Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BSFT6BYosTB_2JwCYgaPSRmhwsc.roa
File: BSFT6BYosTB_2JwCYgaPSRmhwsc.roa (raw, json)
Hash identifier: TWIOq9uuxFOHvBBfT43ciMHOPaRN4RrIvUVIJNelEl4=
Subject key identifier: 05:21:53:E8:16:28:B1:30:7F:D8:9C:02:62:06:8F:49:19:A1:C2:C7
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 078BEC04
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BSFT6BYosTB_2JwCYgaPSRmhwsc.roa
Signing time: Sat 01 Jan 2022 06:01:05 +0000
ROA not before: Sat 01 Jan 2022 06:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14630
IP address blocks: 193.23.124.0/24 maxlen: 24
194.35.33.0/24 maxlen: 24
194.35.35.0/24 maxlen: 24
194.35.32.0/24 maxlen: 24
194.35.34.0/24 maxlen: 24
2a0d:fd40:56::/48 maxlen: 48
2a0d:fd40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126610436 (0x78bec04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Jan 1 06:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=052153e81628b1307fd89c0262068f4919a1c2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:68:2a:47:0a:d2:9d:03:00:50:ce:11:c0:
75:b8:ac:1b:db:91:67:25:42:2a:c1:ca:ae:52:86:
0b:b2:46:5b:9c:b4:e2:3a:7c:92:82:90:a8:69:6d:
aa:51:35:06:1d:47:6c:2a:7b:e9:de:94:cd:9e:2c:
dc:5d:d9:4d:4e:fa:a2:46:6a:4d:cf:51:af:4b:8a:
ce:7a:99:76:2c:a6:70:60:f4:57:26:1e:87:15:cd:
81:ce:49:0e:f6:6a:b3:37:ba:45:cd:a9:19:0d:38:
3a:70:32:b6:15:dd:31:86:2d:40:46:54:0a:43:3a:
69:29:0b:29:60:13:41:54:ae:f3:7d:2e:7f:fc:54:
fa:58:22:08:d2:30:9a:d4:c1:c6:3c:93:4f:98:b7:
f2:14:0a:d0:ea:7a:b4:ea:dd:ab:5c:32:89:86:6e:
e1:aa:67:d1:35:34:6f:74:a8:24:0a:4e:f6:c8:e8:
f6:5d:5d:d9:23:85:85:ce:ad:aa:13:60:32:9b:03:
4c:7f:dd:d2:94:c1:fd:02:f6:0b:2c:07:fb:93:08:
e6:3a:24:b7:e7:21:95:03:1c:7d:b4:ae:7a:6f:d7:
b3:e5:3c:d0:87:c3:c4:2e:58:30:3d:dc:22:5d:35:
ea:90:83:1b:c7:b0:97:d2:98:c7:7b:03:0b:94:49:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:53:E8:16:28:B1:30:7F:D8:9C:02:62:06:8F:49:19:A1:C2:C7
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BSFT6BYosTB_2JwCYgaPSRmhwsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.124.0/24
194.35.32.0/22
IPv6:
2a0d:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
2d:3b:5e:31:2d:5e:2d:cf:c6:21:31:fe:08:e6:ed:f2:fd:78:
cc:b2:c1:d1:b0:3e:b4:f0:1b:6a:02:12:7d:48:66:29:20:cb:
3d:e6:e5:4c:4c:2e:bd:87:53:9d:0a:91:33:15:98:0e:6c:6c:
8f:96:3b:7c:e1:a7:fb:68:95:01:86:bd:66:2f:5e:47:2f:98:
