Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/bsPX2caYEW-vm7-3Vv0zfy5UbOk.roa
File: bsPX2caYEW-vm7-3Vv0zfy5UbOk.roa (raw, json)
Hash identifier: +VajSfhWZak+tmxcvzvKFr/cCwEU/G03Lp/f69+cnU8=
Subject key identifier: 6E:C3:D7:D9:C6:98:11:6F:AF:9B:BF:B7:56:FD:33:7F:2E:54:6C:E9
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 0AF61F3D
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/bsPX2caYEW-vm7-3Vv0zfy5UbOk.roa
Signing time: Sat 01 Jan 2022 16:10:49 +0000
ROA not before: Sat 01 Jan 2022 16:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48147
IP address blocks: 185.142.156.0/24 maxlen: 24
185.142.156.0/22 maxlen: 22
185.142.157.0/24 maxlen: 24
185.142.158.0/24 maxlen: 24
185.142.159.0/24 maxlen: 24
185.208.180.0/22 maxlen: 22
185.208.180.0/24 maxlen: 24
185.208.181.0/24 maxlen: 24
185.208.182.0/24 maxlen: 24
185.208.183.0/24 maxlen: 24
185.213.8.0/24 maxlen: 24
185.213.10.0/24 maxlen: 24
2a07:4284::/32 maxlen: 32
2a0b:3cc7::/32 maxlen: 32
2a07:4285::/32 maxlen: 32
2a07:4283::/32 maxlen: 32
2a0b:3cc0::/32 maxlen: 32
2a0b:3cc6::/32 maxlen: 32
2a07:4280::/29 maxlen: 29
2a07:4287::/32 maxlen: 32
2a0b:3cc5::/32 maxlen: 32
2a07:4281::/32 maxlen: 32
2a0b:3cc2::/32 maxlen: 32
2a0b:3cc3::/32 maxlen: 32
2a07:4280::/32 maxlen: 32
2a0b:3cc0::/29 maxlen: 29
2a0b:3cc1::/32 maxlen: 32
2a07:4282::/32 maxlen: 32
2a0b:3cc4::/32 maxlen: 32
2a07:4286::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183902013 (0xaf61f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Jan 1 16:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ec3d7d9c698116faf9bbfb756fd337f2e546ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:85:a2:95:58:9c:74:f7:fb:b7:16:e6:98:
66:dc:60:e9:95:6b:8e:04:e6:b4:3f:b4:e2:c2:bc:
8b:61:ce:1b:be:e3:8b:45:09:c0:8a:8d:97:28:6c:
c8:5c:d2:8d:9d:37:ae:7d:5c:bb:06:0c:f3:6c:01:
ac:86:95:4d:a3:db:b4:83:6e:65:ff:eb:80:55:f8:
ba:05:ff:56:2a:47:c8:80:96:03:bc:c3:60:05:e0:
79:17:1d:87:58:87:cd:b9:59:2d:75:94:65:9a:7b:
ee:3a:1a:fb:37:29:00:06:81:f9:95:22:d8:0a:23:
73:39:2a:8f:94:33:9b:e9:cc:e4:ef:ce:52:86:dd:
7b:37:4b:4b:36:c8:fb:20:34:5e:a0:53:83:23:a7:
ad:01:2d:96:74:fa:b9:0d:f9:92:e8:4b:b1:ae:45:
f1:ec:b2:58:f9:d9:f2:27:6f:12:ee:50:65:ee:b8:
a9:1f:51:9c:a1:e8:d1:53:bb:d1:bd:6f:16:c8:19:
3c:1e:b1:6a:95:f7:a0:6b:31:29:bc:34:85:d8:31:
a4:aa:b9:47:d0:d4:c4:31:17:7a:82:b2:d4:e8:67:
cd:ba:37:9c:1d:7d:3d:99:78:6f:84:d4:ac:74:d7:
76:98:0a:48:76:df:17:7c:03:00:55:b7:81:1f:4c:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C3:D7:D9:C6:98:11:6F:AF:9B:BF:B7:56:FD:33:7F:2E:54:6C:E9
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/bsPX2caYEW-vm7-3Vv0zfy5UbOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.156.0/22
185.208.180.0/22
