Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/BKkMxZVv5D4Hmc6yHOoQT-OkYbQ.roa
File: BKkMxZVv5D4Hmc6yHOoQT-OkYbQ.roa (raw, json)
Hash identifier: SNAMxE8dxCZRB7VSXAdXlFjOSg/5R04BM+1jFYUITO4=
Subject key identifier: 04:A9:0C:C5:95:6F:E4:3E:07:99:CE:B2:1C:EA:10:4F:E3:A4:61:B4
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 05673B2D
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/BKkMxZVv5D4Hmc6yHOoQT-OkYbQ.roa
Signing time: Sat 01 Jan 2022 11:04:38 +0000
ROA not before: Sat 01 Jan 2022 11:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204170
IP address blocks: 161.8.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90651437 (0x5673b2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 11:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04a90cc5956fe43e0799ceb21cea104fe3a461b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:ea:fc:0d:13:5b:f6:45:b6:17:4b:fd:7b:
98:9a:e8:70:aa:82:04:ac:fa:80:e1:e2:81:09:2f:
e5:33:8b:82:05:c4:47:4f:a1:f7:f2:b3:65:ce:de:
bb:00:a3:b7:84:d6:e2:74:0c:11:2f:25:24:cf:a0:
28:51:34:c0:ce:55:e8:01:34:0d:71:11:b7:b5:cd:
02:9f:9d:40:cc:6f:20:5e:8c:0e:7d:87:bf:8c:8b:
7a:88:38:d7:6e:c7:9a:9c:87:15:26:84:76:b1:1a:
a3:fa:4e:50:d2:d2:de:cd:aa:e7:e0:5c:cb:31:20:
f3:50:1b:fb:9f:fa:27:32:cf:23:06:3a:35:ab:aa:
52:d0:6d:f3:5d:33:be:f0:d2:9e:b6:da:b3:84:80:
2d:1a:e1:12:cf:49:b6:a4:7a:2d:c8:08:59:a5:a9:
f4:3c:1e:5b:27:a4:ac:c2:09:22:cf:7e:be:ea:f8:
d2:c3:11:9a:f9:0b:cb:83:8d:9f:1c:03:dc:bd:21:
2c:c6:c5:36:12:14:68:ed:e1:8f:9d:a0:37:8d:ad:
dd:97:ed:8c:3d:aa:e4:05:c7:26:35:d0:33:cc:d3:
a4:b3:0b:8c:18:ba:99:f6:18:d0:1d:ab:70:bc:29:
22:da:bb:eb:86:d9:80:87:6e:03:00:7e:ca:f8:27:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:0C:C5:95:6F:E4:3E:07:99:CE:B2:1C:EA:10:4F:E3:A4:61:B4
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/BKkMxZVv5D4Hmc6yHOoQT-OkYbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.64.0/18
Signature Algorithm: sha256WithRSAEncryption
20:29:89:95:a1:ce:ae:9c:b6:a4:b5:dd:3b:95:31:9e:61:57:
c7:09:d4:0d:29:c2:8f:a3:6d:6b:40:99:ef:30:d5:b0:bb:13:
b3:c9:fb:0f:0b:7b:6e:b0:a9:9a:78:be:9e:2e:54:6c:12:83:
4a:af:a6:8c:53:46:75:18:e4:72:9f:5f:a8:d6:1b:7b:5b:90:
42:24:97:db:98:9a:e2:00:9c:4c:7c:9c:e2:49:00:25:7a:7f:
de:b1:0f:cc:ac:f9:4e:34:9f:89:2e:41:40:4b:5c:95:ef:c5:
83:46:53:f2:01:39:2f:74:d4:b9:cc:c0:53:fb:8a:65:7c:bc:
c5:52:f6:db:55:3d:26:3d:0e:b8:83:56:02:19:59:49:9c:47:
f2:4d:47:03:cd:8a:8f:20:a0:87:53:43:4d:e7:3d:4d:54:c5:
20:a3:f1:f2:55:db:53:96:53:9c:85:78:99:b3:ff:05:fa:e4:
04:0a:1e:9f:47:dd:5c:13:af:27:ef:22:c2:2a:93:24:9a:11:
6e:35:41:11:df:f0:f7:6d:4e:db:d1:f8:11:eb:68:45:47:af:
97:80:ed:71:70:62:fd:c5:19:76:8f:7d:82:f6:8c:6d:4d:1f:
13:d4:ec:91:9c:98:ef:d5:b5:05:f2:b4:20:80:4b:02:55:4f:
2c:a3:79:02
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBWc7LTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZGQ5NTRkM2M3N2M5YzRlMzdlZWJmNzUzZDg2ZjNkY2YwOTFkNGE5MB4XDTIyMDEw
MTExMDQzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDRhOTBjYzU5NTZm
ZTQzZTA3OTljZWIyMWNlYTEwNGZlM2E0NjFiNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIpg6vwNE1v2RbYXS/17mJrocKqCBKz6gOHigQkv5TOLggXE
R0+h9/KzZc7euwCjt4TW4nQMES8lJM+gKFE0wM5V6AE0DXERt7XNAp+dQMxvIF6M
Dn2Hv4yLeog4127HmpyHFSaEdrEao/pOUNLS3s2q5+BcyzEg81Ab+5/6JzLPIwY6
NauqUtBt810zvvDSnrbas4SALRrhEs9JtqR6LcgIWaWp9DweWyekrMIJIs9+vur4
0sMRmvkLy4ONnxwD3L0hLMbFNhIUaO3hj52gN42t3ZftjD2q5AXHJjXQM8zTpLML
jBi6mfYY0B2rcLwpItq764bZgIduAwB+yvgnujcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQEqQzFlW/kPgeZzrIc6hBP46RhtDAfBgNVHSMEGDAWgBRN2VTTx3ycTjfu
v3U9hvPc8JHUqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RkbFUwOGQ4bkU0MzdyOTFQWWJ6M1BDUjFLay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvN2EyYTk5LTE0NmMtNDc4MS1hMzAyLWViN2FhYTY4MjhiZS8x
L0JLa014WlZ2NUQ0SG1jNnlIT29RVC1Pa1liUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
N2EyYTk5LTE0NmMtNDc4MS1hMzAyLWViN2FhYTY4MjhiZS8xL1RkbFUwOGQ4bkU0
MzdyOTFQWWJ6M1BDUjFLay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBqEIQDANBgkqhkiG9w0BAQsFAAOC
AQEAICmJlaHOrpy2pLXdO5UxnmFXxwnUDSnCj6Nta0CZ7zDVsLsTs8n7Dwt7brCp
mni+ni5UbBKDSq+mjFNGdRjkcp9fqNYbe1uQQiSX25ia4gCcTHyc4kkAJXp/3rEP
zKz5TjSfiS5BQEtcle/Fg0ZT8gE5L3TUuczAU/uKZXy8xVL221U9Jj0OuINWAhlZ
SZxH8k1HA82KjyCgh1NDTec9TVTFIKPx8lXbU5ZTnIV4mbP/BfrkBAoen0fdXBOv
J+8iwiqTJJoRbjVBEd/w921O29H4EetoRUevl4DtcXBi/cUZdo99gvaMbU0fE9Ts
kZyY79W1BfK0IIBLAlVPLKN5Ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:23 2024 by rpki-client on console-fra.rpki-client.org