Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Bk71dXeO33O3TzlOiAyMCIrE6sE.roa
File: Bk71dXeO33O3TzlOiAyMCIrE6sE.roa (raw, json)
Hash identifier: OGM2tpWNZyOWl1Vr37WCSbnMQL2Q/deZ8u6YXZY1DGw=
Subject key identifier: 06:4E:F5:75:77:8E:DF:73:B7:4F:39:4E:88:0C:8C:08:8A:C4:EA:C1
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0183B1ED3A4411A621CF9B381B92B234777B
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Bk71dXeO33O3TzlOiAyMCIrE6sE.roa
Signing time: Fri 07 Oct 2022 10:10:57 +0000
ROA not before: Fri 07 Oct 2022 10:10:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42794
IP address blocks: 88.203.213.0/24 maxlen: 24
88.203.210.0/23 maxlen: 23
88.203.208.0/23 maxlen: 23
88.203.212.0/24 maxlen: 24
88.203.214.0/24 maxlen: 24
88.203.215.0/24 maxlen: 24
88.203.232.0/24 maxlen: 24
88.203.233.0/24 maxlen: 24
212.36.17.0/24 maxlen: 24
82.103.112.0/24 maxlen: 24
92.247.124.0/22 maxlen: 22
92.247.120.0/22 maxlen: 22
92.247.124.0/24 maxlen: 24
92.247.128.0/23 maxlen: 23
92.247.126.0/24 maxlen: 24
92.247.127.0/24 maxlen: 24
2a01:288:4004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:ed:3a:44:11:a6:21:cf:9b:38:1b:92:b2:34:77:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Oct 7 10:10:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=064ef575778edf73b74f394e880c8c088ac4eac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:a5:0e:68:60:8f:5f:fb:16:83:f5:5b:91:
9c:0a:67:fa:0e:a0:06:fd:65:0a:97:b5:45:eb:76:
12:d5:07:f0:ab:85:ab:c7:2b:11:6a:b3:68:40:27:
30:1a:ba:24:de:26:fc:ad:b0:38:e5:56:59:52:35:
87:af:ef:9f:d2:9d:b4:a4:a2:f8:8e:7b:57:31:f7:
58:50:46:81:2f:61:71:d3:6d:9c:91:3d:66:62:b3:
39:2c:77:6f:5a:65:e0:30:0a:d3:46:99:94:45:1e:
ac:cd:df:91:50:e9:4c:48:3b:ae:5d:a1:74:42:31:
45:3b:f2:f2:dd:4b:83:11:1f:a0:8c:bb:5f:54:6c:
11:0b:74:33:a8:8a:5d:41:fe:0f:7d:0b:41:ce:91:
a2:65:c1:c1:82:a1:5e:45:1e:00:23:60:dd:21:27:
53:6e:e7:01:84:3f:b5:29:e2:12:e6:51:54:f4:69:
a6:4b:8a:82:a0:9e:93:f0:26:a4:05:9a:1f:ef:42:
e1:d4:b4:68:8b:0a:11:00:f8:59:28:8d:b8:bc:24:
19:86:55:cb:b7:7e:a3:3d:1a:af:28:ce:87:0f:ba:
9c:df:85:bd:94:10:b1:70:65:8a:fd:46:8c:44:ea:
c1:38:ce:b3:61:8f:61:0d:fd:d9:f7:06:6c:35:ad:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:F5:75:77:8E:DF:73:B7:4F:39:4E:88:0C:8C:08:8A:C4:EA:C1
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Bk71dXeO33O3TzlOiAyMCIrE6sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.112.0/24
