Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/BKffY3EqQpvFMJjPif8zP_Jy2W0.roa
File: BKffY3EqQpvFMJjPif8zP_Jy2W0.roa (raw, json)
Hash identifier: Q/mASn1plvDTonroUL/4/Zu3kqyXfvEPzbr19vDeeNo=
Subject key identifier: 04:A7:DF:63:71:2A:42:9B:C5:30:98:CF:89:FF:33:3F:F2:72:D9:6D
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 0A183855
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/BKffY3EqQpvFMJjPif8zP_Jy2W0.roa
Signing time: Sat 01 Jan 2022 08:53:50 +0000
ROA not before: Sat 01 Jan 2022 08:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59586
IP address blocks: 185.148.140.0/22 maxlen: 22
91.240.252.0/23 maxlen: 23
2a07:6000::/29 maxlen: 29
2001:67c:1ba4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169359445 (0xa183855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jan 1 08:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04a7df63712a429bc53098cf89ff333ff272d96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:a5:da:20:94:5b:e6:11:97:8b:11:0d:eb:
b6:e5:f4:c5:ad:f7:32:65:a1:f1:c3:22:c2:cc:21:
0a:0d:c5:34:d8:6f:43:70:fc:1f:c4:c5:36:23:88:
47:e1:ae:db:e0:db:3b:d8:2b:23:1f:95:bb:9f:53:
44:a2:84:4f:3e:22:5a:30:4b:6f:89:88:7f:40:f5:
2b:4f:35:6a:92:a0:5e:10:db:2e:3f:b4:12:24:c0:
81:25:39:3c:03:fe:64:92:ff:d1:e9:a4:65:0d:32:
48:4d:5a:84:b7:3a:e0:75:c0:7e:fa:de:a4:81:60:
b9:03:8c:8f:38:67:f7:34:3b:92:53:dd:75:85:62:
1b:89:1c:75:84:c4:3d:2e:5c:d9:1d:6e:f5:e6:a8:
87:07:b5:77:fd:50:d2:ae:6c:b1:40:cc:29:e9:40:
42:e6:42:bd:b8:d0:6f:b5:55:02:c5:c1:11:0c:88:
d9:b5:74:f7:97:79:d9:82:c3:4a:47:c1:24:04:cb:
4c:6a:62:71:66:a4:17:88:81:eb:12:0f:5d:3f:c5:
e6:76:07:2e:a7:fb:7e:d4:d8:dd:4d:d0:ea:95:8f:
37:4e:29:df:0c:85:e4:95:7e:d8:e2:2a:1d:0f:18:
9c:33:16:e7:51:fb:ab:f4:0d:8e:a2:f6:8c:2f:03:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:DF:63:71:2A:42:9B:C5:30:98:CF:89:FF:33:3F:F2:72:D9:6D
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/BKffY3EqQpvFMJjPif8zP_Jy2W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.252.0/23
185.148.140.0/22
IPv6:
2001:67c:1ba4::/48
2a07:6000::/29
Signature Algorithm: sha256WithRSAEncryption
0b:bf:fb:7f:98:c4:ba:1d:80:de:7f:59:1e:34:10:ed:1c:c3:
49:7a:dd:0a:f4:40:f3:e9:7b:5c:31:9e:4e:ca:40:2c:ef:d1:
a5:5b:58:a5:73:1d:f6:91:c4:dd:a9:df:9c:3a:9b:89:44:5d:
f5:e1:05:59:5b:cb:61:2d:e8:be:87:ce:8f:62:81:12:f6:01:
4a:14:7e:17:d1:3a:90:d7:a3:af:e8:9d:8b:6d:6f:b4:e3:a8:
6b:8d:78:de:59:12:3e:0f:13:20:1b:d5:33:35:b2:47:49:ca:
04:cf:6a:5f:97:81:6b:61:c3:01:6c:b8:e2:1c:02:e4:1d:92:
ba:f5:0a:c2:2c:27:5e:e3:23:89:30:bd:2e:02:0c:a8:8f:ec:
c6:e4:f0:f1:06:da:3b:49:29:fc:68:6c:da:18:88:df:0a:eb:
97:ff:65:d8:f5:8a:7b:07:2a:e2:69:33:64:a3:dd:79:7d:d1:
0c:5b:2a:a4:a7:9f:5a:be:07:6b:3e:34:0c:ed:43:36:5b:95:
b6:58:69:6c:39:16:65:da:43:87:1d:1f:12:eb:55:99:96:a2:
5b:45:c6:ce:0d:6b:b4:f4:c2:f7:fe:7a:b9:b0:d3:01:d8:e1:
89:cf:3b:fa:55:bc:3d:0a:60:a5:67:76:55:ea:73:c1:67:34:
2c:05:1b:2c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEChg4VTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YTA0Y2E0YTk2NjE2MzFjNGVjNjE1YTNhNmQxNWQyMjAzMGRjZjQ5MB4XDTIyMDEw
MTA4NTM1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDRhN2RmNjM3MTJh
NDI5YmM1MzA5OGNmODlmZjMzM2ZmMjcyZDk2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO2ipdoglFvmEZeLEQ3rtuX0xa33MmWh8cMiwswhCg3FNNhv
Q3D8H8TFNiOIR+Gu2+DbO9grIx+Vu59TRKKETz4iWjBLb4mIf0D1K081apKgXhDb
Lj+0EiTAgSU5PAP+ZJL/0emkZQ0ySE1ahLc64HXAfvrepIFguQOMjzhn9zQ7klPd
dYViG4kcdYTEPS5c2R1u9eaohwe1d/1Q0q5ssUDMKelAQuZCvbjQb7VVAsXBEQyI
2bV095d52YLDSkfBJATLTGpicWakF4iB6xIPXT/F5nYHLqf7ftTY3U3Q6pWPN04p
3wyF5JV+2OIqHQ8YnDMW51H7q/QNjqL2jC8DLT0CAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBQEp99jcSpCm8UwmM+J/zM/8nLZbTAfBgNVHSMEGDAWgBRqBMpKlmFjHE7G
FaOm0V0iAw3PSTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FnVEtTcFpoWXh4T3hoV2pwdEZkSWdNTnoway5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvZmE0ZTY5LTU3NWUtNDZlYi1iOWMzLTgxMTNkYTY3ZWY3NS8x
L0JLZmZZM0VxUXB2Rk1KalBpZjh6UF9KeTJXMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
ZmE0ZTY5LTU3NWUtNDZlYi1iOWMzLTgxMTNkYTY3ZWY3NS8xL2FnVEtTcFpoWXh4
T3hoV2pwdEZkSWdNTnoway5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwEgQCAAEwDAMEAVvw/AMEArmUjDAWBAIAAjAQAwcA
IAEGfBukAwUDKgdgADANBgkqhkiG9w0BAQsFAAOCAQEAC7/7f5jEuh2A3n9ZHjQQ
7RzDSXrdCvRA8+l7XDGeTspALO/RpVtYpXMd9pHE3anfnDqbiURd9eEFWVvLYS3o
vofOj2KBEvYBShR+F9E6kNejr+idi21vtOOoa4143lkSPg8TIBvVMzWyR0nKBM9q
X5eBa2HDAWy44hwC5B2SuvUKwiwnXuMjiTC9LgIMqI/sxuTw8QbaO0kp/Ghs2hiI
3wrrl/9l2PWKewcq4mkzZKPdeX3RDFsqpKefWr4Haz40DO1DNluVtlhpbDkWZdpD
hx0fEutVmZaiW0XGzg1rtPTC9/56ubDTAdjhic87+lW8PQpgpWd2VepzwWc0LAUb
LA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-fra.rpki-client.org