Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/BXNd_Ruc5smyiJFfCZMtsRt5nsM.roa
File: BXNd_Ruc5smyiJFfCZMtsRt5nsM.roa (raw, json)
Hash identifier: KYBrlOXVyxeeyDLJ7AUZI8OeChH5/wmQyTMGqsNJopk=
Subject key identifier: 05:73:5D:FD:1B:9C:E6:C9:B2:88:91:5F:09:93:2D:B1:1B:79:9E:C3
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 042EC14C
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/BXNd_Ruc5smyiJFfCZMtsRt5nsM.roa
Signing time: Sat 01 Jan 2022 15:07:01 +0000
ROA not before: Sat 01 Jan 2022 15:07:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 91.212.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70173004 (0x42ec14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Jan 1 15:07:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05735dfd1b9ce6c9b288915f09932db11b799ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7c:fc:c9:50:54:ef:f8:02:6f:ac:fa:a9:9b:
4a:e8:28:67:0c:c3:47:b6:45:28:87:0f:ab:97:76:
1b:06:77:ff:33:5b:f4:fc:bc:22:f0:95:9e:5e:6f:
f5:da:ad:f2:a3:30:41:29:12:84:82:89:27:7d:6f:
1d:61:c8:4c:6f:01:74:5f:a5:b9:55:89:b8:a5:d0:
35:6d:2d:04:00:02:73:69:a0:61:e2:73:aa:e9:79:
6b:58:5f:61:91:a2:80:8a:12:8b:32:3e:fa:7c:7f:
0f:cb:47:d3:75:3b:87:12:0c:b2:19:27:1e:95:e8:
8b:c4:e8:bd:1d:fc:db:de:db:39:93:60:bf:4f:02:
2a:fa:66:e1:3d:67:bf:77:bf:62:cd:e6:3e:ca:8d:
8e:55:fe:54:31:6f:ac:97:95:20:ea:bb:98:9b:9b:
62:ef:39:d1:71:ea:e7:67:fc:c3:4c:1c:a1:5d:3c:
a3:ad:e7:3d:6a:8a:f8:ea:50:b5:ab:ae:7a:48:f5:
2a:23:34:64:e9:13:ec:c7:45:99:d7:db:14:fe:6c:
e9:66:56:c7:6f:a4:67:0e:46:b1:b9:3e:ef:9d:5d:
be:fe:d7:95:14:dd:95:21:cb:52:25:47:44:0b:7a:
51:4c:c5:27:75:c0:7e:43:8a:77:20:51:fd:19:ee:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:5D:FD:1B:9C:E6:C9:B2:88:91:5F:09:93:2D:B1:1B:79:9E:C3
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/BXNd_Ruc5smyiJFfCZMtsRt5nsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.129.0/24
Signature Algorithm: sha256WithRSAEncryption
55:47:50:ac:23:65:c9:d7:0a:e4:40:29:b4:bf:35:fa:13:ca:
64:af:46:51:1d:b1:87:ce:ee:ae:29:5e:0f:15:96:a4:1d:1f:
93:b9:af:e8:50:ed:e7:e7:7c:8f:6e:d4:f5:c2:7e:56:a0:a6:
0c:c3:7e:af:ca:44:65:42:2e:86:7e:2e:21:bd:d8:ea:58:97:
4d:30:e5:97:cf:8e:5e:4c:83:c7:09:bb:84:06:c9:3a:62:2f:
94:e3:ae:c0:0f:dd:f9:80:09:8f:55:4f:9f:bc:b9:dd:9e:62:
39:d8:7f:28:18:21:72:c8:56:d4:7c:54:c6:4a:e4:0c:24:8d:
d9:0d:b5:22:7a:07:a0:46:cf:c8:af:d1:ce:62:d3:ef:77:a0:
d3:27:88:9d:04:66:b5:9a:ab:4a:9b:9e:ef:5e:72:9f:7d:e7:
39:73:65:96:1c:b7:dc:b4:0f:07:b6:6a:89:35:51:02:aa:6d:
8b:9f:97:c4:c6:23:4a:3b:d4:aa:85:30:83:75:13:28:62:43:
db:93:c9:1d:ab:0b:7a:fe:cc:e5:be:03:a1:7c:47:c2:48:4f:
07:9a:3d:b7:8b:8f:de:6b:ba:6e:33:7d:97:42:33:11:3e:83:
87:61:62:20:77:10:df:f1:9b:f1:36:62:89:b3:2b:2b:cd:2b:
ba:c5:8e:73
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBC7BTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YzBhYzhkMzY5MDUxMTIwM2EzMWVmNzg1ZTZkMWM0NDM5MmNhMjhiMB4XDTIyMDEw
MTE1MDcwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDU3MzVkZmQxYjlj
ZTZjOWIyODg5MTVmMDk5MzJkYjExYjc5OWVjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPZ8/MlQVO/4Am+s+qmbSugoZwzDR7ZFKIcPq5d2GwZ3/zNb
9Py8IvCVnl5v9dqt8qMwQSkShIKJJ31vHWHITG8BdF+luVWJuKXQNW0tBAACc2mg
YeJzqul5a1hfYZGigIoSizI++nx/D8tH03U7hxIMshknHpXoi8TovR38297bOZNg
v08CKvpm4T1nv3e/Ys3mPsqNjlX+VDFvrJeVIOq7mJubYu850XHq52f8w0wcoV08
o63nPWqK+OpQtauuekj1KiM0ZOkT7MdFmdfbFP5s6WZWx2+kZw5Gsbk+751dvv7X
lRTdlSHLUiVHRAt6UUzFJ3XAfkOKdyBR/RnuobkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQFc139G5zmybKIkV8Jky2xG3mewzAfBgNVHSMEGDAWgBQsCsjTaQURIDox
73hebRxEOSyiizAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xBckkwMmtGRVNBNk1lOTRYbTBjUkRrc29vcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvOGVmZDJlLTY5MmMtNGY0Ny1iNzQ5LTRmMzZjNmEyMGMwZS8x
L0JYTmRfUnVjNXNteWlKRmZDWk10c1J0NW5zTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
OGVmZDJlLTY5MmMtNGY0Ny1iNzQ5LTRmMzZjNmEyMGMwZS8xL0xBckkwMmtGRVNB
Nk1lOTRYbTBjUkRrc29vcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvUgTANBgkqhkiG9w0BAQsFAAOC
AQEAVUdQrCNlydcK5EAptL81+hPKZK9GUR2xh87urileDxWWpB0fk7mv6FDt5+d8
j27U9cJ+VqCmDMN+r8pEZUIuhn4uIb3Y6liXTTDll8+OXkyDxwm7hAbJOmIvlOOu
wA/d+YAJj1VPn7y53Z5iOdh/KBghcshW1HxUxkrkDCSN2Q21InoHoEbPyK/RzmLT
73eg0yeInQRmtZqrSpue715yn33nOXNllhy33LQPB7ZqiTVRAqpti5+XxMYjSjvU
qoUwg3UTKGJD25PJHasLev7M5b4DoXxHwkhPB5o9t4uP3mu6bjN9l0IzET6Dh2Fi
IHcQ3/Gb8TZiibMrK80rusWOcw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:12 2025 by rpki-client