Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/baygtPAdOCSGAKzrkbMjUki4fI8.roa
File: baygtPAdOCSGAKzrkbMjUki4fI8.roa (raw, json)
Hash identifier: fk+SE2cmiStbXUyx1B41Ee2KLQk4XAhwrojK07YfFpk=
Subject key identifier: 6D:AC:A0:B4:F0:1D:38:24:86:00:AC:EB:91:B3:23:52:48:B8:7C:8F
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 017F17DE
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/baygtPAdOCSGAKzrkbMjUki4fI8.roa
Signing time: Sat 01 Jan 2022 11:54:23 +0000
ROA not before: Sat 01 Jan 2022 11:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42947
IP address blocks: 193.31.96.0/22 maxlen: 24
176.101.72.0/21 maxlen: 24
193.32.72.0/21 maxlen: 24
185.152.108.0/23 maxlen: 24
185.152.110.0/24 maxlen: 24
193.150.16.0/22 maxlen: 24
185.50.116.0/22 maxlen: 24
193.187.184.0/22 maxlen: 24
89.34.28.0/22 maxlen: 24
185.88.232.0/22 maxlen: 24
185.110.224.0/22 maxlen: 24
194.36.200.0/22 maxlen: 24
2a02:2b60::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25106398 (0x17f17de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Jan 1 11:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6daca0b4f01d38248600aceb91b3235248b87c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:3d:08:39:fa:d8:bb:56:68:d1:d9:82:49:
b2:f8:4d:c4:df:fa:6e:96:0a:b5:1c:42:27:78:10:
52:04:b5:aa:81:55:63:0d:9e:9b:b6:a9:d3:4b:d6:
30:e3:f7:da:6a:88:0c:44:20:20:05:ee:f7:4f:dc:
eb:d8:41:61:89:82:1e:f5:f4:52:22:3f:0a:a7:fb:
e2:47:df:39:0e:25:04:3a:e3:b0:33:9c:68:f8:93:
44:01:b0:cd:8f:90:85:91:40:aa:c5:a8:99:56:b3:
ff:4c:06:ce:99:02:60:56:c1:cc:0e:7e:d0:8a:cb:
29:59:64:4a:c0:85:30:01:06:3d:38:b8:d7:a7:6c:
b1:82:57:dd:1e:3a:be:cb:8f:7d:aa:d2:fb:b3:19:
dc:f7:05:7a:ab:3f:67:4f:79:28:60:c6:62:6d:a9:
08:92:4e:8e:af:21:90:b2:1e:d3:8f:1e:09:14:cc:
dc:2c:c3:39:e1:12:16:de:0b:b7:2d:d7:05:10:a7:
5e:28:40:ce:2b:2f:1e:4b:00:ab:39:9b:36:7f:2b:
8c:96:cf:17:aa:7b:b5:05:f2:c2:02:47:3d:cd:3d:
9b:9f:d0:64:00:21:2c:e2:ee:6b:f0:81:4e:28:5f:
11:83:c3:3c:25:77:7a:d4:fc:85:84:e4:f4:93:19:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:A0:B4:F0:1D:38:24:86:00:AC:EB:91:B3:23:52:48:B8:7C:8F
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/baygtPAdOCSGAKzrkbMjUki4fI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.28.0/22
176.101.72.0/21
185.50.116.0/22
185.88.232.0/22
185.110.224.0/22
185.152.108.0-185.152.110.255
193.31.96.0/22
193.32.72.0/21
193.150.16.0/22
193.187.184.0/22
194.36.200.0/22
IPv6:
2a02:2b60::/32
Signature Algorithm: sha256WithRSAEncryption
1d:59:4e:24:1d:ff:e8:5b:bb:7d:27:02:b3:e0:2f:f7:e7:98:
31:81:cb:12:38:23:55:a7:0e:57:55:97:22:b9:29:9a:d1:dd:
e5:77:28:6a:a1:2c:63:77:7c:fe:2d:74:2f:68:89:37:b3:e9:
c7:0d:57:a5:63:7a:8d:2b:e9:55:0c:97:50:85:17:b4:96:82:
8e:95:66:2d:7c:78:c7:97:0a:78:40:57:1c:fe:31:f3:14:f2:
50:c0:bb:74:f9:d4:dc:f1:ba:f5:ec:fe:d6:f7:a8:0e:1e:dc:
5b:6c:7b:ba:1f:7c:32:f6:e3:52:08:1a:9e:cc:6a:34:a4:6b:
6a:79:d3:4f:4d:6a:e1:de:4f:fc:53:4a:4c:2d:bc:51:81:b8:
91:80:1c:87:63:01:dd:5b:06:3b:e1:bc:5d:a5:7c:8b:4d:5c:
ed:dc:30:84:9d:ba:20:6a:30:7a:5c:ac:5a:a2:99:44:42:e2:
7f:a9:69:24:dd:27:9e:fe:1e:62:8a:5c:22:1f:a7:f0:c9:a3:
47:41:fa:8f:47:df:94:49:93:40:a1:f7:af:20:3b:9a:8d:45:
dc:41:6a:b8:25:08:90:28:65:a5:1a:c4:bc:2d:ab:6c:c7:62:
12:b4:ff:be:cd:7a:d5:77:b8:62:fd:63:54:47:6c:02:4d:c8:
07:b1:a5:97
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIEAX8X3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NmY3MWIyMjczYWIzNGVkNGE1NDgxMTc2ZWY3MGZhZDg2N2VmMTY2MB4XDTIyMDEw
MTExNTQyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmRhY2EwYjRmMDFk
MzgyNDg2MDBhY2ViOTFiMzIzNTI0OGI4N2M4ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJMpPQg5+ti7VmjR2YJJsvhNxN/6bpYKtRxCJ3gQUgS1qoFV
Yw2em7ap00vWMOP32mqIDEQgIAXu90/c69hBYYmCHvX0UiI/Cqf74kffOQ4lBDrj
sDOcaPiTRAGwzY+QhZFAqsWomVaz/0wGzpkCYFbBzA5+0IrLKVlkSsCFMAEGPTi4
16dssYJX3R46vsuPfarS+7MZ3PcFeqs/Z095KGDGYm2pCJJOjq8hkLIe048eCRTM
3CzDOeESFt4Lty3XBRCnXihAzisvHksAqzmbNn8rjJbPF6p7tQXywgJHPc09m5/Q
ZAAhLOLua/CBTihfEYPDPCV3etT8hYTk9JMZTKUCAwEAAaOCAlwwggJYMB0GA1Ud
DgQWBBRtrKC08B04JIYArOuRsyNSSLh8jzAfBgNVHSMEGDAWgBSW9xsic6s07UpU
gRdu9w+thn7xZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2x2Y2JJbk9yTk8xS1ZJRVhidmNQcllaLThXWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGEvMDdhZTllLTNkMDQtNDViNi05ZGIwLTQ2OTM1ZmNjODU1ZS8x
L2JheWd0UEFkT0NTR0FLenJrYk1qVWtpNGZJOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEv
MDdhZTllLTNkMDQtNDViNi05ZGIwLTQ2OTM1ZmNjODU1ZS8xL2x2Y2JJbk9yTk8x
S1ZJRVhidmNQcllaLThXWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBy
BggrBgEFBQcBBwEB/wRjMGEwUAQCAAEwSgMEAlkiHAMEA7BlSAMEArkydAMEArlY
6AMEArlu4DAMAwQCuZhsAwQAuZhuAwQCwR9gAwQDwSBIAwQCwZYQAwQCwbu4AwQC
wiTIMA0EAgACMAcDBQAqAitgMA0GCSqGSIb3DQEBCwUAA4IBAQAdWU4kHf/oW7t9
JwKz4C/355gxgcsSOCNVpw5XVZciuSma0d3ldyhqoSxjd3z+LXQvaIk3s+nHDVel
Y3qNK+lVDJdQhRe0loKOlWYtfHjHlwp4QFcc/jHzFPJQwLt0+dTc8br17P7W96gO
HtxbbHu6H3wy9uNSCBqezGo0pGtqedNPTWrh3k/8U0pMLbxRgbiRgByHYwHdWwY7
4bxdpXyLTVzt3DCEnbogajB6XKxaoplEQuJ/qWkk3See/h5iilwiH6fwyaNHQfqP
R9+USZNAofevIDuajUXcQWq4JQiQKGWlGsS8Latsx2IStP++zXrVd7hi/WNUR2wC
TcgHsaWX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:23 2024 by rpki-client on console-ams.rpki-client.org