Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/bRUAPvBovtRhmDQa2sqRl2K4J0U.roa
File: bRUAPvBovtRhmDQa2sqRl2K4J0U.roa (raw, json)
Hash identifier: NPrtKrwkn8FNFlKFu0bfAKL1d5B6/mTx202TwoCZj5s=
Subject key identifier: 6D:15:00:3E:F0:68:BE:D4:61:98:34:1A:DA:CA:91:97:62:B8:27:45
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 07BD522F
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/bRUAPvBovtRhmDQa2sqRl2K4J0U.roa
Signing time: Sat 01 Jan 2022 14:54:49 +0000
ROA not before: Sat 01 Jan 2022 14:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43352
IP address blocks: 195.155.155.0/24 maxlen: 24
37.9.200.0/21 maxlen: 24
195.155.128.0/19 maxlen: 24
195.155.135.0/24 maxlen: 24
185.4.208.0/22 maxlen: 24
185.4.211.0/24 maxlen: 24
2a02:cb04:4::/48 maxlen: 48
2a02:cb00::/29 maxlen: 48
2a02:cb04:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129847855 (0x7bd522f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Jan 1 14:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d15003ef068bed46198341adaca919762b82745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:86:5c:43:d6:a9:dd:50:93:5f:39:8c:aa:
b7:73:c6:6f:65:0e:d4:98:38:63:68:fc:5d:5d:f1:
db:55:a8:c0:28:d3:76:e9:48:2e:ee:1e:2b:36:db:
a4:0e:07:7f:7a:69:0f:b5:4a:f8:af:02:2d:98:56:
1b:67:2e:b4:dd:1f:20:a9:d3:5b:c7:bb:9f:0f:12:
c2:b7:6a:73:8f:3e:cb:8c:d5:6c:1b:ab:aa:91:9e:
c3:06:fe:9f:62:4d:05:a2:f9:4f:e5:10:39:9c:3c:
39:a1:54:ef:27:2d:82:33:6d:ab:27:7d:14:fe:8b:
43:db:e2:58:13:9f:40:8b:18:e0:02:1f:85:04:2c:
e2:31:c7:05:1d:24:92:c6:ea:67:f7:f7:4a:04:fc:
2c:5d:77:1b:74:f7:9b:8f:88:1e:27:05:71:ce:90:
46:15:54:14:d0:25:5d:90:1d:bc:d5:90:0b:7e:fb:
46:c3:79:a2:19:42:5f:b3:c7:48:fa:41:73:c0:80:
12:77:96:d8:0f:4c:f0:5d:78:46:bd:dc:35:0a:84:
dc:4b:f4:2d:b5:9d:3a:51:6b:fe:9e:26:aa:c0:32:
58:2f:9e:07:1d:7b:5b:13:28:43:76:55:3a:49:44:
f4:89:5a:f9:13:23:c4:52:a3:38:88:6f:b2:eb:99:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:15:00:3E:F0:68:BE:D4:61:98:34:1A:DA:CA:91:97:62:B8:27:45
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/bRUAPvBovtRhmDQa2sqRl2K4J0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.200.0/21
185.4.208.0/22
195.155.128.0/19
IPv6:
2a02:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
3b:3e:44:e2:4a:6f:c4:19:55:b3:69:86:a1:9f:2b:9d:55:d8:
d1:51:ea:46:1b:19:04:75:6f:85:bc:25:38:58:fe:52:28:eb:
46:df:01:06:a3:45:73:5b:58:90:9e:27:c8:14:b1:7d:b1:d2:
7f:1a:9a:48:c9:ad:6f:1a:7e:00:86:a3:36:d4:7c:15:fc:ad:
5f:56:cd:f2:13:fb:a4:be:c7:48:8c:2e:da:88:1e:07:98:56:
d7:fa:27:c6:10:bd:68:f9:a5:1c:96:09:44:39:77:d0:e8:4d:
01:a9:70:c2:39:c2:61:48:b1:d1:37:e8:33:33:49:91:51:c7:
cf:6b:35:a1:a0:8c:37:21:50:78:1b:6a:91:ae:aa:6b:a8:1e:
fc:93:66:4e:7a:86:e2:db:0b:f8:af:d4:b9:8d:50:91:ca:6a:
cd:38:9b:d7:fa:a7:cd:13:79:43:89:9b:25:94:84:ce:3f:91:
96:8e:62:8e:ed:2f:ee:d6:91:2c:73:51:8f:cc:2e:14:ce:42:
f2:14:14:30:0b:8b:35:ed:c3:d0:78:75:f0:92:39:3d:4c:76:
66:c9:88:09:06:88:b4:e5:b5:76:c8:03:be:12:86:63:ef:9e:
b3:77:6f:b8:00:62:53:c4:86:f8:6c:f1:4e:29:a9:62:b6:98:
82:a2:e6:3e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEB71SLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OWQwYTNmOWMzNDMwN2IwYTViMzZkMmU2ZDE4OTlhZWZlN2JiZWI0MB4XDTIyMDEw
MTE0NTQ0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmQxNTAwM2VmMDY4
YmVkNDYxOTgzNDFhZGFjYTkxOTc2MmI4Mjc0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANDZhlxD1qndUJNfOYyqt3PGb2UO1Jg4Y2j8XV3x21WowCjT
dulILu4eKzbbpA4Hf3ppD7VK+K8CLZhWG2cutN0fIKnTW8e7nw8Swrdqc48+y4zV
bBurqpGewwb+n2JNBaL5T+UQOZw8OaFU7yctgjNtqyd9FP6LQ9viWBOfQIsY4AIf
hQQs4jHHBR0kksbqZ/f3SgT8LF13G3T3m4+IHicFcc6QRhVUFNAlXZAdvNWQC377
RsN5ohlCX7PHSPpBc8CAEneW2A9M8F14Rr3cNQqE3Ev0LbWdOlFr/p4mqsAyWC+e
Bx17WxMoQ3ZVOklE9Ila+RMjxFKjOIhvsuuZNFcCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBRtFQA+8Gi+1GGYNBraypGXYrgnRTAfBgNVHSMEGDAWgBRZ0KP5w0MHsKWz
bS5tGJmu/nu+tDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dkQ2otY05EQjdDbHMyMHViUmlacnY1N3ZyUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvNzkxYzMzLWExMGUtNDNhOS1hYzI5LWUwZDEzMjMwYjlkNS8x
L2JSVUFQdkJvdnRSaG1EUWEyc3FSbDJLNEowVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
NzkxYzMzLWExMGUtNDNhOS1hYzI5LWUwZDEzMjMwYjlkNS8xL1dkQ2otY05EQjdD
bHMyMHViUmlacnY1N3ZyUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAyUJyAMEArkE0AMEBcObgDANBAIA
AjAHAwUDKgLLADANBgkqhkiG9w0BAQsFAAOCAQEAOz5E4kpvxBlVs2mGoZ8rnVXY
0VHqRhsZBHVvhbwlOFj+UijrRt8BBqNFc1tYkJ4nyBSxfbHSfxqaSMmtbxp+AIaj
NtR8FfytX1bN8hP7pL7HSIwu2ogeB5hW1/onxhC9aPmlHJYJRDl30OhNAalwwjnC
YUix0TfoMzNJkVHHz2s1oaCMNyFQeBtqka6qa6ge/JNmTnqG4tsL+K/UuY1Qkcpq
zTib1/qnzRN5Q4mbJZSEzj+Rlo5iju0v7taRLHNRj8wuFM5C8hQUMAuLNe3D0Hh1
8JI5PUx2ZsmICQaItOW1dsgDvhKGY++es3dvuABiU8SG+GzxTimpYraYgqLmPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-fra.rpki-client.org