Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BTRdE84L36nSCP_GJVzZSYJC00Y.roa
File: BTRdE84L36nSCP_GJVzZSYJC00Y.roa (raw, json)
Hash identifier: e7Wry6Id2TyY+iBl6dBwDPmWv+8PBoVjSe66/BeA/5Q=
Subject key identifier: 05:34:5D:13:CE:0B:DF:A9:D2:08:FF:C6:25:5C:D9:49:82:42:D3:46
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 292BC87F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BTRdE84L36nSCP_GJVzZSYJC00Y.roa
Signing time: Mon 14 Mar 2022 14:55:04 +0000
ROA not before: Mon 14 Mar 2022 14:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43060
IP address blocks: 92.38.28.0/22 maxlen: 24
31.148.220.0/24 maxlen: 24
95.46.36.0/23 maxlen: 24
95.47.108.0/22 maxlen: 24
93.171.72.0/22 maxlen: 24
31.148.192.0/22 maxlen: 24
93.171.128.0/22 maxlen: 24
95.47.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690735231 (0x292bc87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 14 14:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05345d13ce0bdfa9d208ffc6255cd9498242d346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:97:f4:4e:55:bb:f7:c4:c8:20:f0:cd:31:
27:c1:fc:e1:39:91:60:ba:7b:28:bc:56:eb:b2:06:
21:4a:68:74:87:e5:96:f2:1d:90:9d:e8:89:32:c9:
ab:cb:ce:14:4f:e2:2b:8e:e9:7d:7d:26:97:04:b3:
b4:30:4d:90:ca:64:ae:ab:09:35:a7:53:3c:a3:f7:
d5:10:84:54:0a:33:d6:cf:34:9c:7f:f5:ae:96:77:
be:fb:3b:2a:9a:89:a1:e1:f5:78:37:a3:e3:ec:76:
91:57:29:31:70:b9:75:d7:5a:d0:cb:5a:60:8e:17:
86:46:ed:9e:c9:f6:0f:73:d4:3a:a3:16:1b:3a:8c:
dc:8f:81:f9:48:b5:16:68:61:6a:55:9f:01:cb:57:
97:e6:d2:9f:8e:2d:b8:31:26:66:c4:7d:99:3e:18:
f2:79:1b:2c:3a:6b:f8:f8:f4:3e:93:b3:23:eb:4c:
8b:a0:45:33:fe:29:85:3e:80:d8:36:7b:be:08:b5:
b7:d7:02:53:bb:23:59:fc:ab:0e:fb:af:cd:c6:59:
08:5f:4d:0d:0c:c0:b6:7e:4b:96:d3:6d:27:9a:9c:
df:6b:6c:71:37:13:ec:53:7a:db:6f:c9:26:58:9f:
09:73:fc:a5:4e:be:63:fa:2f:04:8b:d0:b6:71:59:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:34:5D:13:CE:0B:DF:A9:D2:08:FF:C6:25:5C:D9:49:82:42:D3:46
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BTRdE84L36nSCP_GJVzZSYJC00Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.192.0/22
31.148.220.0/24
92.38.28.0/22
93.171.72.0/22
93.171.128.0/22
95.46.36.0/23
95.47.108.0/22
95.47.192.0/22
Signature Algorithm: sha256WithRSAEncryption
37:d6:9b:05:bc:cf:63:c7:95:3f:dd:e6:4f:ec:a0:0f:22:47:
12:e8:f3:af:da:7f:71:ed:d4:29:aa:13:d9:06:c6:ed:67:82:
ad:6f:29:2c:0b:d5:f0:7b:6f:ae:0c:9b:3e:da:a0:63:2f:9c:
90:97:d4:0c:90:ae:c4:76:74:78:2e:49:b4:07:b6:48:a5:4d:
4e:47:39:de:65:66:5e:c1:c9:70:8e:5c:eb:27:ed:aa:4a:5e:
22:3b:a0:b4:23:97:d8:1c:a4:da:68:b3:14:be:dd:19:10:1d:
0e:ea:b4:88:5f:a6:d2:ca:ee:11:67:89:4e:4a:3f:f1:bd:52:
00:ae:e2:19:3a:f8:04:e0:ac:38:0c:2b:27:f1:ba:16:6f:fb:
83:e3:f3:72:4e:a3:f7:a5:ce:45:1c:ec:45:5f:c2:2a:81:af:
3c:08:29:c7:11:de:46:bb:90:54:28:f9:80:09:f2:8a:2f:6c:
9f:1a:1c:5c:46:fd:31:e4:1d:a9:ef:db:0a:db:d0:7c:cf:8a:
25:a2:e5:93:0f:c9:c4:09:7a:d4:a9:28:27:68:c9:f2:50:4a:
f4:d0:66:c7:4a:6b:4a:cb:2f:fb:eb:6a:97:81:78:8b:d7:d7:
ea:26:b0:24:d3:4c:3d:43:2d:40:34:62:e1:4c:1c:42:6a:3a:
46:3a:dd:ac
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIEKSvIfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDMx
NDE0NTUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDUzNDVkMTNjZTBi
ZGZhOWQyMDhmZmM2MjU1Y2Q5NDk4MjQyZDM0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMK6l/ROVbv3xMgg8M0xJ8H84TmRYLp7KLxW67IGIUpodIfl
lvIdkJ3oiTLJq8vOFE/iK47pfX0mlwSztDBNkMpkrqsJNadTPKP31RCEVAoz1s80
nH/1rpZ3vvs7KpqJoeH1eDej4+x2kVcpMXC5ddda0MtaYI4Xhkbtnsn2D3PUOqMW
GzqM3I+B+Ui1FmhhalWfActXl+bSn44tuDEmZsR9mT4Y8nkbLDpr+Pj0PpOzI+tM
i6BFM/4phT6A2DZ7vgi1t9cCU7sjWfyrDvuvzcZZCF9NDQzAtn5LltNtJ5qc32ts
cTcT7FN622/JJlifCXP8pU6+Y/ovBIvQtnFZXdcCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBQFNF0TzgvfqdII/8YlXNlJgkLTRjAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0JUUmRFODRMMzZuU0NQX0dKVnpaU1lKQzAwWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAh+UwAMEAB+U3AMEAlwmHAMEAl2r
SAMEAl2rgAMEAV8uJAMEAl8vbAMEAl8vwDANBgkqhkiG9w0BAQsFAAOCAQEAN9ab
BbzPY8eVP93mT+ygDyJHEujzr9p/ce3UKaoT2QbG7WeCrW8pLAvV8HtvrgybPtqg
Yy+ckJfUDJCuxHZ0eC5JtAe2SKVNTkc53mVmXsHJcI5c6yftqkpeIjugtCOX2Byk
2mizFL7dGRAdDuq0iF+m0sruEWeJTko/8b1SAK7iGTr4BOCsOAwrJ/G6Fm/7g+Pz
ck6j96XORRzsRV/CKoGvPAgpxxHeRruQVCj5gAnyii9snxocXEb9MeQdqe/bCtvQ
fM+KJaLlkw/JxAl61KkoJ2jJ8lBK9NBmx0prSssv++tql4F4i9fX6iawJNNMPUMt
QDRi4UwcQmo6RjrdrA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:39 2025 by rpki-client