Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BAL-poPQ3rD12Eb6A5EtT0hcV6E.roa
File: BAL-poPQ3rD12Eb6A5EtT0hcV6E.roa (raw, json)
Hash identifier: Wrss/h1MvI4aBJ4RcyGCWr+XpAxsCEteWRmdvyHTMaI=
Subject key identifier: 04:02:FE:A6:83:D0:DE:B0:F5:D8:46:FA:03:91:2D:4F:48:5C:57:A1
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 03B70A10
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BAL-poPQ3rD12Eb6A5EtT0hcV6E.roa
Signing time: Sat 01 Jan 2022 01:55:36 +0000
ROA not before: Sat 01 Jan 2022 01:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.247.116.0/22 maxlen: 24
176.125.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62327312 (0x3b70a10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jan 1 01:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0402fea683d0deb0f5d846fa03912d4f485c57a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:1e:e9:57:8b:e9:7c:62:61:51:7a:d1:cd:
8f:74:ff:41:e3:69:15:60:d6:ab:c5:bd:0c:3d:3e:
58:b3:0a:a8:ba:1c:03:cd:a9:20:cd:30:bb:06:01:
f0:7d:2c:0c:72:e5:0d:ff:82:d3:e4:90:27:2a:22:
c1:da:81:6d:ec:36:06:32:e6:81:2a:03:b2:af:1d:
3b:50:29:7a:50:db:45:18:f5:72:9b:f0:a5:ba:9c:
b6:18:1a:3b:33:4d:fe:58:c0:9d:f3:e8:b2:40:47:
9d:00:6b:61:c5:0a:92:c9:2d:17:60:13:64:8e:e4:
03:7a:ed:f9:af:50:79:1c:64:9f:71:0b:5c:82:df:
5e:40:ed:be:b2:85:be:52:ae:a5:af:f3:2b:53:a8:
cb:3f:fe:13:d9:44:6c:73:7b:c5:aa:57:81:79:25:
49:a3:e2:07:a6:fc:e5:48:72:1c:b9:f2:32:94:2f:
53:f5:f4:44:94:28:b6:bd:d1:7c:15:4f:b6:80:f3:
4d:8e:6b:5a:a0:99:9c:2a:7a:ed:ee:8b:8d:20:25:
d4:a9:73:28:10:10:57:41:16:05:3a:fc:26:58:07:
81:ea:f9:30:f7:1d:4c:fe:80:54:13:93:2b:1d:24:
8b:27:3d:b0:68:84:fc:cd:89:3d:a4:06:fb:df:c0:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:FE:A6:83:D0:DE:B0:F5:D8:46:FA:03:91:2D:4F:48:5C:57:A1
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BAL-poPQ3rD12Eb6A5EtT0hcV6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.116.0/22
176.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:8d:28:0f:07:9e:8d:53:97:3c:23:95:b4:53:54:b0:4f:ed:
40:3f:55:19:ee:af:02:b9:c0:f8:60:68:b1:48:5f:57:cf:92:
54:e7:47:be:2a:9d:dd:05:b2:05:40:67:86:f8:20:cc:17:1e:
3c:1d:d6:2f:96:80:64:65:f1:0d:7d:28:33:4a:0c:eb:5b:2a:
06:ef:7e:45:04:b4:7d:93:19:02:4d:55:29:2a:b4:38:36:37:
0a:63:7f:20:89:5d:c2:de:1b:48:4a:81:d9:fd:f0:0c:ab:85:
a3:57:81:f0:95:76:e0:49:2c:f4:65:0b:6c:eb:41:fc:05:ed:
9f:27:26:fd:63:3a:bd:41:fe:c7:f8:58:b7:01:b2:86:95:ce:
43:fb:0a:01:de:69:3b:53:58:62:85:02:87:8c:21:49:38:ff:
e1:ba:16:5f:69:b9:60:b2:74:1b:3f:00:af:01:79:bf:db:e8:
8e:4f:1e:38:df:da:73:e8:3a:52:f7:18:92:89:da:b6:51:5d:
2c:11:95:85:81:d9:da:8a:f0:92:d0:3a:28:32:86:65:b8:ed:
9b:c0:f3:4f:43:e4:86:86:92:63:53:ab:a0:6a:4a:44:9a:d2:
9b:c3:4c:79:05:7f:65:d0:d4:22:4a:44:47:2b:43:3f:cf:6b:
78:42:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:06 2024 by rpki-client on console-fra.rpki-client.org