Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ba6Hs3LzMk7Uv7HrnB1kqqOXBSE.roa
File: ba6Hs3LzMk7Uv7HrnB1kqqOXBSE.roa (raw, json)
Hash identifier: dpBlnVNvRg2mK3L+7lo4YNUFxH8f9sTf6QxK04QJlBA=
Subject key identifier: 6D:AE:87:B3:72:F3:32:4E:D4:BF:B1:EB:9C:1D:64:AA:A3:97:05:21
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 42BB3945
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ba6Hs3LzMk7Uv7HrnB1kqqOXBSE.roa
Signing time: Thu 28 Apr 2022 08:38:56 +0000
ROA not before: Thu 28 Apr 2022 08:38:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50660
IP address blocks: 93.115.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119566149 (0x42bb3945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 28 08:38:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dae87b372f3324ed4bfb1eb9c1d64aaa3970521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:a6:61:1c:84:65:01:d5:92:9c:60:b3:13:
2e:e7:5c:94:c5:fb:63:7b:c5:75:b7:70:00:fb:42:
d1:b2:df:cf:db:37:6f:68:c7:5c:ec:c4:90:13:4d:
cd:96:2b:fe:71:c2:c6:26:cb:94:78:ff:d9:d9:00:
7c:ee:85:cf:69:9a:6a:23:32:a3:33:60:ea:c5:e1:
cb:53:ed:38:c4:98:07:b7:ce:71:46:8d:6d:80:0c:
fe:8d:3f:36:76:75:e3:dc:15:5f:19:1f:33:85:23:
2c:b2:cc:49:50:33:e1:39:44:78:02:4c:84:ef:27:
f1:ac:6c:35:6e:46:b2:30:4c:bb:bc:5f:84:7a:a9:
65:a2:83:1f:a9:c0:5d:9c:fc:2f:ac:fe:a7:7e:2d:
d3:5f:e8:51:56:94:b0:61:a6:fe:d8:de:03:11:54:
31:fd:e8:c7:b1:79:95:63:c0:6c:a3:79:aa:7a:27:
84:b9:32:34:56:33:28:7d:77:5a:5d:f0:83:0f:63:
19:67:c7:ef:ba:b4:65:0b:74:44:05:df:93:08:fb:
68:35:ca:6f:30:12:09:e0:4a:02:51:c8:7b:c0:2c:
9e:fc:75:4b:31:79:ee:e8:90:3c:71:94:29:fc:e7:
b4:1f:2b:98:b0:91:8e:10:f5:e8:54:57:09:da:19:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:87:B3:72:F3:32:4E:D4:BF:B1:EB:9C:1D:64:AA:A3:97:05:21
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ba6Hs3LzMk7Uv7HrnB1kqqOXBSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.153.0/24
Signature Algorithm: sha256WithRSAEncryption
15:30:88:d9:37:a2:b4:9d:ec:bf:99:52:b4:13:7f:ad:b8:dd:
5b:8a:86:f9:f0:2f:b4:a0:cd:8a:14:b8:f7:f8:fe:ae:80:43:
52:4c:d0:03:a6:96:26:1a:45:04:74:2b:00:39:d1:38:2c:c0:
28:9f:55:a6:cf:bb:28:f3:50:f7:41:a8:02:17:e0:54:32:5f:
b7:4a:95:10:1e:ce:cc:5e:3b:b9:ff:79:8f:f0:9c:99:85:34:
9d:ae:eb:9a:3c:43:3e:a4:9b:2f:f7:e8:ff:9c:ec:07:f7:60:
ae:7c:9c:75:70:f4:86:06:48:c7:eb:35:fd:53:de:fd:78:e7:
6b:fe:f9:1e:d0:94:1a:57:67:20:8c:37:75:2c:da:18:5b:88:
7c:d7:a6:f6:32:c9:85:c6:b6:e3:af:bf:52:a6:a6:4a:56:44:
e2:9e:64:23:c7:fe:41:01:eb:b0:65:a8:61:ba:57:48:a4:8b:
38:3d:63:68:67:ff:2c:c6:39:ab:9e:34:01:0d:53:ad:8a:05:
38:70:53:15:8f:9b:89:99:4f:db:62:ef:d7:88:d5:85:64:7c:
db:d6:6b:d3:67:ad:ed:8e:3b:98:99:6d:22:78:17:ab:d1:82:
b9:9e:56:58:98:f2:fb:ac:54:80:9e:9e:60:45:d4:f7:a9:77:
17:47:b8:11
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEQrs5RTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDQy
ODA4Mzg1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmRhZTg3YjM3MmYz
MzI0ZWQ0YmZiMWViOWMxZDY0YWFhMzk3MDUyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtHpmEchGUB1ZKcYLMTLudclMX7Y3vFdbdwAPtC0bLfz9s3
b2jHXOzEkBNNzZYr/nHCxibLlHj/2dkAfO6Fz2maaiMyozNg6sXhy1PtOMSYB7fO
cUaNbYAM/o0/NnZ149wVXxkfM4UjLLLMSVAz4TlEeAJMhO8n8axsNW5GsjBMu7xf
hHqpZaKDH6nAXZz8L6z+p34t01/oUVaUsGGm/tjeAxFUMf3ox7F5lWPAbKN5qnon
hLkyNFYzKH13Wl3wgw9jGWfH77q0ZQt0RAXfkwj7aDXKbzASCeBKAlHIe8Asnvx1
SzF57uiQPHGUKfzntB8rmLCRjhD16FRXCdoZIMsCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBRtroezcvMyTtS/seucHWSqo5cFITAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS9iYTZIczNMek1rN1V2N0hybkIxa3FxT1hCU0Uucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXOZMA0GCSqGSIb3DQEBCwUA
A4IBAQAVMIjZN6K0ney/mVK0E3+tuN1biob58C+0oM2KFLj3+P6ugENSTNADppYm
GkUEdCsAOdE4LMAon1Wmz7so81D3QagCF+BUMl+3SpUQHs7MXju5/3mP8JyZhTSd
ruuaPEM+pJsv9+j/nOwH92CufJx1cPSGBkjH6zX9U979eOdr/vke0JQaV2cgjDd1
LNoYW4h816b2MsmFxrbjr79SpqZKVkTinmQjx/5BAeuwZahhuldIpIs4PWNoZ/8s
xjmrnjQBDVOtigU4cFMVj5uJmU/bYu/XiNWFZHzb1mvTZ63tjjuYmW0ieBer0YK5
nlZYmPL7rFSAnp5gRdT3qXcXR7gR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org