Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Br-YblEedLDdky19Ia4e9-FW358.roa
File: Br-YblEedLDdky19Ia4e9-FW358.roa (raw, json)
Hash identifier: vppUwOGMW/b7mZgAeSL0zQ/PlJ98ps9mCanAHVzSc/U=
Subject key identifier: 06:BF:98:6E:51:1E:74:B0:DD:93:2D:7D:21:AE:1E:F7:E1:56:DF:9F
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0B91BA2E
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Br-YblEedLDdky19Ia4e9-FW358.roa
Signing time: Sat 01 Jan 2022 08:56:20 +0000
ROA not before: Sat 01 Jan 2022 08:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60267
IP address blocks: 89.29.224.0/24 maxlen: 24
89.29.231.0/24 maxlen: 24
89.29.229.0/24 maxlen: 24
89.29.246.0/24 maxlen: 24
185.64.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194099758 (0xb91ba2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 08:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06bf986e511e74b0dd932d7d21ae1ef7e156df9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:3a:73:9d:89:c5:2a:9c:2d:30:22:95:ce:
de:06:c5:4c:21:99:5c:3b:4b:d1:8b:36:3d:9f:ce:
b8:30:75:d2:07:e4:1a:bf:0c:1d:d9:8d:bd:67:4b:
82:4b:c7:76:03:bd:4f:b9:92:b0:74:d7:8b:2d:a3:
b7:23:9c:1f:67:4d:f2:cc:28:72:23:8c:a5:c0:ac:
88:03:e2:f7:a9:8b:93:c9:10:93:65:6d:76:ca:46:
fd:f0:6e:97:eb:e8:8f:d9:cb:78:33:95:c0:63:f2:
a7:d9:c3:24:71:86:46:8f:0e:08:5f:75:57:cd:a9:
15:ec:7f:ac:6e:11:a5:02:1a:f2:f2:2d:f0:39:5a:
29:cb:5d:be:da:28:2c:f3:f2:cf:1a:36:e3:db:02:
51:f4:e3:64:26:39:16:17:de:32:0e:79:98:7f:5f:
ff:59:6b:b1:74:f9:76:47:ac:f6:bd:5a:8c:76:0d:
4d:4c:21:7b:e5:f1:f5:5a:3b:7f:b2:66:62:5b:b8:
f0:f2:a2:16:5e:7b:80:9a:ba:17:7c:83:b8:3f:3f:
a3:75:4a:74:a9:7d:5e:11:8c:18:b0:7a:5f:7c:ba:
99:8b:1b:7f:2a:71:e6:9a:91:eb:76:9e:4c:24:74:
8c:90:5a:8a:c2:33:2f:93:e9:dd:e1:aa:6f:6c:15:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:98:6E:51:1E:74:B0:DD:93:2D:7D:21:AE:1E:F7:E1:56:DF:9F
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Br-YblEedLDdky19Ia4e9-FW358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.224.0/24
89.29.229.0/24
89.29.231.0/24
89.29.246.0/24
185.64.240.0/24
Signature Algorithm: sha256WithRSAEncryption
27:07:3e:84:40:9d:0f:97:cf:5e:7d:4a:77:b3:52:f4:ad:82:
ff:33:13:b9:4a:ef:8e:6d:bb:6e:21:44:8a:41:4d:8e:62:08:
9f:ca:36:8e:ea:aa:f6:44:df:af:8c:9e:ed:c7:d3:86:b2:9b:
b1:b4:d0:3e:37:19:b8:cd:11:e6:95:3e:e4:01:14:42:4e:b4:
e3:99:1e:6c:71:83:9f:55:b8:b7:ae:58:d8:60:c7:00:21:ff:
d8:c5:1e:ad:e8:5d:2d:67:13:cf:e2:fc:cb:40:6c:b6:23:1d:
69:f9:e0:39:b1:75:8c:c9:52:6c:99:20:40:4f:76:8c:79:77:
11:6f:56:c0:60:0d:a6:00:bd:8a:7d:ca:ac:9f:d1:42:cb:6f:
85:46:0b:c5:af:eb:47:a6:0a:2e:42:59:0b:f5:3f:93:c3:b0:
4d:6d:cb:7c:c3:e5:82:12:47:8a:b2:49:cc:f5:27:dd:f1:53:
92:21:16:03:61:87:4c:22:49:5a:a0:36:4d:ea:05:ac:21:a0:
b4:d1:8c:0c:b9:94:e2:8f:6e:b2:1b:9a:0b:3a:41:d6:03:a2:
cc:ab:90:f3:90:17:bf:6f:7f:9b:4f:2b:fc:a7:35:4c:45:23:
50:ec:2d:14:a6:15:8a:38:67:f0:94:26:07:2f:b2:2b:67:cc:
50:bf:6c:4c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEC5G6LjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OTJjNDE1ZDE3NzVhZTk5OTNlOTAwYTc1MzZiNDZhYjE0NGE5YWEyMB4XDTIyMDEw
MTA4NTYyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDZiZjk4NmU1MTFl
NzRiMGRkOTMyZDdkMjFhZTFlZjdlMTU2ZGY5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANK3OnOdicUqnC0wIpXO3gbFTCGZXDtL0Ys2PZ/OuDB10gfk
Gr8MHdmNvWdLgkvHdgO9T7mSsHTXiy2jtyOcH2dN8swociOMpcCsiAPi96mLk8kQ
k2VtdspG/fBul+voj9nLeDOVwGPyp9nDJHGGRo8OCF91V82pFex/rG4RpQIa8vIt
8DlaKctdvtooLPPyzxo249sCUfTjZCY5FhfeMg55mH9f/1lrsXT5dkes9r1ajHYN
TUwhe+Xx9Vo7f7JmYlu48PKiFl57gJq6F3yDuD8/o3VKdKl9XhGMGLB6X3y6mYsb
fypx5pqR63aeTCR0jJBaisIzL5Pp3eGqb2wVj1kCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBQGv5huUR50sN2TLX0hrh734VbfnzAfBgNVHSMEGDAWgBTpLEFdF3WumZPp
AKdTa0arFEqaojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZTeEJYUmQxcnBtVDZRQ25VMnRHcXhSS21xSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvMDg5OGJlLWIwMzctNDI5Zi1iNTA0LTFkOTM0YTA0ODQ3NC8x
L0JyLVlibEVlZExEZGt5MTlJYTRlOS1GVzM1OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
MDg5OGJlLWIwMzctNDI5Zi1iNTA0LTFkOTM0YTA0ODQ3NC8xLzZTeEJYUmQxcnBt
VDZRQ25VMnRHcXhSS21xSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAFkd4AMEAFkd5QMEAFkd5wMEAFkd
9gMEALlA8DANBgkqhkiG9w0BAQsFAAOCAQEAJwc+hECdD5fPXn1Kd7NS9K2C/zMT
uUrvjm27biFEikFNjmIIn8o2juqq9kTfr4ye7cfThrKbsbTQPjcZuM0R5pU+5AEU
Qk6045kebHGDn1W4t65Y2GDHACH/2MUerehdLWcTz+L8y0BstiMdafngObF1jMlS
bJkgQE92jHl3EW9WwGANpgC9in3KrJ/RQstvhUYLxa/rR6YKLkJZC/U/k8OwTW3L
fMPlghJHirJJzPUn3fFTkiEWA2GHTCJJWqA2TeoFrCGgtNGMDLmU4o9ushuaCzpB
1gOizKuQ85AXv29/m08r/Kc1TEUjUOwtFKYVijhn8JQmBy+yK2fMUL9sTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:48 2024 by rpki-client on console-ams.rpki-client.org