2e:d1:b6:4b:de:00:1c:fd:66:d7:2c:5b:67:85:39:e1:31:41:
ce:5c:e1:6f:8a:8f:d9:1d:fc:ea:5b:d8:66:39:36:d5:4d:42:
63:26:58:80:f3:ee:eb:52:fc:57:d4:f1:19:0f:a6:a0:4f:b5:
a9:3d:bd:83:7d:9d:45:e8:6b:72:11:c5:5a:e0:a7:cc:3c:b7:
5b:aa:73:63:02:9d:92:97:bd:36:5e:dc:fe:a1:4d:61:0c:14:
f8:ec:67:54:3a:db:88:92:18:47:56:01:ff:e7:67:1c:e5:8a:
8c:f6:0b:ae:7c:ca:0c:ac:d4:80:31:85:f1:9b:ba:00:a1:e5:
21:09:95:a7:eb:f1:7c:d9:00:89:86:d0:85:15:df:63:00:bb:
10:71:1a:9b:4b:62:4c:76:75:ae:2a:a6:33:44:8e:3d:38:90:
12:09:d5:e7:23:97:8f:b1:d1:6c:77:5d:24:21:8d:53:b1:e2:
e7:2a:18:50
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEB4vsBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2MyMDA0YTFhZjAzMGJhOTlmY2Y0NTFmM2JkODhlZmM1Mzg0NmE5MB4XDTIyMDEw
MTA2MDEwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDUyMTUzZTgxNjI4
YjEzMDdmZDg5YzAyNjIwNjhmNDkxOWExYzJjNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKs/aCpHCtKdAwBQzhHAdbisG9uRZyVCKsHKrlKGC7JGW5y0
4jp8koKQqGltqlE1Bh1HbCp76d6UzZ4s3F3ZTU76okZqTc9Rr0uKznqZdiymcGD0
VyYehxXNgc5JDvZqsze6Rc2pGQ04OnAythXdMYYtQEZUCkM6aSkLKWATQVSu830u
f/xU+lgiCNIwmtTBxjyTT5i38hQK0Op6tOrdq1wyiYZu4apn0TU0b3SoJApO9sjo
9l1d2SOFhc6tqhNgMpsDTH/d0pTB/QL2CywH+5MI5jokt+chlQMcfbSuem/Xs+U8
0IfDxC5YMD3cIl016pCDG8ewl9KYx3sDC5RJohkCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQFIVPoFiixMH/YnAJiBo9JGaHCxzAfBgNVHSMEGDAWgBTcwgBKGvAwupn8
9FHzvYjvxThGqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNNSUFTaHJ3TUxxWl9QUlI4NzJJNzhVNFJxay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvNzEyYjQwLTUzYWUtNDk1My1hZmY1LTU2YTMzMDU3NDk3Yi8x
L0JTRlQ2Qllvc1RCXzJKd0NZZ2FQU1JtaHdzYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
NzEyYjQwLTUzYWUtNDk1My1hZmY1LTU2YTMzMDU3NDk3Yi8xLzNNSUFTaHJ3TUxx
Wl9QUlI4NzJJNzhVNFJxay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAMEXfAMEAsIjIDANBAIAAjAHAwUD
Kg39QDANBgkqhkiG9w0BAQsFAAOCAQEALTteMS1eLc/GITH+CObt8v14zLLB0bA+
tPAbagISfUhmKSDLPeblTEwuvYdTnQqRMxWYDmxsj5Y7fOGn+2iVAYa9Zi9eRy+Y
LtG2S94AHP1m1yxbZ4U54TFBzlzhb4qP2R386lvYZjk21U1CYyZYgPPu61L8V9Tx
GQ+moE+1qT29g32dRehrchHFWuCnzDy3W6pzYwKdkpe9Nl7c/qFNYQwU+OxnVDrb
iJIYR1YB/+dnHOWKjPYLrnzKDKzUgDGF8Zu6AKHlIQmVp+vxfNkAiYbQhRXfYwC7
EHEam0tiTHZ1riqmM0SOPTiQEgnV5yOXj7HRbHddJCGNU7Hi5yoYUA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:50 2023 by rpki-client on console-fra.rpki-client.org