Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/Bx2_vKvffRMYl26HLApnJFSYSAc.roa
File: Bx2_vKvffRMYl26HLApnJFSYSAc.roa (raw, json)
Hash identifier: 4d9CNtyTq9odxC4wC+DV/D6SQnQGKXTri9opVtmSOuc=
Subject key identifier: 07:1D:BF:BC:AB:DF:7D:13:18:97:6E:87:2C:0A:67:24:54:98:48:07
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 0701577F
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/Bx2_vKvffRMYl26HLApnJFSYSAc.roa
Signing time: Sat 01 Jan 2022 06:54:02 +0000
ROA not before: Sat 01 Jan 2022 06:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60087
IP address blocks: 89.40.172.0/22 maxlen: 24
81.28.8.0/22 maxlen: 24
46.252.144.0/20 maxlen: 24
86.107.96.0/22 maxlen: 24
185.31.64.0/22 maxlen: 24
2a03:a500::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117528447 (0x701577f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Jan 1 06:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=071dbfbcabdf7d1318976e872c0a672454984807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:ce:48:82:e8:90:c2:47:b9:37:3e:58:68:
54:13:4c:cb:e3:fa:53:7f:38:bd:54:b5:ab:c0:52:
38:a4:9a:15:d8:d1:e0:da:ac:9e:8d:ca:87:62:8c:
86:1b:35:6b:6e:35:7a:2b:2b:a5:08:e8:34:1a:6e:
83:12:38:04:c0:3e:d4:16:83:8d:14:14:eb:ba:97:
c9:a3:fa:20:8d:ee:3a:24:e1:35:38:0e:cb:f7:54:
36:b4:40:fc:0c:6e:f4:f0:96:13:a0:52:38:01:ee:
1d:f8:4e:6c:b2:c5:94:94:a0:c0:df:90:b4:f9:bc:
56:3c:96:d4:8a:1d:5d:53:9a:78:de:fe:7e:a5:c8:
ae:dd:09:71:cd:aa:00:54:21:9d:e6:f1:8d:5e:d8:
51:4f:9a:2d:fe:00:e1:70:68:1f:52:9c:a1:d6:96:
73:04:3f:d0:e9:9f:b6:ce:84:f2:5b:0d:2d:68:e0:
20:31:74:f8:5e:5a:a9:f9:c6:cc:2e:da:94:cb:14:
cb:ce:fb:49:6d:27:0a:57:fd:83:bf:14:3f:b3:c6:
b5:a0:ac:c7:82:1e:a5:15:55:cb:57:79:47:0b:d5:
c4:8b:73:d8:c3:ad:c8:d6:0e:fd:1a:88:ae:00:ad:
27:66:f3:34:75:2c:7a:2a:41:ca:0f:d4:2d:45:4e:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:BF:BC:AB:DF:7D:13:18:97:6E:87:2C:0A:67:24:54:98:48:07
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/Bx2_vKvffRMYl26HLApnJFSYSAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.144.0/20
81.28.8.0/22
86.107.96.0/22
89.40.172.0/22
185.31.64.0/22
IPv6:
2a03:a500::/32
Signature Algorithm: sha256WithRSAEncryption
13:73:0f:1e:80:07:05:8e:a8:cc:e5:d8:df:ca:5f:cc:64:6f:
fc:d3:2b:5d:ac:f6:35:32:9d:22:9b:e9:fe:2a:55:e9:69:1a:
0a:c0:7a:46:e9:6e:7e:40:57:bd:ca:4e:35:78:4e:39:43:d2:
