Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/baYSx_W2JEa87fWyVE1Jdc0fAis.roa
File: baYSx_W2JEa87fWyVE1Jdc0fAis.roa (raw, json)
Hash identifier: 9PVLZhb+vaiwR88SfU+Ro6lxwjOhgjXzOQtN/qkHf6w=
Subject key identifier: 6D:A6:12:C7:F5:B6:24:46:BC:ED:F5:B2:54:4D:49:75:CD:1F:02:2B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CDC31B3
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/baYSx_W2JEa87fWyVE1Jdc0fAis.roa
Signing time: Tue 12 Apr 2022 20:33:37 +0000
ROA not before: Tue 12 Apr 2022 20:33:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 195.180.180.0/22 maxlen: 24
194.195.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215757235 (0xcdc31b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 12 20:33:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6da612c7f5b62446bcedf5b2544d4975cd1f022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:05:15:42:80:03:dd:a5:e0:72:3a:5c:e1:
8f:f6:99:f6:11:22:f4:2c:1b:13:d8:7f:c2:58:6f:
04:4d:77:68:45:d0:fc:1f:7b:82:b4:e6:b6:e8:de:
9f:77:f6:88:ea:65:8a:cf:63:8a:ec:f1:3c:64:bb:
6f:91:6c:b7:9c:17:53:64:76:c6:4a:30:f4:4f:d6:
05:27:80:67:f1:4d:c6:40:b3:2d:b0:f4:98:d8:e1:
91:11:cf:49:d6:c6:0f:ff:6b:91:9f:4c:85:1c:64:
1b:5b:20:2e:cd:3b:67:8e:db:fa:a9:0c:93:4a:60:
ee:a4:8b:19:db:a0:2f:55:70:3b:1b:00:dd:9c:64:
79:6e:b9:0e:3a:a3:77:11:7b:b5:39:d1:bd:b6:b9:
ac:b2:5c:21:f5:dd:0e:70:c4:00:16:d8:c7:08:55:
6a:d6:cb:25:32:cd:70:15:92:f5:91:19:93:e1:ab:
7c:44:ac:c3:16:61:33:f3:90:33:9b:23:bf:01:91:
c6:a9:2a:ed:11:ee:ff:35:6c:95:d1:b3:21:7e:08:
d8:79:02:82:f8:16:0c:bd:d0:fa:72:84:fc:2b:db:
2b:d0:36:13:7a:31:6e:ab:48:cb:e4:3d:ec:93:05:
ce:63:84:1f:11:aa:e2:ee:30:a2:ae:c3:aa:3d:ee:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:12:C7:F5:B6:24:46:BC:ED:F5:B2:54:4D:49:75:CD:1F:02:2B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/baYSx_W2JEa87fWyVE1Jdc0fAis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.236.0/22
195.180.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:68:5d:9c:73:4b:77:ef:0e:2a:77:eb:95:41:e7:78:18:4e:
71:b1:6c:a6:4f:6a:cc:eb:a6:aa:35:00:82:03:1a:f9:ec:b1:
3f:16:77:62:27:a8:26:b5:76:58:4b:64:7e:a6:1d:8d:8a:ed:
08:02:da:63:aa:3b:f3:ea:28:5b:f6:d5:4e:e2:60:8e:80:0a:
8a:12:01:39:75:e0:90:07:3b:67:39:0e:89:be:80:75:3d:72:
f8:df:8f:9b:84:61:09:ef:d7:cf:55:71:fb:fe:20:ab:71:d8:
8c:76:ea:ba:26:26:1d:eb:1b:c4:8e:d9:a1:70:46:04:4f:e0:
92:ac:4d:c5:34:e2:f6:ac:1d:cb:79:33:ae:40:22:e7:68:fd:
be:02:5a:e0:4d:ca:99:96:0f:67:46:37:7c:b7:95:03:39:38:
df:11:63:c3:4d:a2:89:80:74:d1:30:1b:cb:de:9d:2b:1b:39:
14:91:ce:7b:30:bb:b9:fe:7f:ed:55:96:15:b0:53:d3:dc:c5:
25:0b:81:dd:31:31:30:54:e2:9f:99:bc:af:33:08:1e:18:ec:
8c:9a:87:c9:0b:6c:d9:10:de:c5:eb:bf:93:70:0c:e5:41:3a:
af:ce:26:6e:3e:03:3d:31:95:91:1a:f0:21:f8:29:7d:14:59:
43:91:83:44
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDNwxszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDQx
MjIwMzMzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmRhNjEyYzdmNWI2
MjQ0NmJjZWRmNWIyNTQ0ZDQ5NzVjZDFmMDIyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8zBRVCgAPdpeByOlzhj/aZ9hEi9CwbE9h/wlhvBE13aEXQ
/B97grTmtujen3f2iOplis9jiuzxPGS7b5Fst5wXU2R2xkow9E/WBSeAZ/FNxkCz
LbD0mNjhkRHPSdbGD/9rkZ9MhRxkG1sgLs07Z47b+qkMk0pg7qSLGdugL1VwOxsA
3ZxkeW65DjqjdxF7tTnRvba5rLJcIfXdDnDEABbYxwhVatbLJTLNcBWS9ZEZk+Gr
fESswxZhM/OQM5sjvwGRxqkq7RHu/zVsldGzIX4I2HkCgvgWDL3Q+nKE/CvbK9A2
E3oxbqtIy+Q97JMFzmOEHxGq4u4woq7Dqj3uRG0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRtphLH9bYkRrzt9bJUTUl1zR8CKzAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L2JhWVN4X1cySkVhODdmV3lWRTFKZGMwZkFpcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAsLD7AMEAsO0tDANBgkqhkiG9w0B
AQsFAAOCAQEAi2hdnHNLd+8OKnfrlUHneBhOcbFspk9qzOumqjUAggMa+eyxPxZ3
YieoJrV2WEtkfqYdjYrtCALaY6o78+ooW/bVTuJgjoAKihIBOXXgkAc7ZzkOib6A
dT1y+N+Pm4RhCe/Xz1Vx+/4gq3HYjHbquiYmHesbxI7ZoXBGBE/gkqxNxTTi9qwd
y3kzrkAi52j9vgJa4E3KmZYPZ0Y3fLeVAzk43xFjw02iiYB00TAby96dKxs5FJHO
ezC7uf5/7VWWFbBT09zFJQuB3TExMFTin5m8rzMIHhjsjJqHyQts2RDexeu/k3AM
5UE6r84mbj4DPTGVkRrwIfgpfRRZQ5GDRA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org