Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bsHWlX5pWrw9CT4HqKvFBZqgplc.roa
File: bsHWlX5pWrw9CT4HqKvFBZqgplc.roa (raw, json)
Hash identifier: IC1BkeZKByg09FDdhrOrB41OLT0sL6VPFmvgkC4XYZ0=
Subject key identifier: 6E:C1:D6:95:7E:69:5A:BC:3D:09:3E:07:A8:AB:C5:05:9A:A0:A6:57
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B5368676C715797713E5CC5077C40
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bsHWlX5pWrw9CT4HqKvFBZqgplc.roa
Signing time: Sun 01 Jan 2023 18:15:02 +0000
ROA not before: Sun 01 Jan 2023 18:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211223
IP address blocks: 171.22.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:53:68:67:6c:71:57:97:71:3e:5c:c5:07:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ec1d6957e695abc3d093e07a8abc5059aa0a657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:8d:1f:91:a1:ad:8b:6b:75:ac:d7:bd:83:
bb:05:90:55:49:45:d5:93:e6:0d:e0:40:5a:ae:15:
e6:39:54:29:f7:57:b7:f8:b2:99:d5:42:51:95:38:
2a:c2:5b:2c:2b:79:3f:cc:02:77:4e:32:95:14:12:
b5:d6:19:97:86:b1:ec:b1:b9:4e:22:ea:88:03:00:
ba:a9:46:e3:e3:c5:9d:38:be:2b:28:e3:20:79:29:
7b:fe:be:e0:03:be:13:d2:24:2c:6c:c4:f2:00:b6:
fc:56:3c:5f:a7:bc:ed:e4:2d:a7:73:ff:04:ca:be:
d1:65:5b:82:51:e7:0e:fb:10:9f:12:58:f7:1d:7a:
1c:ca:a6:2e:f9:40:bb:da:ae:bf:9d:ca:69:4c:33:
b0:21:2d:80:58:bb:35:f7:71:27:aa:2b:5a:7c:d7:
68:63:20:d0:08:9b:6a:89:ab:03:92:c8:7a:80:f0:
0f:4b:ff:bc:f6:4e:62:10:5f:61:98:ff:a8:02:69:
ab:7f:29:7c:b9:2b:50:ab:1b:4c:8b:3c:5a:1f:63:
5e:be:d6:60:55:d3:d1:71:aa:9e:b9:e4:ee:b5:68:
5e:84:10:ae:e3:8a:a6:b8:2c:78:e5:4c:29:83:60:
c8:5b:f8:47:e0:b9:32:97:5e:39:74:05:f9:e1:07:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:D6:95:7E:69:5A:BC:3D:09:3E:07:A8:AB:C5:05:9A:A0:A6:57
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bsHWlX5pWrw9CT4HqKvFBZqgplc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:32:9a:80:52:ef:8e:c5:1f:6c:f7:45:0f:53:dc:48:62:c3:
e7:45:dd:49:00:1e:d2:8b:a2:80:98:5e:88:39:8f:bd:4d:b2:
9c:6f:f6:76:b9:55:74:65:1d:62:44:c8:1c:2f:e5:4b:2d:07:
e2:d3:93:bb:d3:7d:f0:f9:a8:4a:11:05:29:6d:3e:f5:5c:f0:
96:42:6e:79:6c:7a:bc:31:23:98:24:1a:30:15:77:0e:b5:8c:
ab:11:ec:32:6e:73:02:40:8e:5b:b0:4c:36:8d:c3:61:ab:e5:
30:4a:dd:9b:e0:37:0a:cc:39:a7:11:ed:01:b2:de:cb:4a:d7:
a8:d8:f7:0a:d5:cf:9a:0d:12:81:0e:f1:7b:3b:ea:23:67:23:
50:0e:c1:bb:2c:c0:0f:31:45:18:89:61:6f:49:32:da:c4:c5:
39:74:15:6b:89:ec:95:41:bf:84:28:44:98:7e:ee:22:81:3c:
4c:c9:5a:69:44:82:ad:c4:c2:09:61:f7:da:ab:df:2c:5c:ee:
1c:b4:fc:52:b8:cc:28:ab:02:02:6f:12:16:83:65:29:6c:d1:
a7:41:f5:4e:e6:42:8f:de:bf:16:6c:45:3e:be:08:0a:d0:86:
e2:70:81:ee:c7:0d:af:8b:f3:8f:52:a9:e1:e9:ab:30:c6:8a:
88:0b:25:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVui1NoZ2xxV5dxPlzFB3xAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwMTAxMTgxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWMxZDY5NTdlNjk1YWJjM2QwOTNlMDdhOGFiYzUwNTlhYTBhNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWWNH5GhrYtrdazXvYO7BZBVSUXV
k+YN4EBarhXmOVQp91e3+LKZ1UJRlTgqwlssK3k/zAJ3TjKVFBK11hmXhrHssblO
IuqIAwC6qUbj48WdOL4rKOMgeSl7/r7gA74T0iQsbMTyALb8Vjxfp7zt5C2nc/8E
yr7RZVuCUecO+xCfElj3HXocyqYu+UC72q6/ncppTDOwIS2AWLs193EnqitafNdo
YyDQCJtqiasDksh6gPAPS/+89k5iEF9hmP+oAmmrfyl8uStQqxtMizxaH2NevtZg
VdPRcaqeueTutWhehBCu44qmuCx45Uwpg2DIW/hH4Lkyl145dAX54QcDqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG7B1pV+aVq8PQk+B6irxQWaoKZXMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvYnNIV2xYNXBXcnc5Q1Q0SHFLdkZCWnFncGxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxaLMA0G
CSqGSIb3DQEBCwUAA4IBAQBcMpqAUu+OxR9s90UPU9xIYsPnRd1JAB7Si6KAmF6I
OY+9TbKcb/Z2uVV0ZR1iRMgcL+VLLQfi05O7033w+ahKEQUpbT71XPCWQm55bHq8
MSOYJBowFXcOtYyrEewybnMCQI5bsEw2jcNhq+UwSt2b4DcKzDmnEe0Bst7LSteo
2PcK1c+aDRKBDvF7O+ojZyNQDsG7LMAPMUUYiWFvSTLaxMU5dBVrieyVQb+EKESY
fu4igTxMyVppRIKtxMIJYffaq98sXO4ctPxSuMwoqwICbxIWg2UpbNGnQfVO5kKP
3r8WbEU+vggK0IbicIHuxw2vi/OPUqnh6aswxoqICyWf
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:26 2025 by rpki-client