Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/BPhivyCxkB70xzacLiLe4L4Brkk.roa
File: BPhivyCxkB70xzacLiLe4L4Brkk.roa (raw, json)
Hash identifier: fIG8P2oJiCMNDDJ/VgBVKMWaTH4MLOiw57unPOuROrQ=
Subject key identifier: 04:F8:62:BF:20:B1:90:1E:F4:C7:36:9C:2E:22:DE:E0:BE:01:AE:49
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B529D67
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/BPhivyCxkB70xzacLiLe4L4Brkk.roa
Signing time: Sat 01 Jan 2022 08:58:29 +0000
ROA not before: Sat 01 Jan 2022 08:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 212.133.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189963623 (0xb529d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04f862bf20b1901ef4c7369c2e22dee0be01ae49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:32:0c:9d:26:f7:88:61:e4:97:70:f4:c9:
ad:f0:02:ec:b3:bd:85:ac:09:4a:72:9a:62:94:87:
5a:69:47:79:13:42:ac:69:b2:fe:e3:e5:85:9d:60:
15:09:d3:33:4b:ea:ac:f8:bc:19:ca:83:83:1e:ab:
85:6f:79:5b:f8:be:87:26:08:47:00:39:bf:55:6f:
fa:62:bc:24:37:f6:68:81:78:d0:96:19:da:76:38:
ca:d3:96:b6:e9:c7:13:4c:0c:10:b3:18:44:b3:b2:
e0:80:e1:9f:a1:12:6c:8f:e0:14:b1:47:8b:8e:5b:
1d:4a:4a:22:5e:d4:f7:f8:10:53:ca:d9:1e:b1:91:
4b:ca:8b:53:0b:22:5a:d8:4c:62:e0:51:61:33:81:
d5:82:35:3c:69:c0:0d:07:ef:25:b1:4b:2a:33:13:
61:6a:c0:68:a4:01:9b:84:53:9d:dc:48:bd:c2:b5:
5d:6f:4e:18:79:45:23:e1:81:83:51:72:5a:5f:6d:
a5:7c:ba:85:d8:aa:0b:b6:74:8d:94:d5:aa:29:49:
cf:39:0b:ec:1e:a8:12:58:4e:41:98:2a:fb:69:ad:
98:f4:c0:a7:95:7b:28:f8:7c:fe:4e:b4:00:6f:36:
63:6c:ad:ea:84:c1:ac:84:d4:84:ac:8e:22:59:57:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F8:62:BF:20:B1:90:1E:F4:C7:36:9C:2E:22:DE:E0:BE:01:AE:49
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/BPhivyCxkB70xzacLiLe4L4Brkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
73:fd:1c:ea:69:fc:66:33:45:7b:6e:b1:17:71:0a:50:22:93:
14:6b:98:9c:9b:f4:45:d6:3a:1c:3b:fa:f1:c1:42:05:e2:34:
a7:e9:e8:13:fd:4c:db:38:7d:46:d2:d3:55:41:44:7f:af:87:
24:66:05:19:47:94:96:fc:ab:f4:22:14:7d:14:aa:d2:1b:43:
eb:5d:55:f9:cb:b3:d1:7a:a0:5b:fd:b4:8a:69:d3:6d:a5:b0:
36:39:8a:8c:71:c9:af:1d:8c:49:10:0a:92:c4:16:95:56:a4:
cc:dc:9f:26:39:f7:cb:2c:e3:80:68:fd:c0:4c:b6:87:08:2d:
8e:67:05:70:a9:56:e6:57:fb:52:5d:31:c1:be:25:30:26:35:
a5:1b:04:92:25:62:96:39:74:51:a0:67:d7:ef:11:ca:88:e1:
0b:73:1d:dc:9d:c5:cb:e0:92:69:22:c5:eb:da:6d:55:54:21:
40:ea:ba:f8:34:df:f1:74:78:f5:4a:b9:f6:90:3c:c9:97:6d:
8e:cd:4a:95:24:d8:13:9c:5a:36:74:95:6b:8e:b2:de:1e:32:
4c:b1:f5:41:54:9d:53:22:18:0b:18:38:83:dc:a0:be:0a:0d:
92:a7:4e:3e:73:8c:f5:2b:ef:66:08:bd:28:bb:de:ef:87:31:
51:4c:a1:bd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC1KdZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjhmZTM1Y2M5NjI2MzNhMjc1N2FmMTBhMGU2ZThhYjZkMDFmNGM5MB4XDTIyMDEw
MTA4NTgyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDRmODYyYmYyMGIx
OTAxZWY0YzczNjljMmUyMmRlZTBiZTAxYWU0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ7hMgydJveIYeSXcPTJrfAC7LO9hawJSnKaYpSHWmlHeRNC
rGmy/uPlhZ1gFQnTM0vqrPi8GcqDgx6rhW95W/i+hyYIRwA5v1Vv+mK8JDf2aIF4
0JYZ2nY4ytOWtunHE0wMELMYRLOy4IDhn6ESbI/gFLFHi45bHUpKIl7U9/gQU8rZ
HrGRS8qLUwsiWthMYuBRYTOB1YI1PGnADQfvJbFLKjMTYWrAaKQBm4RTndxIvcK1
XW9OGHlFI+GBg1FyWl9tpXy6hdiqC7Z0jZTVqilJzzkL7B6oElhOQZgq+2mtmPTA
p5V7KPh8/k60AG82Y2yt6oTBrITUhKyOIllXiocCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQE+GK/ILGQHvTHNpwuIt7gvgGuSTAfBgNVHSMEGDAWgBRWj+NcyWJjOidX
rxCg5uirbQH0yTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZvX2pYTWxpWXpvblY2OFFvT2JvcTIwQjlNay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvMzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8x
L0JQaGl2eUN4a0I3MHh6YWNMaUxlNEw0QnJray5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
MzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8xL1ZvX2pYTWxpWXpv
blY2OFFvT2JvcTIwQjlNay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANSFpDANBgkqhkiG9w0BAQsFAAOC
AQEAc/0c6mn8ZjNFe26xF3EKUCKTFGuYnJv0RdY6HDv68cFCBeI0p+noE/1M2zh9
RtLTVUFEf6+HJGYFGUeUlvyr9CIUfRSq0htD611V+cuz0XqgW/20imnTbaWwNjmK
jHHJrx2MSRAKksQWlVakzNyfJjn3yyzjgGj9wEy2hwgtjmcFcKlW5lf7Ul0xwb4l
MCY1pRsEkiViljl0UaBn1+8RyojhC3Md3J3Fy+CSaSLF69ptVVQhQOq6+DTf8XR4
9Uq59pA8yZdtjs1KlSTYE5xaNnSVa46y3h4yTLH1QVSdUyIYCxg4g9ygvgoNkqdO
PnOM9SvvZgi9KLve74cxUUyhvQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:11 2023 by rpki-client on console-fra.rpki-client.org