185.213.8.0/24
185.213.10.0/24
IPv6:
2a07:4280::/29
2a0b:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:06:c5:85:a6:57:2a:fb:f9:e9:ce:c8:6d:ea:1a:93:7c:d4:
bb:56:ad:b7:e4:eb:cb:f3:85:e0:13:05:9d:35:37:a2:fb:19:
3e:b0:8e:d2:ed:44:12:92:e5:38:8b:b5:1a:06:fe:e3:b3:d6:
86:ba:9c:b0:b3:cc:76:9a:53:f5:2a:12:e9:6f:45:0a:53:86:
5f:b5:59:9d:1f:c4:4e:f4:67:5c:46:14:ea:33:c9:45:a8:c8:
d3:32:7a:b3:d9:c9:e5:a6:9c:86:ce:ff:53:60:ca:0f:53:af:
46:ea:f8:61:17:4e:98:cb:05:34:94:14:9e:91:00:59:db:f5:
2e:43:06:5f:6b:ca:78:03:97:ce:a8:a9:49:ac:23:b2:a5:ee:
25:2a:a2:91:78:07:69:36:2c:06:74:c9:2c:f3:bc:ab:2b:c2:
b0:71:fc:14:de:81:e4:8e:11:1a:5a:26:6a:44:a6:fa:db:f7:
5e:d6:7f:1a:89:54:70:16:02:1b:70:d6:b7:d7:d0:01:12:b7:
ba:9b:8f:b6:a4:7a:72:03:f1:45:d9:4d:13:17:b0:86:8c:f3:
2e:0c:d7:e1:38:00:cc:f3:34:8e:dc:ed:dd:e7:86:86:d5:d5:
fe:df:67:70:32:0e:37:33:08:ad:64:7c:0a:0b:ce:11:e5:41:
1c:ca:af:31
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIECvYfPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YjhkMWJiNzI3OTFjODc4NTUwZDFiOWQ4ZmVmNTY0YWMzOTE5MzY4MB4XDTIyMDEw
MTE2MTA0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmVjM2Q3ZDljNjk4
MTE2ZmFmOWJiZmI3NTZmZDMzN2YyZTU0NmNlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrshaKVWJx09/u3FuaYZtxg6ZVrjgTmtD+04sK8i2HOG77j
i0UJwIqNlyhsyFzSjZ03rn1cuwYM82wBrIaVTaPbtINuZf/rgFX4ugX/VipHyICW
A7zDYAXgeRcdh1iHzblZLXWUZZp77joa+zcpAAaB+ZUi2Aojczkqj5Qzm+nM5O/O
UobdezdLSzbI+yA0XqBTgyOnrQEtlnT6uQ35kuhLsa5F8eyyWPnZ8idvEu5QZe64
qR9RnKHo0VO70b1vFsgZPB6xapX3oGsxKbw0hdgxpKq5R9DUxDEXeoKy1Ohnzbo3
nB19PZl4b4TUrHTXdpgKSHbfF3wDAFW3gR9MVGUCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBRuw9fZxpgRb6+bv7dW/TN/LlRs6TAfBgNVHSMEGDAWgBQLjRu3J5HIeFUN
G52P71ZKw5GTaDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0M0MGJ0eWVSeUhoVkRSdWRqLTlXU3NPUmsyZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvMDM2N2QwLWZhODUtNDU0Ni1iODRjLTAyNzhjNWRjMTQ5MS8x
L2JzUFgyY2FZRVctdm03LTNWdjB6Znk1VWJPay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
MDM2N2QwLWZhODUtNDU0Ni1iODRjLTAyNzhjNWRjMTQ5MS8xL0M0MGJ0eWVSeUho
VkRSdWRqLTlXU3NPUmsyZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwHgQCAAEwGAMEArmOnAMEArnQtAMEALnVCAMEALnV
CjAUBAIAAjAOAwUDKgdCgAMFAyoLPMAwDQYJKoZIhvcNAQELBQADggEBADoGxYWm
Vyr7+enOyG3qGpN81LtWrbfk68vzheATBZ01N6L7GT6wjtLtRBKS5TiLtRoG/uOz
1oa6nLCzzHaaU/UqEulvRQpThl+1WZ0fxE70Z1xGFOozyUWoyNMyerPZyeWmnIbO
/1Ngyg9Tr0bq+GEXTpjLBTSUFJ6RAFnb9S5DBl9ryngDl86oqUmsI7Kl7iUqopF4
B2k2LAZ0ySzzvKsrwrBx/BTegeSOERpaJmpEpvrb917WfxqJVHAWAhtw1rfX0AES
t7qbj7akenID8UXZTRMXsIaM8y4M1+E4AMzzNI7c7d3nhobV1f7fZ3AyDjczCK1k
fAoLzhHlQRzKrzE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:30 2023 by rpki-client on console-fra.rpki-client.org