Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/bsFczfudyF5gZvWB3YALOy77wNs.roa
File: bsFczfudyF5gZvWB3YALOy77wNs.roa (raw, json)
Hash identifier: 74pEAzseOxr8j7GjyMP1LN8UB9SRn3nfjrj7nH5UQu4=
Subject key identifier: 6E:C1:5C:CD:FB:9D:C8:5E:60:66:F5:81:DD:80:0B:3B:2E:FB:C0:DB
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 03F3F84D
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/bsFczfudyF5gZvWB3YALOy77wNs.roa
Signing time: Sat 01 Jan 2022 07:53:43 +0000
ROA not before: Sat 01 Jan 2022 07:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59545
IP address blocks: 195.177.214.0/23 maxlen: 23
195.177.215.0/24 maxlen: 24
195.177.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66320461 (0x3f3f84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Jan 1 07:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ec15ccdfb9dc85e6066f581dd800b3b2efbc0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:f2:b7:d8:3a:8c:f0:08:b2:4e:dc:2d:eb:
2d:f1:12:0d:fd:fa:71:df:88:7c:df:dd:fe:15:42:
77:f3:3e:96:06:d4:92:3a:05:ac:2c:21:6a:26:fd:
b8:6a:81:69:c7:02:85:78:9f:10:5d:6c:18:a7:c7:
63:ca:83:48:ef:02:bf:3c:08:41:35:24:98:b1:93:
b5:ba:6e:c3:9b:58:89:17:14:89:e1:fd:db:e3:7b:
26:8f:03:a1:c7:3e:f9:0b:59:c8:5c:88:25:cf:a7:
c9:c7:8d:50:39:8b:0c:02:68:16:89:dd:ad:51:64:
88:98:cb:cf:ee:c1:56:2a:b1:f6:c5:53:e4:9b:ed:
2d:f0:be:ba:20:33:28:00:7b:d3:da:55:52:2b:fa:
6c:af:f8:00:c2:4a:52:8a:42:f9:7b:62:33:e7:56:
83:27:c3:f8:b5:7e:13:78:ac:d2:fd:8b:1e:82:3d:
8b:db:7d:ba:c2:fb:b9:2d:9c:22:3a:48:45:a4:33:
58:45:86:84:89:97:9c:be:a2:07:3e:ca:80:ff:53:
96:a6:de:57:c3:3c:28:ce:8f:67:75:21:99:d7:6e:
6b:6d:b9:b1:ec:18:3f:81:07:6e:df:6d:ea:84:39:
c5:c9:9a:bb:83:ed:61:9b:cc:ea:ce:45:ea:e5:a8:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:5C:CD:FB:9D:C8:5E:60:66:F5:81:DD:80:0B:3B:2E:FB:C0:DB
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/bsFczfudyF5gZvWB3YALOy77wNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.214.0/23
Signature Algorithm: sha256WithRSAEncryption
59:f5:16:1d:f6:8f:49:91:3e:34:ef:f8:15:6e:b6:9c:39:f4:
a9:1f:72:9d:dc:eb:94:7f:3d:fe:6e:b2:d0:6f:e3:23:dc:0e:
7c:04:94:21:ff:83:16:d4:57:fb:ad:07:99:33:bc:8b:23:d2:
bf:c8:cd:b5:b1:b3:26:de:0a:ea:31:f6:99:bd:3f:7a:d9:54:
b0:f5:12:e4:5a:69:61:d8:60:4b:5b:d2:0f:9f:67:64:43:58:
7b:6c:0c:b5:d8:d4:90:c9:fd:83:a7:3f:58:14:fd:d7:d1:f5:
83:98:54:33:2b:bc:88:f3:e5:93:08:0b:26:69:1c:9a:44:62:
40:d7:2d:f6:ad:53:ce:09:cd:64:9d:b2:de:dc:be:2c:14:5f:
c1:7a:8c:f7:9a:88:de:e3:e8:b9:80:c1:25:bb:09:99:30:ed:
14:71:d5:54:19:18:cf:74:7b:d9:a0:0f:81:77:89:18:6d:db:
e4:3f:5f:72:0c:9d:a3:35:1e:52:50:26:9b:a3:fc:2b:bf:f3:
42:7e:a3:c2:48:5f:19:56:e2:d0:d6:a3:5e:ee:91:eb:04:62:
12:b9:dd:00:ff:d9:40:4b:83:56:41:2a:c4:50:1f:92:0a:cf:
dd:c9:7b:8a:d3:e6:71:93:e3:b0:c1:9c:d7:a0:6a:aa:f0:ed:
df:38:43:59
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA/P4TTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
M2E0NzE0YTY5NWM2M2NmMmU5YzRhZGVhNjE3MTgyN2Q4NjZlMjk4MB4XDTIyMDEw
MTA3NTM0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmVjMTVjY2RmYjlk
Yzg1ZTYwNjZmNTgxZGQ4MDBiM2IyZWZiYzBkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOwv8rfYOozwCLJO3C3rLfESDf36cd+IfN/d/hVCd/M+lgbU
kjoFrCwhaib9uGqBaccChXifEF1sGKfHY8qDSO8CvzwIQTUkmLGTtbpuw5tYiRcU
ieH92+N7Jo8Docc++QtZyFyIJc+nyceNUDmLDAJoFondrVFkiJjLz+7BViqx9sVT
5JvtLfC+uiAzKAB709pVUiv6bK/4AMJKUopC+XtiM+dWgyfD+LV+E3is0v2LHoI9
i9t9usL7uS2cIjpIRaQzWEWGhImXnL6iBz7KgP9TlqbeV8M8KM6PZ3Uhmddua225
sewYP4EHbt9t6oQ5xcmau4PtYZvM6s5F6uWoSd8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRuwVzN+53IXmBm9YHdgAs7LvvA2zAfBgNVHSMEGDAWgBSzpHFKaVxjzy6c
St6mFxgn2GbimDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3M2UnhTbWxjWTg4dW5FcmVwaGNZSjlobTRwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvOWE3MmUwLWZiOWMtNGU3Mi1hZjM0LWRjNDhjZWNkMTU0NS8x
L2JzRmN6ZnVkeUY1Z1p2V0IzWUFMT3k3N3dOcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
OWE3MmUwLWZiOWMtNGU3Mi1hZjM0LWRjNDhjZWNkMTU0NS8xL3M2UnhTbWxjWTg4
dW5FcmVwaGNZSjlobTRwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcOx1jANBgkqhkiG9w0BAQsFAAOC
AQEAWfUWHfaPSZE+NO/4FW62nDn0qR9yndzrlH89/m6y0G/jI9wOfASUIf+DFtRX
+60HmTO8iyPSv8jNtbGzJt4K6jH2mb0/etlUsPUS5FppYdhgS1vSD59nZENYe2wM
tdjUkMn9g6c/WBT919H1g5hUMyu8iPPlkwgLJmkcmkRiQNct9q1TzgnNZJ2y3ty+
LBRfwXqM95qI3uPouYDBJbsJmTDtFHHVVBkYz3R72aAPgXeJGG3b5D9fcgydozUe
UlAmm6P8K7/zQn6jwkhfGVbi0NajXu6R6wRiErndAP/ZQEuDVkEqxFAfkgrP3cl7
itPmcZPjsMGc16BqqvDt3zhDWQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org