bc:84:4c:cc:39:2d:91:8b:9a:15:ee:cd:17:2e:33:c6:3e:fc:
51:9d:db:0c:cb:35:d1:5a:16:f8:69:39:cb:f0:27:96:78:3e:
c7:90:80:36:92:38:12:f3:34:82:0a:6f:b1:b1:37:4f:7f:7f:
c3:db:3b:85:06:38:8d:ba:d0:83:ff:cc:ab:07:92:4b:d7:ee:
56:32:42:b2:87:fc:58:9f:26:6a:e2:37:1e:ab:9a:68:7a:d7:
9d:38:6d:8c:fd:82:0b:90:0d:99:a5:d4:c3:d9:fe:33:54:3c:
50:65:ed:c1:f9:8b:76:3d:0b:da:38:f6:d7:69:b9:76:16:3b:
b7:37:91:e3:18:5f:6c:b5:f4:69:52:eb:e1:16:4f:bd:91:05:
cf:48:7c:8b:c3:e3:f7:e6:49:14:8b:c7:ed:9f:e7:86:9a:6e:
21:2c:6d:46:eb:43:c3:db:37:12:60:6d:e7:93:9f:23:f0:15:
32:fa:56:85:8b:cd:87:74:9c:7a:95:29:47:34:0a:18:78:f8:
b8:ed:c6:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEBwFXfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YTJlYmJiY2JlMWJmNjM0NmVkNDc2YjgzYzdlMTNhNzg0NDE3YWNkMB4XDTIyMDEw
MTA2NTQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDcxZGJmYmNhYmRm
N2QxMzE4OTc2ZTg3MmMwYTY3MjQ1NDk4NDgwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKwdzkiC6JDCR7k3PlhoVBNMy+P6U384vVS1q8BSOKSaFdjR
4Nqsno3Kh2KMhhs1a241eisrpQjoNBpugxI4BMA+1BaDjRQU67qXyaP6II3uOiTh
NTgOy/dUNrRA/Axu9PCWE6BSOAHuHfhObLLFlJSgwN+QtPm8VjyW1IodXVOaeN7+
fqXIrt0Jcc2qAFQhnebxjV7YUU+aLf4A4XBoH1KcodaWcwQ/0Omfts6E8lsNLWjg
IDF0+F5aqfnGzC7alMsUy877SW0nClf9g78UP7PGtaCsx4IepRVVy1d5RwvVxItz
2MOtyNYO/RqIrgCtJ2bzNHUseipByg/ULUVO/C0CAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBQHHb+8q999ExiXbocsCmckVJhIBzAfBgNVHSMEGDAWgBSaLru8vhv2NG7U
drg8fhOnhEF6zTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21pNjd2TDRiOWpSdTFIYTRQSDRUcDRSQmVzMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvMWExY2JlLTIxN2QtNDM0Yi1hZGExLTQ0ZTIxOWE5ZTk2ZS8x
L0J4Ml92S3ZmZlJNWWwyNkhMQXBuSkZTWVNBYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
MWExY2JlLTIxN2QtNDM0Yi1hZGExLTQ0ZTIxOWE5ZTk2ZS8xL21pNjd2TDRiOWpS
dTFIYTRQSDRUcDRSQmVzMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEBC78kAMEAlEcCAMEAlZrYAMEAlko
rAMEArkfQDANBAIAAjAHAwUAKgOlADANBgkqhkiG9w0BAQsFAAOCAQEAE3MPHoAH
BY6ozOXY38pfzGRv/NMrXaz2NTKdIpvp/ipV6WkaCsB6RulufkBXvcpONXhOOUPS
vIRMzDktkYuaFe7NFy4zxj78UZ3bDMs10VoW+Gk5y/Anlng+x5CANpI4EvM0ggpv
sbE3T39/w9s7hQY4jbrQg//MqweSS9fuVjJCsof8WJ8mauI3HquaaHrXnThtjP2C
C5ANmaXUw9n+M1Q8UGXtwfmLdj0L2jj212m5dhY7tzeR4xhfbLX0aVLr4RZPvZEF
z0h8i8Pj9+ZJFIvH7Z/nhppuISxtRutDw9s3EmBt55OfI/AVMvpWhYvNh3ScepUp
RzQKGHj4uO3G6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org