Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/BdKLHlEutsXhRbXsAdB13e_eZ28.roa
File: BdKLHlEutsXhRbXsAdB13e_eZ28.roa (raw, json)
Hash identifier: IbbWrWT6y3fBmWD0DiiWsjJYoW1ggGYLEh68fIHhPAc=
Subject key identifier: 05:D2:8B:1E:51:2E:B6:C5:E1:45:B5:EC:01:D0:75:DD:EF:DE:67:6F
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 08BE99D2
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/BdKLHlEutsXhRbXsAdB13e_eZ28.roa
Signing time: Sat 01 Jan 2022 09:06:32 +0000
ROA not before: Sat 01 Jan 2022 09:06:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 109.232.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146708946 (0x8be99d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Jan 1 09:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05d28b1e512eb6c5e145b5ec01d075ddefde676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:24:fa:aa:43:6e:90:98:46:90:58:4c:fa:
4d:17:95:24:80:35:a7:72:ab:27:46:5c:7d:dc:aa:
7c:e4:8e:4f:ae:88:dd:6a:47:7c:d3:97:6c:d1:11:
b1:a3:e6:de:08:aa:dd:6c:f6:75:cf:9b:06:5f:3f:
fb:2d:fc:b3:85:44:98:82:61:76:09:1e:9e:4f:44:
6b:ac:02:75:e1:95:6b:b8:b3:13:d1:6b:ed:1f:18:
34:3d:ac:c3:9f:81:e6:d0:8a:8b:07:3c:9c:6e:ff:
13:6c:2c:61:ba:4d:f9:2d:c9:fb:9d:b7:9b:18:08:
2d:b3:0c:02:a8:2c:e0:0e:9d:2c:38:a6:77:b4:cd:
1e:70:2f:5a:81:7b:07:34:09:2e:83:3f:fc:40:3a:
31:18:18:2b:9b:40:4a:85:9a:5d:82:0c:e1:c5:0e:
3f:cc:c4:10:41:53:01:a7:bb:cd:9e:ec:13:ba:c5:
96:d0:c9:24:40:15:c9:79:22:ee:2e:14:ec:56:fe:
80:7f:d9:58:27:23:41:b0:06:53:9c:f1:8a:de:1f:
e3:a7:90:74:35:42:87:24:bd:ae:e6:a0:28:f1:2a:
b9:89:7a:41:de:8a:e0:f3:b3:9f:c3:df:8a:fd:51:
be:dc:7b:a7:de:0e:74:20:39:7e:1a:3a:7e:18:9b:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:8B:1E:51:2E:B6:C5:E1:45:B5:EC:01:D0:75:DD:EF:DE:67:6F
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/BdKLHlEutsXhRbXsAdB13e_eZ28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/21
Signature Algorithm: sha256WithRSAEncryption
38:b5:e6:6e:29:1a:27:92:25:bf:5b:68:cd:24:4e:2e:f7:d1:
f6:87:39:a0:80:e0:b9:c8:7c:a0:2b:cf:f3:a8:21:97:df:f7:
01:b5:1c:40:3a:93:7a:12:de:26:20:c2:8a:b0:eb:d4:0b:3a:
b5:45:89:e6:15:03:47:0d:c8:9d:9b:e3:50:87:d2:a7:cb:d4:
3d:8f:b7:b8:46:75:52:8c:19:f5:ae:06:03:01:c1:cd:e2:e5:
db:a3:8f:6c:fe:5b:93:ef:82:a6:45:3e:92:b5:38:37:78:98:
7a:81:17:83:81:e4:5c:27:70:03:de:88:9c:fe:b5:e2:c6:32:
8f:54:06:fb:85:c0:9d:c4:97:56:03:c6:b0:a6:8a:4f:ed:a6:
2a:6f:a9:ba:b3:ce:e9:18:56:c3:cf:b8:26:51:c1:42:09:eb:
63:b0:92:5e:b1:bc:b6:be:f2:55:8a:2c:ed:4f:2e:18:3b:c3:
67:4d:33:7d:4e:f3:1d:b4:0f:63:80:8d:c6:03:8f:17:9d:19:
75:c5:47:82:e3:8b:28:36:91:70:dd:7e:55:94:9e:c5:6f:88:
a1:f6:87:0d:c2:75:ac:39:43:8e:4e:59:5f:24:ba:96:bc:42:
71:ef:fc:51:26:10:13:86:5c:57:cb:b1:89:f9:32:f2:fa:ab:
8a:3d:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:22 2024 by rpki-client on console-ams.rpki-client.org