Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BtrWsJgzh_IYQq-o2hlFEs6BPCY.roa
File: BtrWsJgzh_IYQq-o2hlFEs6BPCY.roa (raw, json)
Hash identifier: Zn/C6I9H1TBPWBBSqjr4etVgwzp/70I81Mq9xzxUU8c=
Subject key identifier: 06:DA:D6:B0:98:33:87:F2:18:42:AF:A8:DA:19:45:12:CE:81:3C:26
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 01BBC255
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BtrWsJgzh_IYQq-o2hlFEs6BPCY.roa
Signing time: Sat 01 Jan 2022 12:55:18 +0000
ROA not before: Sat 01 Jan 2022 12:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211492
IP address blocks: 5.8.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29082197 (0x1bbc255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Jan 1 12:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06dad6b0983387f21842afa8da194512ce813c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:a4:e2:9b:3f:87:c9:de:f5:a2:16:d5:1b:
37:50:79:3b:dc:e5:39:b0:8f:d4:57:11:b2:70:65:
f0:d5:73:92:30:c6:c0:fa:6d:ae:ab:43:11:8f:fc:
c2:aa:a9:81:9e:2b:27:66:51:bb:71:0f:d1:1b:66:
cd:42:66:07:cd:1d:55:b1:a7:1e:82:ef:7f:82:09:
19:56:9c:35:1a:91:b4:2a:99:ad:48:e9:53:60:29:
d0:2f:a9:00:27:a2:4c:08:e7:24:f4:cc:a3:b5:f0:
75:43:6d:20:99:52:9e:12:d8:3b:3a:3e:36:b5:32:
d6:71:22:a4:ae:1d:b2:56:4b:12:dc:67:7a:2f:5a:
aa:ac:ec:fa:27:c2:68:53:49:11:de:1b:65:1e:6a:
75:73:11:1f:1f:dc:3e:a9:da:35:4a:d4:bc:28:ee:
75:c1:d1:40:f9:23:f2:89:3d:61:58:97:e7:69:3c:
87:71:92:b2:75:6f:7d:81:2b:66:14:4a:18:e8:22:
32:d8:05:2d:3c:ad:f1:ee:03:03:29:61:3f:a7:9d:
d9:79:2c:28:74:87:33:03:49:24:7f:ef:37:4a:22:
d7:70:b0:5a:47:e9:aa:db:4c:07:48:6e:76:e0:df:
c3:58:cb:92:61:23:6d:d2:02:1d:3e:31:de:ed:a9:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:D6:B0:98:33:87:F2:18:42:AF:A8:DA:19:45:12:CE:81:3C:26
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BtrWsJgzh_IYQq-o2hlFEs6BPCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:79:57:fc:39:bd:e5:66:ff:b8:47:a0:bd:ae:37:bf:73:2d:
00:d8:5f:c6:7c:1f:f8:ce:e1:c6:10:21:65:62:e6:77:a5:8f:
ed:64:66:6b:75:87:36:b4:4f:63:b9:ac:a3:38:b2:21:27:37:
5c:9a:1e:a3:0d:38:ca:ce:60:46:bd:02:c8:4f:ce:9a:3e:02:
84:ab:98:bf:33:29:81:6c:08:3d:a4:ad:5c:9b:98:24:08:6b:
f4:1e:b4:78:57:c3:d5:43:33:cc:ee:aa:c7:19:5f:7f:75:28:
05:58:83:02:97:ff:36:94:26:48:cb:f9:7b:eb:46:71:02:78:
ba:01:04:17:f9:d9:f4:2e:29:f3:a7:58:ff:84:76:bd:63:ef:
be:be:52:c0:06:de:0f:be:6b:08:59:7b:f9:f7:a3:f6:b2:02:
81:63:cf:1f:fc:ac:ac:6e:b6:25:f2:77:36:79:60:77:66:01:
56:cd:33:76:a0:fb:61:23:1d:db:1c:c5:43:05:7f:44:39:3b:
e0:0c:38:de:db:2b:bb:59:eb:7d:84:9a:34:15:8c:16:26:1b:
90:0d:5a:16:df:3c:10:ca:b2:67:c3:36:8a:bd:dc:e7:24:38:
0d:e4:c2:8a:af:8c:bb:59:09:00:40:44:91:80:e8:ad:64:57:
cb:08:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net