Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BbJblx-ZSBtF8vFQBBzkjxrMg6M.roa
File: BbJblx-ZSBtF8vFQBBzkjxrMg6M.roa (raw, json)
Hash identifier: TjY96xG6JYy1qD1XafU/OMpMnGbdQfLZzbN7RRCCy8M=
Subject key identifier: 05:B2:5B:97:1F:99:48:1B:45:F2:F1:50:04:1C:E4:8F:1A:CC:83:A3
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E199B4E
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BbJblx-ZSBtF8vFQBBzkjxrMg6M.roa
Signing time: Sat 01 Jan 2022 03:02:52 +0000
ROA not before: Sat 01 Jan 2022 03:02:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17025
IP address blocks: 94.31.10.0/23 maxlen: 24
94.31.12.0/24 maxlen: 24
94.31.13.0/24 maxlen: 24
213.152.239.0/24 maxlen: 24
79.141.45.0/24 maxlen: 24
2a00:16f8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236559182 (0xe199b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05b25b971f99481b45f2f150041ce48f1acc83a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:36:53:c8:f8:5f:f4:58:0f:98:74:75:07:
4e:a6:bd:22:6b:a7:9f:26:48:47:39:16:78:4c:c6:
c3:33:19:03:4d:c3:49:ac:b7:03:87:d9:cc:d3:b0:
f6:4e:45:8b:3a:0c:4a:a1:49:ee:d6:4a:1c:cb:77:
76:88:a0:d9:81:c5:ef:13:9f:c6:3b:7a:25:f9:92:
b7:94:9b:46:4f:d2:7e:f5:0a:2f:e7:fe:c4:7d:0d:
d3:d4:13:35:2e:1c:a9:ae:4d:ae:49:c9:cf:85:e9:
a2:d5:13:ab:18:15:ba:4e:28:5a:ba:b9:3b:69:a2:
3a:fa:e0:f5:ca:50:da:3b:32:6b:06:76:d7:83:26:
36:fd:e4:fd:36:dd:12:4e:f1:03:85:99:e8:a2:27:
b4:fd:a6:24:ac:82:46:bc:01:93:76:81:e3:5b:ab:
54:18:aa:4a:93:d2:92:ec:71:a9:fe:f7:77:ec:60:
67:16:d9:94:37:3f:24:04:f6:c1:99:72:3a:49:6c:
44:18:37:f2:da:9f:08:e2:c8:74:e0:14:ba:d6:f1:
0a:f9:a5:84:27:c6:43:09:50:d4:ef:94:f0:67:b7:
c3:d4:f0:19:f2:bc:c6:83:12:c4:b9:dd:4f:58:bb:
13:d5:84:47:9e:dd:e6:3d:6c:12:35:59:34:63:64:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B2:5B:97:1F:99:48:1B:45:F2:F1:50:04:1C:E4:8F:1A:CC:83:A3
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BbJblx-ZSBtF8vFQBBzkjxrMg6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.45.0/24
94.31.10.0-94.31.13.255
213.152.239.0/24
IPv6:
2a00:16f8::/48
Signature Algorithm: sha256WithRSAEncryption
51:70:62:23:bc:53:4b:f6:d1:7f:ce:13:b4:a5:19:10:15:d6:
d8:4e:42:b9:e2:6c:80:e5:df:a1:0c:bf:1f:c5:9c:5b:e3:d9:
87:de:c5:7e:61:c5:d9:69:02:c8:42:7d:de:20:83:01:81:c3:
e4:81:10:04:7d:c6:41:f3:48:f3:42:8f:dd:c9:e9:84:b2:8f:
74:83:01:e3:54:f7:6e:30:e6:45:2b:bb:48:cb:e9:24:c4:8a:
