Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/bGTOxaT2fxekTgv3sW5_be5tDTI.roa
File: bGTOxaT2fxekTgv3sW5_be5tDTI.roa (raw, json)
Hash identifier: 68UT/56e91S2fM5fntBHz/EdefsvQ6/2nlG37m5OQlg=
Subject key identifier: 6C:64:CE:C5:A4:F6:7F:17:A4:4E:0B:F7:B1:6E:7F:6D:EE:6D:0D:32
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 018508B8E7E179772DE7C6EBF181CE7FD1A1
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/bGTOxaT2fxekTgv3sW5_be5tDTI.roa
Signing time: Mon 12 Dec 2022 23:43:33 +0000
ROA not before: Mon 12 Dec 2022 23:43:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205400
IP address blocks: 185.219.164.0/22 maxlen: 22
85.132.136.0/22 maxlen: 22
2a0b:e7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:08:b8:e7:e1:79:77:2d:e7:c6:eb:f1:81:ce:7f:d1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: Dec 12 23:43:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c64cec5a4f67f17a44e0bf7b16e7f6dee6d0d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:20:61:42:4f:39:54:d2:67:31:b0:c8:60:
bd:53:84:8a:21:2e:0d:77:ea:e6:a0:ab:dc:0c:66:
86:8c:30:6c:c4:69:ac:f1:a9:e1:40:bc:cb:9b:6e:
59:66:13:72:51:d2:12:88:71:cd:65:d9:36:6b:77:
b2:36:67:43:c9:fe:ee:e5:5d:32:94:51:17:e8:be:
f7:cd:87:6b:f5:b0:fe:0a:01:65:0b:66:28:81:a2:
71:6f:5e:8b:4c:30:a4:86:3e:55:2f:0f:60:77:a7:
6a:89:68:12:8c:81:c0:4f:34:ac:d0:f3:8b:2e:86:
7c:ee:2f:fe:bc:53:1f:63:57:c8:30:d4:08:01:cb:
3d:c0:46:fc:f4:61:d4:e0:b3:ba:63:f9:b0:04:bf:
0a:e5:e4:05:4f:a8:f4:13:a5:9a:df:9d:ee:a0:f3:
3b:e5:e4:82:b2:12:db:81:b2:07:6b:96:27:ae:f2:
4f:76:95:06:2a:1f:c2:d5:1b:6b:67:07:0a:3b:14:
f2:49:20:3c:63:0a:79:77:a4:3e:f6:7d:bd:65:c0:
b8:9d:dc:c0:83:e2:de:05:d4:eb:16:c3:f1:a2:9a:
0c:a3:de:6c:79:60:a0:f9:c9:7d:6e:47:9c:f4:f3:
92:f7:44:1b:e8:55:84:67:31:3a:d3:f8:15:2c:a5:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:64:CE:C5:A4:F6:7F:17:A4:4E:0B:F7:B1:6E:7F:6D:EE:6D:0D:32
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/bGTOxaT2fxekTgv3sW5_be5tDTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.132.136.0/22
185.219.164.0/22
IPv6:
2a0b:e7c0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:b7:66:45:13:b9:7e:ab:56:1a:3d:e9:67:15:a0:87:fd:a2:
ce:ab:d2:ee:5d:4c:b3:89:cd:95:37:2a:55:52:dd:6b:04:12:
48:07:ec:9e:e2:ab:23:ad:83:94:09:f0:0b:79:76:13:1a:5a:
67:95:7e:52:0d:36:68:90:50:4b:fc:a6:bd:60:3a:e3:a2:ce:
a5:da:dd:e1:fd:76:4f:73:c0:7b:40:55:b0:8b:1b:29:1e:33:
83:22:26:40:6f:e2:79:9d:94:3b:0a:f7:ce:35:3a:dc:7b:81:
0b:33:6b:2d:5e:5a:91:d4:d3:42:5d:b1:2a:8b:23:a4:c1:f2:
28:4d:08:af:ea:60:32:4e:9a:4d:25:fd:c8:1e:b4:77:20:17:
45:5e:92:dd:fb:ff:a8:ef:da:cd:c4:fe:5f:1b:94:c5:50:38:
ac:7f:85:46:67:8f:65:db:e5:96:9f:3d:f8:61:9c:3e:01:40:
b7:ff:56:b5:79:d2:8d:e9:04:f1:c9:46:af:6f:65:94:a4:64:
64:33:3b:cb:a2:5d:ae:0d:23:16:3b:d2:30:6e:6d:13:f2:c2:
21:25:5d:ad:0e:0c:55:3e:ff:be:86:c7:1e:2f:88:1f:9c:dc:
fc:33:95:d2:5b:78:ce:18:a0:fe:db:15:d1:09:f6:74:86:3b:
e3:3d:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net