Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/bwxq1BhzInlFppjd5U17gWmnVL4.roa
File: bwxq1BhzInlFppjd5U17gWmnVL4.roa (raw, json)
Hash identifier: ng4rrIPxnnYtc7KHFw9GaTuivU+KBKrFlJlFb+J8nUY=
Subject key identifier: 6F:0C:6A:D4:18:73:22:79:45:A6:98:DD:E5:4D:7B:81:69:A7:54:BE
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 050784BE
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/bwxq1BhzInlFppjd5U17gWmnVL4.roa
Signing time: Sat 01 Jan 2022 02:55:01 +0000
ROA not before: Sat 01 Jan 2022 02:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 195.10.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84378814 (0x50784be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Jan 1 02:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f0c6ad41873227945a698dde54d7b8169a754be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:f4:d7:ce:9c:cc:6c:a9:45:7b:16:76:3b:
bb:a7:25:03:ee:2b:40:c1:83:93:0b:25:ec:a6:71:
8d:dd:9e:a6:af:fd:6e:6e:f8:92:e7:0c:46:50:2c:
47:70:74:33:f4:bf:33:e2:e6:6b:14:9c:07:02:e7:
74:3e:85:01:16:d9:73:07:0e:13:c6:fe:af:27:cc:
ea:e7:52:cc:3a:fe:60:43:82:1d:b3:db:56:ca:e5:
d5:6d:45:58:f1:27:8f:5a:e2:c7:12:b5:52:5b:84:
e5:86:89:31:30:f2:3b:8b:69:b3:82:d8:ad:30:95:
62:f4:94:9d:22:2b:3a:7d:d2:39:ba:0a:c1:d8:17:
3a:d5:99:75:96:e7:01:76:74:96:95:eb:32:ad:f8:
27:0b:0f:c2:67:d8:85:81:9d:60:f6:3c:7e:e7:9d:
e0:e0:54:53:6e:b6:75:9b:27:06:ef:a3:9c:3a:51:
ee:f7:2e:07:c4:25:5b:21:a5:33:c8:fa:f8:1b:1a:
94:20:10:0a:14:06:85:f0:dc:f4:97:09:0a:82:bd:
98:e4:12:fc:ab:21:0a:bc:1e:21:9b:90:93:37:90:
6f:36:68:d3:ae:40:62:87:2e:6d:e0:ca:f8:bc:5d:
95:c9:b0:51:86:db:95:3e:9b:08:51:ae:4f:ba:3f:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0C:6A:D4:18:73:22:79:45:A6:98:DD:E5:4D:7B:81:69:A7:54:BE
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/bwxq1BhzInlFppjd5U17gWmnVL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.217.0/24
Signature Algorithm: sha256WithRSAEncryption
16:65:fe:2f:90:49:49:8a:d1:4d:c0:4b:41:d4:12:9f:41:97:
46:92:4a:b5:f5:75:b7:ae:6d:b4:f4:4e:f5:1d:d0:b1:1b:1d:
44:2e:02:d5:bd:9d:a3:c4:c9:a6:01:c1:85:f9:cd:32:b1:4c:
ba:ba:26:08:0f:c1:01:14:d1:c2:27:17:9d:f4:ef:b7:29:e8:
a1:9c:3e:53:b3:93:8b:97:12:04:4c:73:9b:42:60:62:3c:5b:
0f:71:c9:02:56:f7:ef:33:f8:8d:76:6c:27:d4:14:07:ea:13:
c9:bc:ff:77:93:f4:4d:ad:ec:f9:0a:17:55:4f:ca:b5:ac:f7:
1a:a3:b6:8d:91:15:c4:cf:76:e5:6f:6f:aa:87:02:cd:26:91:
8e:32:01:94:f8:f9:35:6b:9e:67:21:64:aa:17:b8:eb:dd:f6:
f6:f5:36:a6:8f:b8:c7:52:a9:e9:98:d7:b3:e6:e3:de:05:c9:
d7:99:01:c9:e5:b5:0a:5c:30:c3:54:e3:37:ab:7c:92:e2:f6:
ad:87:05:3d:34:4c:c8:da:73:59:eb:21:ea:20:af:6f:46:2b:
64:5b:38:b8:a1:d9:ba:37:8a:47:e4:9f:8f:a1:d6:2d:13:0b:
64:84:00:5b:0e:cf:4b:e4:7c:5f:66:2e:de:4d:f3:ec:9e:66:
1b:c4:78:93
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBQeEvjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDMyNWMyMWQyZmFmZTc0MzM5OGRjMWU1NTc0NDMzMjgwMTEwNDY5MB4XDTIyMDEw
MTAyNTUwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmYwYzZhZDQxODcz
MjI3OTQ1YTY5OGRkZTU0ZDdiODE2OWE3NTRiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN6n9NfOnMxsqUV7FnY7u6clA+4rQMGDkwsl7KZxjd2epq/9
bm74kucMRlAsR3B0M/S/M+LmaxScBwLndD6FARbZcwcOE8b+ryfM6udSzDr+YEOC
HbPbVsrl1W1FWPEnj1rixxK1UluE5YaJMTDyO4tps4LYrTCVYvSUnSIrOn3SOboK
wdgXOtWZdZbnAXZ0lpXrMq34JwsPwmfYhYGdYPY8fued4OBUU262dZsnBu+jnDpR
7vcuB8QlWyGlM8j6+BsalCAQChQGhfDc9JcJCoK9mOQS/KshCrweIZuQkzeQbzZo
065AYocubeDK+LxdlcmwUYbblT6bCFGuT7o/0k8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRvDGrUGHMieUWmmN3lTXuBaadUvjAfBgNVHSMEGDAWgBRgMlwh0vr+dDOY
3B5VdEMygBEEaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lESmNJZEw2X25Rem1Od2VWWFJETW9BUkJHay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvZjI3NzBiLWRhMTktNDc5MC1hNDk0LWM1OGU5NWNkNDI3Ny8x
L2J3eHExQmh6SW5sRnBwamQ1VTE3Z1dtblZMNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
ZjI3NzBiLWRhMTktNDc5MC1hNDk0LWM1OGU5NWNkNDI3Ny8xL1lESmNJZEw2X25R
em1Od2VWWFJETW9BUkJHay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMK2TANBgkqhkiG9w0BAQsFAAOC
AQEAFmX+L5BJSYrRTcBLQdQSn0GXRpJKtfV1t65ttPRO9R3QsRsdRC4C1b2do8TJ
pgHBhfnNMrFMuromCA/BARTRwicXnfTvtynooZw+U7OTi5cSBExzm0JgYjxbD3HJ
Alb37zP4jXZsJ9QUB+oTybz/d5P0Ta3s+QoXVU/Ktaz3GqO2jZEVxM925W9vqocC
zSaRjjIBlPj5NWueZyFkqhe469329vU2po+4x1Kp6ZjXs+bj3gXJ15kByeW1Clww
w1TjN6t8kuL2rYcFPTRMyNpzWesh6iCvb0YrZFs4uKHZujeKR+Sfj6HWLRMLZIQA
Ww7PS+R8X2Yu3k3z7J5mG8R4kw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:53 2024 by rpki-client on console-fra.rpki-client.org