Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/BOaGVVDN0UhhVHeUYRAbFb8yJBo.roa
File: BOaGVVDN0UhhVHeUYRAbFb8yJBo.roa (raw, json)
Hash identifier: WbalDXpo6f/OUDimSfX0OAeL3uHUD8jBYi+A2AA/cZs=
Subject key identifier: 04:E6:86:55:50:CD:D1:48:61:54:77:94:61:10:1B:15:BF:32:24:1A
Certificate issuer: /CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
Certificate serial: 0E5EB527
Authority key identifier: BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/BOaGVVDN0UhhVHeUYRAbFb8yJBo.roa
Signing time: Sat 01 Jan 2022 04:01:52 +0000
ROA not before: Sat 01 Jan 2022 04:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 185.215.224.0/24 maxlen: 24
185.215.227.0/24 maxlen: 24
2a0b:ae40:3::/48 maxlen: 48
2a0b:ae40:1::/48 maxlen: 48
2a0b:ae40:4::/48 maxlen: 48
2a0b:ae47:4::/48 maxlen: 48
2a0b:ae40:2::/48 maxlen: 48
2a0b:ae47:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241087783 (0xe5eb527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
Validity
Not Before: Jan 1 04:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04e6865550cdd1486154779461101b15bf32241a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:8a:85:d4:01:14:6c:7a:20:d1:1f:b0:94:
a0:e3:7a:fb:fc:e0:6c:61:8e:cc:71:9c:b8:42:9e:
c8:4c:4f:94:72:c5:a7:70:e5:8c:8c:74:20:ba:18:
fe:a8:cb:cf:a4:df:33:38:58:e7:5c:d5:e8:b7:fb:
16:9f:66:a5:d6:ce:50:47:6c:04:8a:39:6d:c9:61:
13:46:94:fd:2f:de:53:da:38:9e:88:dd:b2:95:b3:
5e:02:6a:36:24:4f:7d:99:35:06:63:a3:15:d9:cd:
82:6e:9c:35:be:e8:60:86:05:64:d0:f2:c2:ef:bf:
4f:0a:b3:12:48:46:bc:f6:ff:35:64:1c:c7:c2:ba:
21:b6:5d:1c:72:95:2a:cc:af:de:ee:40:cd:04:81:
2d:6b:54:8c:cd:63:9d:8f:31:8c:dd:81:16:4b:99:
b8:a1:99:24:9a:87:e4:98:52:3f:aa:86:c0:fd:a8:
4d:80:70:c3:92:d9:bd:76:3e:5d:eb:9d:61:8e:cb:
cc:fe:87:92:b6:7f:fa:35:29:e9:1e:0f:52:6d:13:
8e:cb:f5:ad:7f:d6:8b:08:ae:26:22:ef:88:31:36:
99:4f:4c:6d:0a:a3:ae:48:9f:67:e7:51:f7:79:d9:
96:e6:bb:9b:92:fc:15:25:38:7c:d4:05:83:a9:47:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:86:55:50:CD:D1:48:61:54:77:94:61:10:1B:15:BF:32:24:1A
X509v3 Authority Key Identifier:
keyid:BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/BOaGVVDN0UhhVHeUYRAbFb8yJBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.224.0/24
185.215.227.0/24
IPv6:
2a0b:ae40:1::-2a0b:ae40:4:ffff:ffff:ffff:ffff:ffff
2a0b:ae47:3::-2a0b:ae47:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:73:fa:22:66:c2:c5:8b:32:58:20:d6:ee:10:72:da:2b:75:
56:3d:62:07:2a:8e:a3:db:1c:e3:d5:b0:9a:d9:0e:00:e9:7f:
60:c8:4a:60:f9:9f:fa:90:72:a0:90:d7:a0:dd:d4:78:43:26:
70:3c:db:e3:e5:32:28:d4:be:24:bb:81:75:23:e5:3b:5c:a7:
ca:85:fc:9d:2f:d3:c4:66:9c:73:39:30:b3:6c:bd:47:44:f9:
f8:f9:4d:34:43:21:01:ef:78:24:92:68:80:60:9f:e0:19:45:
e0:29:75:fb:95:28:e4:f5:79:e5:cb:23:93:3b:cb:f9:bd:3b:
0b:a0:81:c9:b8:ba:69:47:88:e9:fc:d1:a5:da:7e:b0:b9:42:
bc:68:c9:bf:5c:53:54:92:52:bd:f7:e9:08:53:84:53:5a:a0:
57:6b:78:dc:30:b6:41:ff:c0:30:7e:f1:1c:37:7c:70:d3:f9:
8c:5c:53:e9:35:91:c4:ff:ea:bc:b6:fd:59:cc:f2:59:d2:fe:
ea:d8:9a:85:2b:85:98:0b:10:39:ad:16:2b:49:91:61:ed:33:
7b:87:b1:67:48:57:ef:de:73:0c:dc:c6:0b:2e:d6:56:2e:10:
61:45:bd:ac:ed:2f:1a:ea:56:01:91:6e:3b:82:5f:d6:9f:5c:
d5:db:85:c3
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIEDl61JzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YTc5NjZlY2ZkOGJjMmQzMTgzM2Y3MGFmYmE0ZjdmOGExNWIyNGEzMB4XDTIyMDEw
MTA0MDE1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDRlNjg2NTU1MGNk
ZDE0ODYxNTQ3Nzk0NjExMDFiMTViZjMyMjQxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI1cioXUARRseiDRH7CUoON6+/zgbGGOzHGcuEKeyExPlHLF
p3DljIx0ILoY/qjLz6TfMzhY51zV6Lf7Fp9mpdbOUEdsBIo5bclhE0aU/S/eU9o4
nojdspWzXgJqNiRPfZk1BmOjFdnNgm6cNb7oYIYFZNDywu+/TwqzEkhGvPb/NWQc
x8K6IbZdHHKVKsyv3u5AzQSBLWtUjM1jnY8xjN2BFkuZuKGZJJqH5JhSP6qGwP2o
TYBww5LZvXY+XeudYY7LzP6HkrZ/+jUp6R4PUm0Tjsv1rX/WiwiuJiLviDE2mU9M
bQqjrkifZ+dR93nZlua7m5L8FSU4fNQFg6lHZF8CAwEAAaOCAj8wggI7MB0GA1Ud
DgQWBBQE5oZVUM3RSGFUd5RhEBsVvzIkGjAfBgNVHSMEGDAWgBS6eWbs/YvC0xgz
9wr7pPf4oVskozAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VubG03UDJMd3RNWU1fY0stNlQzLUtGYkpLTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWUvODZmMzUwLTk0ZGYtNDgzMC04ZTliLWZiMDQ0M2I4ZDliZS8x
L0JPYUdWVkROMFVoaFZIZVVZUkFiRmI4eUpCby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUv
ODZmMzUwLTk0ZGYtNDgzMC04ZTliLWZiMDQ0M2I4ZDliZS8xL3VubG03UDJMd3RN
WU1fY0stNlQzLUtGYkpLTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBV
BggrBgEFBQcBBwEB/wRGMEQwEgQCAAEwDAMEALnX4AMEALnX4zAuBAIAAjAoMBID
BwAqC65AAAEDBwAqC65AAAQwEgMHACoLrkcAAwMHACoLrkcABDANBgkqhkiG9w0B
AQsFAAOCAQEADXP6ImbCxYsyWCDW7hBy2it1Vj1iByqOo9sc49WwmtkOAOl/YMhK
YPmf+pByoJDXoN3UeEMmcDzb4+UyKNS+JLuBdSPlO1ynyoX8nS/TxGacczkws2y9
R0T5+PlNNEMhAe94JJJogGCf4BlF4Cl1+5Uo5PV55csjkzvL+b07C6CBybi6aUeI
6fzRpdp+sLlCvGjJv1xTVJJSvffpCFOEU1qgV2t43DC2Qf/AMH7xHDd8cNP5jFxT
6TWRxP/qvLb9WczyWdL+6tiahSuFmAsQOa0WK0mRYe0ze4exZ0hX795zDNzGCy7W
Vi4QYUW9rO0vGupWAZFuO4Jf1p9c1duFww==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:11 2023 by rpki-client on console-fra.rpki-client.org