Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bv3dh4nBp5k9pqHmmsRLOso5R38.roa
File: bv3dh4nBp5k9pqHmmsRLOso5R38.roa (raw, json)
Hash identifier: R6Yk3+DviONyYY3oIc95twsBijg3KnCFWPD1nhElUGw=
Subject key identifier: 6E:FD:DD:87:89:C1:A7:99:3D:A6:A1:E6:9A:C4:4B:3A:CA:39:47:7F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0182F2ED1FDE40B308B2723FBC8E890526A2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bv3dh4nBp5k9pqHmmsRLOso5R38.roa
Signing time: Wed 31 Aug 2022 08:03:22 +0000
ROA not before: Wed 31 Aug 2022 08:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 82.153.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:ed:1f:de:40:b3:08:b2:72:3f:bc:8e:89:05:26:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 31 08:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6efddd8789c1a7993da6a1e69ac44b3aca39477f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:f6:dd:42:db:3d:bf:e4:fe:05:83:8e:75:
19:58:24:13:9c:16:d2:ef:4f:f7:47:bf:55:d2:ba:
cd:b2:9d:41:24:c0:3b:f7:50:0b:5c:7b:1f:8c:d6:
74:24:2e:d5:fb:92:be:d9:97:aa:72:03:68:62:22:
96:14:15:af:8d:c5:f7:6e:d6:c3:e1:22:63:8a:46:
50:2d:be:79:10:df:21:25:e4:d5:04:af:ca:b9:ba:
a2:b5:d6:29:1e:8c:63:17:29:51:af:43:23:90:b1:
e1:f1:5a:10:46:42:84:11:8c:4a:94:1d:1f:0a:09:
5a:61:ed:8a:f2:5c:3c:b3:7e:e1:78:53:0b:05:3c:
5b:8f:ce:8d:e0:79:72:47:59:c4:a3:07:2f:49:68:
a8:e6:07:52:99:f2:bf:ee:bd:59:a7:91:01:8e:bd:
36:16:ac:db:49:ff:1e:9f:66:9d:64:cc:55:1b:b2:
c4:78:5f:90:4d:c0:76:38:9d:29:6e:2e:22:80:cd:
ef:ac:d6:2d:b8:26:5b:eb:6b:8a:bf:74:99:d6:0d:
ab:5c:fb:f3:e2:f4:a3:d4:d7:1e:ba:56:93:d5:f3:
2c:7e:08:bb:ed:78:c2:49:e6:b0:c8:ee:c0:8e:00:
ec:01:70:05:e4:72:60:90:73:43:3a:58:4b:da:15:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:DD:87:89:C1:A7:99:3D:A6:A1:E6:9A:C4:4B:3A:CA:39:47:7F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bv3dh4nBp5k9pqHmmsRLOso5R38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5d:fa:19:e4:ce:2a:fe:6b:c3:04:80:77:a9:e6:4c:4b:6f:
3b:af:eb:df:e2:05:15:a8:cf:32:5f:cf:10:2f:a3:49:a4:4f:
75:45:e7:04:ed:c2:9d:d5:e2:08:ad:9e:87:c4:68:f1:a3:f9:
ce:56:f7:34:f8:60:a7:f5:3b:3a:b4:0f:b3:c6:5d:ed:40:27:
7e:63:d1:4c:3d:41:cf:53:6c:c8:93:c6:95:07:0f:5d:0d:dd:
9b:53:f7:a6:3b:93:e3:98:10:ae:4a:d3:e6:f0:2f:0c:4d:87:
b9:03:c6:c6:3d:31:d3:be:46:78:53:4f:f2:86:45:c0:78:f4:
b0:8e:ec:b7:cb:f6:a5:9c:18:d2:91:0a:33:72:39:20:c6:96:
3e:37:26:69:18:cf:fa:83:b9:1c:5e:9c:00:a2:30:8f:30:93:
96:13:8b:19:4a:17:d7:8b:bd:54:f7:57:79:22:65:bd:d9:06:
69:d7:07:53:fe:fa:10:8b:93:2c:38:44:6d:ae:0a:6e:c0:30:
d6:60:ad:94:ae:12:f0:6f:92:d0:5a:09:c4:7a:03:c8:e3:38:
f7:be:fc:ba:83:98:3e:4e:d5:ab:63:92:0f:74:45:2c:53:bd:
6e:79:cc:d4:38:eb:ff:f1:9d:e9:dc:e9:d5:bc:28:90:13:07:
b4:ea:b0:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLy7R/eQLMIsnI/vI6JBSaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjIwODMxMDgwMzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZkZGQ4Nzg5YzFhNzk5M2RhNmExZTY5YWM0NGIzYWNhMzk0NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5X23ULbPb/k/gWDjnUZWCQTnBbS
70/3R79V0rrNsp1BJMA791ALXHsfjNZ0JC7V+5K+2ZeqcgNoYiKWFBWvjcX3btbD
4SJjikZQLb55EN8hJeTVBK/KubqitdYpHoxjFylRr0MjkLHh8VoQRkKEEYxKlB0f
CglaYe2K8lw8s37heFMLBTxbj86N4HlyR1nEowcvSWio5gdSmfK/7r1Zp5EBjr02
FqzbSf8en2adZMxVG7LEeF+QTcB2OJ0pbi4igM3vrNYtuCZb62uKv3SZ1g2rXPvz
4vSj1NceulaT1fMsfgi77XjCSeawyO7AjgDsAXAF5HJgkHNDOlhL2hXyRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG793YeJwaeZPaah5prESzrKOUd/MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYnYzZGg0bkJwNWs5cHFIbW1zUkxPc281UjM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUplCMA0G
CSqGSIb3DQEBCwUAA4IBAQBvXfoZ5M4q/mvDBIB3qeZMS287r+vf4gUVqM8yX88Q
L6NJpE91RecE7cKd1eIIrZ6HxGjxo/nOVvc0+GCn9Ts6tA+zxl3tQCd+Y9FMPUHP
U2zIk8aVBw9dDd2bU/emO5PjmBCuStPm8C8MTYe5A8bGPTHTvkZ4U0/yhkXAePSw
juy3y/alnBjSkQozcjkgxpY+NyZpGM/6g7kcXpwAojCPMJOWE4sZShfXi71U91d5
ImW92QZp1wdT/voQi5MsOERtrgpuwDDWYK2UrhLwb5LQWgnEegPI4zj3vvy6g5g+
TtWrY5IPdEUsU71ueczUOOv/8Z3p3OnVvCiQEwe06rD8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org