Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/BBPPJX2HYET6Z3wUayWeeXR4K4M.roa
File: BBPPJX2HYET6Z3wUayWeeXR4K4M.roa (raw, json)
Hash identifier: NaWg9dsqQFRu8JWVpik1lHjqPPnrWMx+LZbyRS2FExk=
Subject key identifier: 04:13:CF:25:7D:87:60:44:FA:67:7C:14:6B:25:9E:79:74:78:2B:83
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 185E2871
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/BBPPJX2HYET6Z3wUayWeeXR4K4M.roa
Signing time: Sat 01 Jan 2022 07:54:42 +0000
ROA not before: Sat 01 Jan 2022 07:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29339
IP address blocks: 194.39.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408823921 (0x185e2871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Jan 1 07:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0413cf257d876044fa677c146b259e7974782b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:91:5b:a6:17:2b:88:f6:4b:e0:2f:c8:29:
fe:f9:4b:55:c7:66:c7:67:c9:fe:0c:9a:ee:7b:35:
65:0c:31:a1:02:89:4c:e1:b4:79:cd:9b:ac:f9:13:
b1:fb:81:97:9d:cf:9a:f5:03:8f:4e:1c:cf:5d:6e:
ba:2f:1f:a4:10:14:72:e3:dc:48:02:c5:a8:15:20:
40:0c:49:7c:1d:14:fd:88:26:81:1e:2e:85:f8:89:
e7:7c:c3:8c:32:80:98:c0:04:88:a2:59:0b:95:48:
b1:79:18:fc:2a:5b:85:af:11:c5:97:15:a0:0f:c6:
98:e7:b1:07:a8:9e:a6:b8:52:76:67:4e:22:93:78:
37:45:4b:1e:fa:6c:c3:6b:ea:7a:b7:0b:53:0d:f3:
4d:14:e9:0f:bf:b7:d3:f9:21:8d:40:f2:ab:28:68:
24:e7:75:8e:d0:39:87:bb:66:5e:1a:ea:a3:a8:d2:
7e:f3:cb:74:e0:5d:19:17:a6:ac:a8:cb:b8:0f:2e:
dd:7c:55:f4:20:55:27:fc:16:6c:b5:6b:22:ef:b6:
02:f2:dc:2b:a5:e4:87:6e:4a:16:a4:8c:f5:25:e6:
89:ec:97:87:60:9c:34:bf:72:1e:db:66:c7:bf:70:
47:68:58:9b:57:6e:00:bd:2e:cb:09:ab:86:08:32:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:CF:25:7D:87:60:44:FA:67:7C:14:6B:25:9E:79:74:78:2B:83
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/BBPPJX2HYET6Z3wUayWeeXR4K4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6a:54:13:c5:79:9f:f0:02:2e:3b:ec:39:e4:f0:b0:f0:10:
6e:9f:5d:3f:7d:db:01:ab:75:7a:37:e2:66:3d:fe:fc:21:bf:
de:57:38:30:cc:33:d8:d7:ca:82:22:dc:bd:eb:cd:ba:31:ff:
db:9b:5e:2d:e1:6c:4a:66:54:68:5e:89:5a:b0:65:98:2a:50:
d4:64:07:5b:4d:28:da:d7:50:19:56:52:26:06:2e:d5:fb:90:
01:27:13:8e:3e:45:d0:57:3a:1a:19:f3:db:c7:70:e9:ef:d5:
77:22:b7:ad:92:03:a9:47:2e:a4:8d:2f:96:df:58:70:e1:d3:
2f:96:94:1f:de:a8:63:63:ff:71:c6:c9:4c:f2:a4:ac:45:e0:
be:95:cb:6f:de:2a:80:f0:23:85:3d:dd:96:e1:d6:ab:3f:64:
ee:3a:b2:cb:a5:99:f8:18:d1:7e:a0:75:0a:3a:69:49:83:dd:
24:05:fd:e1:58:e9:85:26:af:3f:66:de:b3:06:6e:05:42:00:
1b:91:c5:3f:3e:ae:5f:a6:1a:ff:6e:77:35:d5:14:9a:41:1b:
24:6f:9e:69:25:33:04:11:ec:f3:9d:00:2f:78:5c:e8:cd:2a:
5b:1c:1e:a1:4c:5c:c3:47:bd:d1:23:71:a8:0e:2d:41:99:6d:
d6:d2:0b:02
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGF4ocTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Zjc4YTZiY2M4NWVjOGFkZTZlY2NlODgwZWUwNzNkNjM3NzA3OTY1MB4XDTIyMDEw
MTA3NTQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQxM2NmMjU3ZDg3
NjA0NGZhNjc3YzE0NmIyNTllNzk3NDc4MmI4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMY/kVumFyuI9kvgL8gp/vlLVcdmx2fJ/gya7ns1ZQwxoQKJ
TOG0ec2brPkTsfuBl53PmvUDj04cz11uui8fpBAUcuPcSALFqBUgQAxJfB0U/Ygm
gR4uhfiJ53zDjDKAmMAEiKJZC5VIsXkY/Cpbha8RxZcVoA/GmOexB6ieprhSdmdO
IpN4N0VLHvpsw2vqercLUw3zTRTpD7+30/khjUDyqyhoJOd1jtA5h7tmXhrqo6jS
fvPLdOBdGRemrKjLuA8u3XxV9CBVJ/wWbLVrIu+2AvLcK6Xkh25KFqSM9SXmieyX
h2CcNL9yHttmx79wR2hYm1duAL0uywmrhggygYECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQEE88lfYdgRPpnfBRrJZ55dHgrgzAfBgNVHSMEGDAWgBTveKa8yF7Irebs
zogO4HPWN3B5ZTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzczaW12TWhleUszbTdNNklEdUJ6MWpkd2VXVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvNDlhYmE0LWU2M2QtNGUwNi04YTEyLTk2ZjIxNjg5M2RlYy8x
L0JCUFBKWDJIWUVUNlozd1VheVdlZVhSNEs0TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
NDlhYmE0LWU2M2QtNGUwNi04YTEyLTk2ZjIxNjg5M2RlYy8xLzczaW12TWhleUsz
bTdNNklEdUJ6MWpkd2VXVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMInujANBgkqhkiG9w0BAQsFAAOC
AQEAf2pUE8V5n/ACLjvsOeTwsPAQbp9dP33bAat1ejfiZj3+/CG/3lc4MMwz2NfK
giLcvevNujH/25teLeFsSmZUaF6JWrBlmCpQ1GQHW00o2tdQGVZSJgYu1fuQAScT
jj5F0Fc6Ghnz28dw6e/VdyK3rZIDqUcupI0vlt9YcOHTL5aUH96oY2P/ccbJTPKk
rEXgvpXLb94qgPAjhT3dluHWqz9k7jqyy6WZ+BjRfqB1CjppSYPdJAX94VjphSav
P2beswZuBUIAG5HFPz6uX6Ya/253NdUUmkEbJG+eaSUzBBHs850AL3hc6M0qWxwe
oUxcw0e90SNxqA4tQZlt1tILAg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-fra.rpki-client.org