69:93:0f:fb:57:a7:82:4e:37:6d:09:a7:f9:3f:8c:f3:8a:0a:
8d:19:74:cc:98:a9:26:2d:82:1e:be:47:d6:57:0f:54:c8:23:
94:66:f9:d5:1a:47:61:21:30:40:99:ac:b7:0b:fa:c8:3d:d5:
79:cd:32:c4:28:4a:f4:67:ee:b7:f5:53:50:71:b4:e0:35:58:
8e:74:1e:f6:01:22:7b:20:79:72:05:c6:bd:b9:39:ab:68:65:
e6:a4:c5:72:ae:33:2b:eb:3f:7d:70:1a:c2:46:65:da:1b:d8:
62:b1:95:ff:bf:a2:73:92:48:61:bc:e2:7f:b0:11:fc:8f:75:
60:a0:e5:ec:a3:19:21:91:c8:7b:67:a0:64:06:6b:fb:e7:3b:
e0:06:12:30:7d:a6:28:35:69:bb:bf:86:30:bd:b9:5e:71:f9:
f5:73:c5:08
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIEDhmbTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MzBjYzk0MjliNjMzODJlOWIxNzE0ZDIxYjNjOTZkMmU1ZWJlMjU3MB4XDTIyMDEw
MTAzMDI1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDViMjViOTcxZjk5
NDgxYjQ1ZjJmMTUwMDQxY2U0OGYxYWNjODNhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNBNlPI+F/0WA+YdHUHTqa9ImunnyZIRzkWeEzGwzMZA03D
Say3A4fZzNOw9k5FizoMSqFJ7tZKHMt3doig2YHF7xOfxjt6JfmSt5SbRk/SfvUK
L+f+xH0N09QTNS4cqa5NrknJz4XpotUTqxgVuk4oWrq5O2miOvrg9cpQ2jsyawZ2
14MmNv3k/TbdEk7xA4WZ6KIntP2mJKyCRrwBk3aB41urVBiqSpPSkuxxqf73d+xg
ZxbZlDc/JAT2wZlyOklsRBg38tqfCOLIdOAUutbxCvmlhCfGQwlQ1O+U8Ge3w9Tw
GfK8xoMSxLndT1i7E9WER57d5j1sEjVZNGNklTcCAwEAAaOCAi4wggIqMB0GA1Ud
DgQWBBQFsluXH5lIG0Xy8VAEHOSPGsyDozAfBgNVHSMEGDAWgBTjDMlCm2M4LpsX
FNIbPJbS5eviVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzR3ekpRcHRqT0M2YkZ4VFNHenlXMHVYcjRsYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvYzczMjg3LWIxYjEtNGFjYS1iZDJlLWRiNGYzNTJlOWFkMy8x
L0JiSmJseC1aU0J0Rjh2RlFCQnpranhyTWc2TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
YzczMjg3LWIxYjEtNGFjYS1iZDJlLWRiNGYzNTJlOWFkMy8xLzR3ekpRcHRqT0M2
YkZ4VFNHenlXMHVYcjRsYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBE
BggrBgEFBQcBBwEB/wQ1MDMwIAQCAAEwGgMEAE+NLTAMAwQBXh8KAwQBXh8MAwQA
1ZjvMA8EAgACMAkDBwAqABb4AAAwDQYJKoZIhvcNAQELBQADggEBAFFwYiO8U0v2
0X/OE7SlGRAV1thOQrnibIDl36EMvx/FnFvj2YfexX5hxdlpAshCfd4ggwGBw+SB
EAR9xkHzSPNCj93J6YSyj3SDAeNU924w5kUru0jL6STEimmTD/tXp4JON20Jp/k/
jPOKCo0ZdMyYqSYtgh6+R9ZXD1TII5Rm+dUaR2EhMECZrLcL+sg91XnNMsQoSvRn
7rf1U1BxtOA1WI50HvYBInsgeXIFxr25OatoZeakxXKuMyvrP31wGsJGZdob2GKx
lf+/onOSSGG84n+wEfyPdWCg5eyjGSGRyHtnoGQGa/vnO+AGEjB9pig1abu/hjC9
uV5x+fVzxQg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:45 2023 by rpki-client on console-ams.rpki-client.org