Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/bFkCmuV80QjSw3vWvlfyJVYw0sc.roa
File: bFkCmuV80QjSw3vWvlfyJVYw0sc.roa (raw, json)
Hash identifier: XUheb/Yl3lbhGKQCd7Fh4i++Nw3czIozG0UpRRAOnr0=
Subject key identifier: 6C:59:02:9A:E5:7C:D1:08:D2:C3:7B:D6:BE:57:F2:25:56:30:D2:C7
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01856DC1BA14AD8736B7484910E0B25E780F
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/bFkCmuV80QjSw3vWvlfyJVYw0sc.roa
Signing time: Sun 01 Jan 2023 14:34:50 +0000
ROA not before: Sun 01 Jan 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64413
IP address blocks: 95.81.84.0/22 maxlen: 24
95.81.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ba:14:ad:87:36:b7:48:49:10:e0:b2:5e:78:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c59029ae57cd108d2c37bd6be57f2255630d2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:3a:74:f6:84:82:4b:61:8a:ec:10:d4:39:
55:43:be:2d:c1:a4:81:12:41:a6:74:8e:87:ed:5b:
d8:b5:a8:b5:f6:f8:65:71:d4:9f:dc:50:62:d0:df:
60:ee:cb:46:41:05:d7:42:77:d5:cb:af:a6:b7:d8:
cc:ac:6e:f7:82:37:76:4a:dc:61:66:2b:ba:d3:88:
56:19:38:c8:b7:6c:8b:8a:bb:e8:6e:93:3e:31:a8:
e9:6e:92:4a:68:5f:06:ff:f6:bd:f2:a9:16:2e:3d:
fd:32:72:0b:79:8a:19:54:52:ea:ef:4e:75:32:96:
36:38:bd:f6:25:89:fd:4d:63:00:6d:29:c7:7b:c3:
25:34:05:fc:69:da:01:bc:8c:65:36:6d:8b:cf:c7:
40:14:9e:d4:38:49:ae:24:14:ba:12:de:64:56:1a:
f3:b0:17:6a:51:3c:06:b0:9d:bb:f3:8b:2f:f7:b5:
b6:a2:70:f7:8b:5d:6f:fc:ab:c9:b2:5d:7c:1a:90:
f2:67:77:54:93:c8:1a:26:15:23:46:60:28:39:45:
80:f7:a1:81:5a:07:bf:d4:fd:bc:e4:f2:c6:dd:7b:
43:18:84:90:41:a2:58:af:a5:0e:5f:45:c8:3e:93:
00:1a:cb:1f:89:29:98:62:ea:af:24:e8:2f:8f:41:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:02:9A:E5:7C:D1:08:D2:C3:7B:D6:BE:57:F2:25:56:30:D2:C7
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/bFkCmuV80QjSw3vWvlfyJVYw0sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.84.0/22
95.81.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:75:b9:29:3c:16:9b:ad:3e:b4:42:24:f8:9d:9c:59:18:b2:
9f:5b:15:a7:d1:64:5c:a5:f6:0e:a1:93:d3:47:0b:5d:b8:c4:
22:ac:17:84:3a:b5:1c:8e:e0:98:a4:e5:1f:58:44:16:f4:33:
b3:06:47:6d:9c:b0:83:00:d8:bd:d7:38:cd:ce:44:8f:4b:8e:
69:0a:7a:4f:af:b0:40:12:61:fe:04:f9:b2:90:97:81:81:63:
c0:64:e8:32:0a:cd:1c:76:9c:02:21:97:6b:a6:22:6e:f9:66:
f3:bb:0c:de:00:69:2e:49:be:f8:aa:0b:ab:9d:8f:da:54:86:
56:1c:64:d8:73:fc:d7:af:62:f2:95:99:83:06:a0:b9:a7:1a:
a1:30:c8:79:c5:6a:21:ed:9f:93:b4:e2:3d:21:ef:06:22:a6:
e0:3a:89:db:61:73:4d:1e:12:35:3c:e0:88:5a:ae:cf:be:8b:
44:9b:ea:34:a2:14:58:72:84:fb:31:aa:22:57:54:08:9e:76:
86:04:79:9a:3d:1e:36:52:77:52:06:b6:ea:ef:af:08:ed:5c:
3e:26:56:f1:8b:41:87:d8:81:f4:4b:04:b1:6e:05:0e:a8:76:
af:9e:3f:51:68:77:af:06:d2:52:89:75:16:9e:8f:81:3c:69:
85:1e:07:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtwboUrYc2t0hJEOCyXngPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjMwMTAxMTQzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzU5MDI5YWU1N2NkMTA4ZDJjMzdiZDZiZTU3ZjIyNTU2MzBkMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHA6dPaEgkthiuwQ1DlVQ74twaSB
EkGmdI6H7VvYtai19vhlcdSf3FBi0N9g7stGQQXXQnfVy6+mt9jMrG73gjd2Stxh
Ziu604hWGTjIt2yLirvobpM+MajpbpJKaF8G//a98qkWLj39MnILeYoZVFLq7051
MpY2OL32JYn9TWMAbSnHe8MlNAX8adoBvIxlNm2Lz8dAFJ7UOEmuJBS6Et5kVhrz
sBdqUTwGsJ2784sv97W2onD3i11v/KvJsl18GpDyZ3dUk8gaJhUjRmAoOUWA96GB
Wge/1P285PLG3XtDGISQQaJYr6UOX0XIPpMAGssfiSmYYuqvJOgvj0FMSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGxZAprlfNEI0sN71r5X8iVWMNLHMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvYkZrQ211VjgwUWpTdzN2V3ZsZnlKVll3MHNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX1FUAwQC
X1FcMA0GCSqGSIb3DQEBCwUAA4IBAQBtdbkpPBabrT60QiT4nZxZGLKfWxWn0WRc
pfYOoZPTRwtduMQirBeEOrUcjuCYpOUfWEQW9DOzBkdtnLCDANi91zjNzkSPS45p
CnpPr7BAEmH+BPmykJeBgWPAZOgyCs0cdpwCIZdrpiJu+WbzuwzeAGkuSb74qgur
nY/aVIZWHGTYc/zXr2LylZmDBqC5pxqhMMh5xWoh7Z+TtOI9Ie8GIqbgOonbYXNN
HhI1POCIWq7PvotEm+o0ohRYcoT7MaoiV1QInnaGBHmaPR42UndSBrbq768I7Vw+
Jlbxi0GH2IH0SwSxbgUOqHavnj9RaHevBtJSiXUWno+BPGmFHgdp
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:05 2025 by rpki-client