Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/bGI6mPUC3sT3o5GcbAGiHExh-D4.roa
File: bGI6mPUC3sT3o5GcbAGiHExh-D4.roa (raw, json)
Hash identifier: DYPa1jvmbqzJO/5nYPzGwPfWW5RJzDR7R5xVirTnaJ8=
Subject key identifier: 6C:62:3A:98:F5:02:DE:C4:F7:A3:91:9C:6C:01:A2:1C:4C:61:F8:3E
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 03E085FD
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/bGI6mPUC3sT3o5GcbAGiHExh-D4.roa
Signing time: Sat 01 Jan 2022 11:58:09 +0000
ROA not before: Sat 01 Jan 2022 11:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47475
IP address blocks: 195.43.146.0/24 maxlen: 24
91.194.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65046013 (0x3e085fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 11:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c623a98f502dec4f7a3919c6c01a21c4c61f83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:6b:cc:f8:96:4f:5f:7d:20:49:fe:9f:3b:
8d:8c:38:d3:3e:15:8b:8c:99:b0:04:23:5c:e2:34:
88:65:d6:f0:3b:5f:92:18:8c:e2:fa:40:5e:33:05:
dc:7e:1c:65:0f:af:84:34:f3:4a:a4:ef:6e:19:5c:
63:9a:b7:6a:57:fa:62:6b:49:59:cc:58:60:81:77:
d1:10:62:50:26:b7:d4:18:b9:cb:e1:1e:89:5e:f7:
d3:a3:cc:c7:5b:5b:e2:c4:69:91:e2:24:10:c6:28:
45:10:b1:48:58:e3:0d:58:ba:bd:c1:9a:1a:26:54:
82:f0:8b:64:81:ed:e6:fd:9f:3f:12:e9:73:ba:79:
ac:67:b3:d5:fa:ad:d9:e1:80:d5:51:a3:91:51:b2:
33:6d:b2:c7:0b:ba:f1:2a:5d:48:7b:b2:97:cc:49:
e5:07:9a:1a:7e:48:a7:c2:02:9b:87:fc:7b:1c:3f:
03:eb:28:81:c1:60:bc:8a:03:b1:35:9e:e2:c7:a9:
44:47:e5:aa:5a:57:90:98:23:33:9c:9f:f9:b0:13:
7f:9f:89:b3:99:19:0c:43:33:a4:fd:48:e9:48:36:
a9:c4:77:13:57:1f:1b:6a:09:d6:ad:f7:b6:44:3a:
ea:d5:4a:d8:98:6b:1c:74:e5:cb:50:e3:83:43:86:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:3A:98:F5:02:DE:C4:F7:A3:91:9C:6C:01:A2:1C:4C:61:F8:3E
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/bGI6mPUC3sT3o5GcbAGiHExh-D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.80.0/24
195.43.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ec:ad:ae:ed:f4:ea:a5:8e:c4:2d:26:87:82:93:f5:77:f8:
34:bb:83:12:50:22:8f:18:73:85:6d:d7:34:4b:eb:02:a8:3d:
d8:86:8b:3b:8f:79:ce:b4:f3:f5:ee:4f:c2:da:f0:e2:50:66:
ec:da:ac:c2:0e:92:e0:3c:4e:d1:f0:23:c2:21:57:10:2b:64:
46:b5:6a:27:41:c1:40:f2:21:63:f8:81:2b:ef:39:04:24:ba:
7d:5d:b1:c1:fc:7d:33:b1:bb:0d:30:01:2e:46:ac:e0:e2:0d:
27:a0:e3:be:10:af:08:45:ea:f1:d3:66:5d:29:ce:2f:08:01:
06:f0:7a:a4:24:5c:fe:8d:b4:02:cc:3b:c7:a4:58:fa:9a:d3:
6f:bf:42:67:cd:79:89:06:fe:34:a6:a2:0e:15:13:ba:4a:40:
57:a5:b8:a7:f1:57:25:fe:ad:b0:7c:14:4d:04:24:b7:26:9f:
f8:13:72:31:93:26:e3:8f:49:0a:b8:6c:07:1c:5a:68:9b:be:
2d:f4:83:26:b8:a0:1c:d5:63:18:75:91:35:18:88:60:2d:dd:
ea:93:68:9a:ac:19:27:51:46:70:88:a1:bb:48:47:b2:d9:ee:
88:e7:fe:74:62:f4:d9:d9:b4:f5:a5:3b:f6:10:b5:10:51:3f:
6e:30:dd:43
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEA+CF/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ODQxMjgxNDZiN2JlYzhiZDExODViYmUwYzNiOTM0MGFhZjViNzE0MB4XDTIyMDEw
MTExNTgwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmM2MjNhOThmNTAy
ZGVjNGY3YTM5MTljNmMwMWEyMWM0YzYxZjgzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANSea8z4lk9ffSBJ/p87jYw40z4Vi4yZsAQjXOI0iGXW8Dtf
khiM4vpAXjMF3H4cZQ+vhDTzSqTvbhlcY5q3alf6YmtJWcxYYIF30RBiUCa31Bi5
y+EeiV7306PMx1tb4sRpkeIkEMYoRRCxSFjjDVi6vcGaGiZUgvCLZIHt5v2fPxLp
c7p5rGez1fqt2eGA1VGjkVGyM22yxwu68SpdSHuyl8xJ5QeaGn5Ip8ICm4f8exw/
A+sogcFgvIoDsTWe4sepREflqlpXkJgjM5yf+bATf5+Js5kZDEMzpP1I6Ug2qcR3
E1cfG2oJ1q33tkQ66tVK2JhrHHTly1Djg0OGFfECAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRsYjqY9QLexPejkZxsAaIcTGH4PjAfBgNVHSMEGDAWgBT4QSgUa3vsi9EY
W74MO5NAqvW3FDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzYyL2ZiMjQxMS00ODViLTQxNDMtOTI0MS0xMzgzOTY0MGE2MDQv
MS9iR0k2bVBVQzNzVDNvNUdjYkFHaUhFeGgtRDQucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYy
L2ZiMjQxMS00ODViLTQxNDMtOTI0MS0xMzgzOTY0MGE2MDQvMS8xLUVFb0ZHdDc3
SXZSR0Z1LUREdVRRS3IxdHhRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8JQAwQAwyuSMA0GCSqGSIb3
DQEBCwUAA4IBAQAe7K2u7fTqpY7ELSaHgpP1d/g0u4MSUCKPGHOFbdc0S+sCqD3Y
hos7j3nOtPP17k/C2vDiUGbs2qzCDpLgPE7R8CPCIVcQK2RGtWonQcFA8iFj+IEr
7zkEJLp9XbHB/H0zsbsNMAEuRqzg4g0noOO+EK8IRerx02ZdKc4vCAEG8HqkJFz+
jbQCzDvHpFj6mtNvv0JnzXmJBv40pqIOFRO6SkBXpbin8Vcl/q2wfBRNBCS3Jp/4
E3Ixkybjj0kKuGwHHFpom74t9IMmuKAc1WMYdZE1GIhgLd3qk2iarBknUUZwiKG7
SEey2e6I5/50YvTZ2bT1pTv2ELUQUT9uMN1D
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org