Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/bvF-hnffcNIKr1IudyCLSGt0_aU.roa
File: bvF-hnffcNIKr1IudyCLSGt0_aU.roa (raw, json)
Hash identifier: NdXRl9OVTpOmROknC1DZGM9ABIVJQBNqXgVXdEASNUg=
Subject key identifier: 6E:F1:7E:86:77:DF:70:D2:0A:AF:52:2E:77:20:8B:48:6B:74:FD:A5
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 01856CEF2D30DFB67EE9349D068CA5007C05
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/bvF-hnffcNIKr1IudyCLSGt0_aU.roa
Signing time: Sun 01 Jan 2023 10:44:52 +0000
ROA not before: Sun 01 Jan 2023 10:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43104
IP address blocks: 193.200.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:2d:30:df:b6:7e:e9:34:9d:06:8c:a5:00:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Jan 1 10:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ef17e8677df70d20aaf522e77208b486b74fda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:35:78:39:bc:f7:a4:de:23:c1:52:6e:0d:
02:79:f0:51:56:d5:c0:12:b8:a0:d6:3b:dd:4b:08:
fc:84:ad:18:6f:d2:9a:8b:bb:e5:f9:0a:f6:c1:17:
f7:6d:67:55:4e:22:f7:99:bf:8b:8b:fc:67:43:59:
a7:88:dc:45:98:21:f1:4a:f1:fa:d1:b9:27:75:9d:
9f:32:72:55:32:d2:1a:96:12:47:20:0a:21:1e:0b:
0a:86:1a:04:ea:5a:e8:8c:8c:b0:f6:8e:e2:89:2e:
8b:21:a1:d0:0e:0f:13:4b:e2:9e:56:ae:c8:86:d9:
99:10:69:ce:53:59:81:de:58:e7:77:d4:6a:43:3c:
81:a2:8a:27:b6:fc:5b:76:18:ce:81:2c:73:5b:8e:
be:ba:a8:4f:c2:66:6b:0d:98:a9:db:4c:bd:bd:ec:
b8:6d:8d:08:9f:db:57:80:1a:c4:fe:91:94:a6:de:
d2:93:1d:b9:32:28:d8:51:1d:d5:29:d5:af:63:d3:
59:c9:10:68:06:1a:c7:f2:76:9f:73:8d:4c:3e:80:
88:41:3e:bb:53:e6:c5:75:77:7c:65:9b:e1:d3:f6:
6b:07:89:3c:95:e5:a4:94:67:09:37:45:42:ab:43:
76:bb:21:27:07:ee:ab:9c:82:37:bc:fe:87:2c:6a:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F1:7E:86:77:DF:70:D2:0A:AF:52:2E:77:20:8B:48:6B:74:FD:A5
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/bvF-hnffcNIKr1IudyCLSGt0_aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.224.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a8:68:a6:72:78:d6:42:1e:dd:2d:72:24:03:2d:a0:93:03:
b5:e7:73:77:0f:e4:0c:c9:bc:c9:3f:04:fe:e7:97:8f:ba:66:
ac:9d:fa:4b:ed:0a:18:11:bc:a6:d9:f3:37:20:c8:51:88:3b:
67:9a:25:2c:1a:0f:56:41:32:74:7b:26:ff:a1:d9:16:15:fc:
41:3a:0d:09:33:18:28:a5:32:1a:de:46:36:24:74:7b:1d:32:
42:4f:5b:b6:82:55:57:03:f6:3b:cc:22:6d:a7:79:45:09:49:
5f:00:2b:f2:7a:07:e3:e4:a1:c1:52:bd:df:fb:9e:72:77:7c:
d1:b1:a7:b7:ee:39:b6:7a:3d:e7:d5:24:3f:44:c2:41:95:02:
28:73:9f:0a:ba:1a:62:45:bf:7d:2a:c5:12:14:4c:c9:3e:a6:
c2:04:46:ae:9c:df:3a:b6:7b:fb:a7:c3:5d:bc:1a:d3:8b:bb:
f1:f3:e8:1e:0a:ef:db:15:1f:72:1e:95:5d:a4:b9:05:23:28:
9d:47:39:0e:6c:b1:bd:b7:a1:d4:60:f5:55:7e:0d:52:f6:0c:
9d:65:3e:89:71:ce:ae:ee:07:60:55:1d:cd:fa:d3:ea:ae:a2:
b7:68:ed:fc:5f:9b:77:57:0a:8f:01:7c:7b:d0:16:5f:f8:28:
13:d8:e4:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs7y0w37Z+6TSdBoylAHwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMDA1OTZiYmYzODJkNDk4YmM1ZWMyYjNmZDY1MzM5ZTg1
Yjk4ZjIwHhcNMjMwMTAxMTA0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWYxN2U4Njc3ZGY3MGQyMGFhZjUyMmU3NzIwOGI0ODZiNzRmZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWQ1eDm896TeI8FSbg0CefBRVtXA
Erig1jvdSwj8hK0Yb9Kai7vl+Qr2wRf3bWdVTiL3mb+Li/xnQ1mniNxFmCHxSvH6
0bkndZ2fMnJVMtIalhJHIAohHgsKhhoE6lrojIyw9o7iiS6LIaHQDg8TS+KeVq7I
htmZEGnOU1mB3ljnd9RqQzyBooontvxbdhjOgSxzW46+uqhPwmZrDZip20y9vey4
bY0In9tXgBrE/pGUpt7Skx25MijYUR3VKdWvY9NZyRBoBhrH8nafc41MPoCIQT67
U+bFdXd8ZZvh0/ZrB4k8leWklGcJN0VCq0N2uyEnB+6rnII3vP6HLGrb/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG7xfoZ333DSCq9SLncgi0hrdP2lMB8GA1UdIwQY
MBaAFIIAWWu/OC1Ji8XsKz/WUznoW5jyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYt
NjhhZDJkMTExYmFjLzEvYnZGLWhuZmZjTklLcjFJdWR5Q0xTR3QwX2FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYtNjhhZDJkMTExYmFj
LzEvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcjgMA0G
CSqGSIb3DQEBCwUAA4IBAQBTqGimcnjWQh7dLXIkAy2gkwO153N3D+QMybzJPwT+
55ePumasnfpL7QoYEbym2fM3IMhRiDtnmiUsGg9WQTJ0eyb/odkWFfxBOg0JMxgo
pTIa3kY2JHR7HTJCT1u2glVXA/Y7zCJtp3lFCUlfACvyegfj5KHBUr3f+55yd3zR
sae37jm2ej3n1SQ/RMJBlQIoc58KuhpiRb99KsUSFEzJPqbCBEaunN86tnv7p8Nd
vBrTi7vx8+geCu/bFR9yHpVdpLkFIyidRzkObLG9t6HUYPVVfg1S9gydZT6Jcc6u
7gdgVR3N+tPqrqK3aO38X5t3VwqPAXx70BZf+CgT2OTV
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:30 2025 by rpki-client