Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BnYb3S4qAvkre6V9z21lyUbpXOw.roa
File: BnYb3S4qAvkre6V9z21lyUbpXOw.roa (raw, json)
Hash identifier: e6pfoStVebSj8aC7K5utnwjGeqZZqD8JR9R3gBx+R1c=
Subject key identifier: 06:76:1B:DD:2E:2A:02:F9:2B:7B:A5:7D:CF:6D:65:C9:46:E9:5C:EC
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02D7736B
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BnYb3S4qAvkre6V9z21lyUbpXOw.roa
Signing time: Tue 25 Jan 2022 00:14:09 +0000
ROA not before: Tue 25 Jan 2022 00:14:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 62.112.12.0/23 maxlen: 24
89.34.171.0/24 maxlen: 24
77.81.1.0/24 maxlen: 24
188.212.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47674219 (0x2d7736b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 25 00:14:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06761bdd2e2a02f92b7ba57dcf6d65c946e95cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:85:51:ec:0f:a5:af:3c:bf:56:41:49:da:
84:3d:06:13:5c:28:07:46:80:af:04:4d:18:14:55:
14:31:d4:ef:8e:72:79:4a:e7:96:43:cf:d5:91:1f:
f4:3d:c4:e9:2f:58:16:21:51:95:4c:d3:26:9a:e0:
3f:5d:2f:22:5d:2f:b2:5f:de:bd:8c:f0:a2:ad:74:
e6:17:3a:16:88:09:c7:b8:8f:b9:bd:b8:33:9a:66:
01:46:f5:c6:12:40:3e:71:21:5e:0b:0e:62:8d:04:
33:78:e2:23:ec:6a:fc:9e:23:d2:fd:1d:83:5d:fe:
d9:7d:5a:b7:1b:5f:a7:f5:a1:da:19:3c:5b:92:46:
cc:a7:2f:5f:23:19:d3:06:44:25:64:6b:76:4d:e5:
51:1c:03:2a:68:8c:1e:7e:df:e9:76:93:fc:5b:c0:
62:e3:ea:36:16:f2:cf:e9:34:6a:ff:b4:46:aa:76:
4f:7c:aa:21:16:c7:0c:07:b4:e9:9e:d9:37:aa:c6:
4c:1f:4f:10:50:fe:06:94:a4:db:7e:88:7c:2d:05:
34:5f:31:23:f5:11:f5:c8:6c:79:e8:60:55:24:bd:
e8:68:9b:33:27:10:6e:9b:fd:b9:85:24:f8:e4:fd:
8e:1f:1c:9a:fc:c0:5a:1e:84:52:43:f1:ba:df:32:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:1B:DD:2E:2A:02:F9:2B:7B:A5:7D:CF:6D:65:C9:46:E9:5C:EC
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BnYb3S4qAvkre6V9z21lyUbpXOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
77.81.1.0/24
89.34.171.0/24
188.212.104.0/22
Signature Algorithm: sha256WithRSAEncryption
30:7d:30:ab:0f:72:51:f7:31:82:9a:9d:23:2b:28:2a:5e:5f:
1d:77:fd:fe:32:f6:db:3a:0c:68:e4:94:21:91:c9:2a:2e:13:
0f:6c:94:43:7c:2f:a7:29:39:21:a9:8b:88:96:ef:a3:d7:32:
72:2f:99:06:77:5d:79:6f:e3:43:a4:2c:3f:ef:ed:81:89:53:
cc:de:60:bb:b3:b0:26:be:4c:78:18:e4:7d:76:76:56:9e:e1:
c5:9c:44:57:ce:b6:16:76:a4:ed:fc:34:2b:70:bb:ad:ba:8b:
3f:5d:e0:14:37:cb:be:cf:cf:56:10:53:52:05:f5:70:ef:24:
3b:7f:48:08:7d:2c:d1:ae:a0:91:17:97:70:fc:7a:b4:53:24:
ce:cd:ac:81:fe:bf:07:ec:50:1f:57:f4:98:b9:2f:03:c0:44:
95:92:bd:de:9e:45:31:b9:44:bb:c3:6f:e3:b4:21:20:9c:8d:
26:6e:75:75:de:25:ac:82:08:af:f9:ea:03:84:1c:f0:2c:89:
f5:4a:02:e8:10:da:bf:f1:0b:85:ea:16:e0:e6:71:7f:65:79:
9b:79:78:b5:e4:ec:7a:3d:c6:34:21:8c:82:00:96:ee:d6:e0:
2a:91:e9:e5:4c:1c:9c:e6:34:fb:50:6a:ad:20:7f:f4:6e:50:
09:66:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org