2b:1b:74:54:9d:
5b:61:37:85:d2:d4:67:a5:57:1c:5a:9d:3d:94:fc:
1c:b6:3e:08:28:b2:14:b8:54:cd:a4:c5:0a:a2:cb:
f3:b5:93:cc:5c:44:f1:0d:75:a6:6d:b9:51:49:fa:
a5:c0:0b:68:d7:ee:bc:48:49:8d:85:ef:fc:d9:f3:
48:41:cc:81:30:f9:ac:65:14:02:bc:a2:e0:94:b5:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:15:29:2D:EF:68:8C:C1:A0:22:43:8C:3A:4C:39:EA:1F:D5:0F:EF
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/bBUpLe9ojMGgIkOMOkw56h_VD-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
185.187.46.0/23
194.50.59.0/24
Signature Algorithm: sha256WithRSAEncryption
59:97:c1:14:93:52:ef:85:d5:a8:24:a9:7b:3b:82:77:e5:be:
fd:d7:2a:2a:fe:7c:4a:b4:5a:a0:c8:21:af:36:59:47:8f:27:
72:90:cc:f2:69:69:c2:8d:36:e3:cb:cf:9b:2f:4a:fc:7b:98:
e9:a5:37:00:3e:c9:92:2d:9a:8e:57:48:0c:62:8f:e4:c8:d8:
07:6a:fc:75:7a:a7:5a:1e:6f:24:06:27:5f:c1:ba:75:20:ac:
76:8d:89:7a:c9:38:a2:d4:d3:42:ba:2f:3d:fa:27:be:60:f9:
6b:08:c2:ab:d2:d3:63:3f:4f:ce:44:5b:f7:f5:42:22:85:64:
b0:e8:a2:92:08:26:9d:6b:ac:86:f7:bd:16:f0:71:4a:fe:06:
53:90:cc:a6:a3:8e:4d:ea:2e:66:a6:da:0d:8e:ad:76:e2:e1:
ff:39:7a:32:c1:d2:db:78:ad:98:f0:b9:c4:fc:c0:03:9b:bd:
2f:0c:39:43:79:32:9d:c8:3a:5f:f5:47:d8:ff:c8:b3:7a:75:
a4:8d:75:0d:ea:c8:a5:50:e6:de:41:ce:84:4b:c0:c1:d1:b3:
fd:43:61:03:cb:56:45:19:73:06:19:cf:18:d8:b6:53:28:92:
0d:dd:b1:b0:75:76:02:d0:c9:f6:7b:e9:b6:9e:46:8e:f8:1f:
ea:73:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:11 2025 by rpki-client