Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/BoMWELKshTQH_c5iECvFI86_oC4.roa
File: BoMWELKshTQH_c5iECvFI86_oC4.roa (raw, json)
Hash identifier: FsP2Gg2TqjsuIfj88bs6bf1/J48TMNSQDEExauXTRhg=
Subject key identifier: 06:83:16:10:B2:AC:85:34:07:FD:CE:62:10:2B:C5:23:CE:BF:A0:2E
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: E730
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/BoMWELKshTQH_c5iECvFI86_oC4.roa
Signing time: Mon 06 Jun 2022 10:56:20 +0000
ROA not before: Mon 06 Jun 2022 10:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 194.29.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59184 (0xe730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jun 6 10:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06831610b2ac853407fdce62102bc523cebfa02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:3d:6d:b0:2f:25:18:63:d8:28:aa:1e:27:
44:97:b8:7f:db:8d:89:f5:9d:bf:5f:26:90:43:43:
19:30:4a:fb:0f:75:a5:6a:75:39:18:75:16:1f:73:
e0:66:29:94:78:cd:ce:3b:92:b1:1d:0b:3b:00:65:
b4:10:e7:db:d1:a9:a3:95:ac:4e:88:e3:5c:96:a0:
03:f2:b6:10:5b:56:4d:87:96:3d:4e:b1:77:9d:c5:
77:90:bd:2b:50:89:e7:50:01:87:45:9f:9f:b9:9b:
c4:89:71:20:f1:5c:da:7b:bb:bf:78:c4:cf:16:27:
cf:e4:f0:9d:77:f3:3d:1a:2b:6e:f8:56:d6:9b:05:
47:db:05:8b:87:67:14:9d:45:c1:75:8c:bc:18:ce:
49:69:e5:31:2b:74:24:d5:4a:45:b2:95:2a:3d:7b:
93:d1:ad:12:fb:c3:cd:82:a8:07:9b:d4:fd:97:7a:
9c:49:b7:26:2b:40:fe:50:a6:91:a8:66:82:ed:d9:
44:b8:49:a4:bb:dc:a9:ab:9b:86:db:b4:0b:6b:5e:
7f:b8:15:7e:14:4a:32:84:fe:15:15:84:3e:c4:16:
2c:58:f8:11:2b:5d:72:00:8f:b4:4a:da:cb:28:b2:
93:be:08:30:0b:18:28:7c:a8:a0:cb:85:63:c8:24:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:16:10:B2:AC:85:34:07:FD:CE:62:10:2B:C5:23:CE:BF:A0:2E
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/BoMWELKshTQH_c5iECvFI86_oC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b4:db:3a:02:10:dc:91:7e:c6:ce:94:9d:cd:0f:eb:cd:c0:
7f:7a:ef:3a:9b:46:74:7a:3a:04:46:f1:54:7b:44:a7:9a:85:
6c:fb:7a:5e:78:af:48:13:7d:80:e7:fc:7d:a4:1a:51:a3:6b:
cc:cd:1b:11:63:ee:fd:13:b0:17:e7:7a:30:65:b8:7c:8c:aa:
10:d9:bc:54:4c:6d:69:95:49:e9:37:f1:5a:5a:59:87:1d:15:
2e:40:1a:c0:99:bc:34:f6:90:2d:7c:76:65:73:ed:c5:52:87:
89:76:c4:f1:10:c9:fa:82:8a:e4:97:da:30:a8:bf:fc:de:2e:
65:d0:99:9f:79:50:9a:b8:e0:05:2d:a4:0d:83:57:16:a0:fa:
61:24:fc:a4:4a:e7:37:dc:17:a1:21:35:02:ec:9f:ee:c9:80:
53:bc:4e:49:82:79:0e:1b:d2:43:49:fb:25:e6:7c:5c:e9:62:
fb:31:59:0e:99:e9:41:4b:0a:0f:9b:40:43:b8:35:a3:4d:02:
3f:33:20:b4:d0:aa:bb:94:1f:e6:ff:ce:2a:4e:9a:20:0c:88:
56:16:55:c4:17:38:7f:92:86:5c:29:2d:07:d1:7c:f3:98:34:
8f:48:38:f1:c5:91:e4:4c:de:25:d7:15:e6:19:af:a3:5d:e2:
35:51:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:46 2023 by rpki-client on console-ams.rpki-client.org