Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/b_BasWjrBk4Y13MIP3v3ffgJPTg.roa
File: b_BasWjrBk4Y13MIP3v3ffgJPTg.roa (raw, json)
Hash identifier: m+jRPT4hVCaSEKRlFQLd21ayeP86+WSeT13MjdIts9s=
Subject key identifier: 6F:F0:5A:B1:68:EB:06:4E:18:D7:73:08:3F:7B:F7:7D:F8:09:3D:38
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC20A2EEB3DBEBDD3F2698CCC9DCE
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/b_BasWjrBk4Y13MIP3v3ffgJPTg.roa
Signing time: Thu 11 Aug 2022 06:34:42 +0000
ROA not before: Thu 11 Aug 2022 06:34:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44282
IP address blocks: 147.234.24.0/24 maxlen: 24
147.234.30.0/24 maxlen: 24
147.234.30.0/23 maxlen: 23
147.234.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c2:0a:2e:eb:3d:be:bd:d3:f2:69:8c:cc:9d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ff05ab168eb064e18d773083f7bf77df8093d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:5a:b3:f6:e0:ca:16:66:cc:29:59:fd:85:
99:52:b2:22:c3:92:e4:84:ee:ad:da:bb:64:f5:c0:
80:93:5f:55:8d:79:35:46:fb:40:bb:36:06:52:93:
9b:04:ae:2e:3e:fb:fd:58:0f:64:bc:27:26:17:2e:
de:27:d6:64:1a:0d:7d:fe:1e:29:22:0e:12:59:54:
18:21:bb:09:e0:59:a7:2b:f5:4b:37:04:13:18:ab:
62:44:68:c3:72:40:62:f5:83:4d:1a:ee:0c:ab:44:
a9:0b:de:ed:18:16:72:24:be:6c:82:35:32:bf:bb:
7a:88:15:b4:66:00:a2:5c:3a:1d:4b:d4:f6:08:9f:
a1:1e:f8:5d:e1:c5:0e:18:e0:9b:34:bd:10:fd:4b:
0f:78:cc:1c:54:d4:c7:ca:cf:22:c0:ec:9f:94:1a:
a2:90:75:27:6a:54:69:9b:c8:2d:16:1c:ef:f4:c0:
47:38:d2:50:5e:2a:1c:4c:94:4b:f1:83:70:e6:00:
75:0a:fe:e6:7f:0a:0d:73:e8:2d:e4:4d:ef:19:0f:
b8:41:03:e8:47:a4:94:b0:09:a8:7c:23:f8:ce:b9:
a0:8d:66:39:85:2a:c3:87:26:9c:e5:c4:0c:4a:b8:
16:c3:e0:9e:f6:3f:1a:38:6b:85:51:51:63:ac:c2:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:5A:B1:68:EB:06:4E:18:D7:73:08:3F:7B:F7:7D:F8:09:3D:38
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/b_BasWjrBk4Y13MIP3v3ffgJPTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.24.0/24
147.234.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:39:4d:9f:0a:ad:99:c1:ad:b0:c1:62:c5:a1:7f:fe:5e:05:
af:d7:7a:d4:00:0e:21:43:11:a1:83:35:41:99:6b:ff:04:06:
14:0d:ba:22:7f:9c:71:dc:8a:c3:3a:e8:c6:cd:28:2f:42:f1:
e0:97:2b:b5:71:e3:bc:80:03:05:93:65:b5:14:fb:61:37:61:
8d:d6:81:51:d1:36:8f:ae:e4:8f:97:d4:5f:3d:d1:8c:76:25:
33:62:83:2f:2c:65:8d:ed:10:8b:d2:3d:20:9c:44:fb:ea:44:
cf:b6:13:dc:76:53:fe:c1:ab:99:ff:cf:7e:cd:94:ef:01:62:
43:5a:7a:d6:e6:76:63:77:d1:61:51:cd:2d:d6:af:07:58:81:
30:97:99:b9:5a:7e:2f:53:63:0a:5d:14:df:d9:d0:b8:52:86:
10:97:a5:2c:77:f6:04:eb:ac:88:7b:12:5a:ea:82:25:d0:be:
14:78:1c:a7:5e:17:45:42:00:5b:42:4c:58:b6:9c:ee:21:0d:
a6:ec:d0:01:a7:b3:7f:8c:16:af:21:e2:8c:84:09:36:37:d0:
5c:99:18:b1:e6:78:4b:26:19:e0:a7:67:6a:ac:88:82:d0:4a:
1c:a2:17:a9:b4:f3:3a:ba:73:e2:1c:c1:ab:55:6e:17:b2:64:
68:50:78:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKLnMIKLus9vr3T8mmMzJ3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjIwODExMDYzNDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmYwNWFiMTY4ZWIwNjRlMThkNzczMDgzZjdiZjc3ZGY4MDkzZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly9as/bgyhZmzClZ/YWZUrIiw5Lk
hO6t2rtk9cCAk19VjXk1RvtAuzYGUpObBK4uPvv9WA9kvCcmFy7eJ9ZkGg19/h4p
Ig4SWVQYIbsJ4FmnK/VLNwQTGKtiRGjDckBi9YNNGu4Mq0SpC97tGBZyJL5sgjUy
v7t6iBW0ZgCiXDodS9T2CJ+hHvhd4cUOGOCbNL0Q/UsPeMwcVNTHys8iwOyflBqi
kHUnalRpm8gtFhzv9MBHONJQXiocTJRL8YNw5gB1Cv7mfwoNc+gt5E3vGQ+4QQPo
R6SUsAmofCP4zrmgjWY5hSrDhyac5cQMSrgWw+Ce9j8aOGuFUVFjrMLRVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG/wWrFo6wZOGNdzCD979334CT04MB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvYl9CYXNXanJCazRZMTNNSVAzdjNmZmdKUFRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk+oYAwQB
k+oeMA0GCSqGSIb3DQEBCwUAA4IBAQCwOU2fCq2Zwa2wwWLFoX/+XgWv13rUAA4h
QxGhgzVBmWv/BAYUDboif5xx3IrDOujGzSgvQvHglyu1ceO8gAMFk2W1FPthN2GN
1oFR0TaPruSPl9RfPdGMdiUzYoMvLGWN7RCL0j0gnET76kTPthPcdlP+wauZ/89+
zZTvAWJDWnrW5nZjd9FhUc0t1q8HWIEwl5m5Wn4vU2MKXRTf2dC4UoYQl6Usd/YE
66yIexJa6oIl0L4UeBynXhdFQgBbQkxYtpzuIQ2m7NABp7N/jBavIeKMhAk2N9Bc
mRix5nhLJhngp2dqrIiC0EocoheptPM6unPiHMGrVW4XsmRoUHjx
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:56 2023 by rpki-client on console-fra.rpki-client.org