88.203.208.0/21
88.203.232.0/23
92.247.120.0-92.247.129.255
212.36.17.0/24
IPv6:
2a01:288:4004::/48
Signature Algorithm: sha256WithRSAEncryption
17:93:38:a6:30:77:80:71:1a:96:9d:96:0e:c9:b9:df:e5:f3:
90:d5:48:32:96:d9:f0:6e:c5:5c:6b:66:11:a6:79:54:b0:38:
e6:79:06:dd:40:ae:19:f0:b7:ff:51:8b:7f:22:42:ac:0b:58:
35:30:96:7f:81:b8:d0:3e:e3:c2:53:e7:82:d8:fb:b1:c8:88:
23:ec:03:a9:61:f4:7c:35:ff:e2:a6:10:b1:9f:81:66:ff:aa:
8c:82:8d:46:42:82:a3:d6:1c:c7:6b:fa:a3:5b:6d:a1:2d:a0:
06:0e:5d:cf:97:28:36:f9:f2:ed:a2:8c:9a:92:a1:8f:8e:9c:
76:ee:9b:2f:45:45:98:d8:38:8c:96:ae:6d:97:72:af:72:e3:
13:af:e9:db:12:43:25:43:d1:51:93:d2:e2:4d:d9:1f:e3:13:
d0:c6:c5:27:99:da:08:b9:7b:fa:3d:97:fe:aa:ba:c7:e8:4d:
7a:fa:5c:3c:9d:c8:86:07:51:70:23:2c:5d:45:7f:6d:3b:68:
60:6f:52:49:00:db:14:dd:0f:f4:87:1b:6d:c9:1d:ca:02:9e:
a6:04:bb:10:99:51:fe:e3:97:bc:a6:cc:8a:eb:32:a8:91:d3:
45:dd:9e:a0:a2:db:b0:44:f6:d6:38:98:91:88:5e:20:ea:38:
9c:d4:b2:63
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYOx7TpEEaYhz5s4G5KyNHd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjIxMDA3MTAxMDU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjRlZjU3NTc3OGVkZjczYjc0ZjM5NGU4ODBjOGMwODhhYzRlYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9WlDmhgj1/7FoP1W5GcCmf6DqAG
/WUKl7VF63YS1Qfwq4WrxysRarNoQCcwGrok3ib8rbA45VZZUjWHr++f0p20pKL4
jntXMfdYUEaBL2Fx022ckT1mYrM5LHdvWmXgMArTRpmURR6szd+RUOlMSDuuXaF0
QjFFO/Ly3UuDER+gjLtfVGwRC3QzqIpdQf4PfQtBzpGiZcHBgqFeRR4AI2DdISdT
bucBhD+1KeIS5lFU9GmmS4qCoJ6T8CakBZof70Lh1LRoiwoRAPhZKI24vCQZhlXL
t36jPRqvKM6HD7qc34W9lBCxcGWK/UaMROrBOM6zYY9hDf3Z9wZsNa1BBwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFAZO9XV3jt9zt085TogMjAiKxOrBMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvQms3MWRYZU8zM08zVHpsT2lBeU1DSXJFNnNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQAUmdwAwQD
WMvQAwQBWMvoMAwDBANc93gDBAFc94ADBADUJBEwDwQCAAIwCQMHACoBAohABDAN
BgkqhkiG9w0BAQsFAAOCAQEAF5M4pjB3gHEalp2WDsm53+XzkNVIMpbZ8G7FXGtm
EaZ5VLA45nkG3UCuGfC3/1GLfyJCrAtYNTCWf4G40D7jwlPngtj7sciII+wDqWH0
fDX/4qYQsZ+BZv+qjIKNRkKCo9Ycx2v6o1ttoS2gBg5dz5coNvny7aKMmpKhj46c
du6bL0VFmNg4jJaubZdyr3LjE6/p2xJDJUPRUZPS4k3ZH+MT0MbFJ5naCLl7+j2X
/qq6x+hNevpcPJ3IhgdRcCMsXUV/bTtoYG9SSQDbFN0P9IcbbckdygKepgS7EJlR
/uOXvKbMiusyqJHTRd2eoKLbsET21jiYkYheIOo4nNSyYw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:18 2023 by rpki-client on console-fra.rpki-client.org