Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/brsRHH_Zzj1ZB3g9CYVcya_eLrI.roa
File: brsRHH_Zzj1ZB3g9CYVcya_eLrI.roa (raw, json)
Hash identifier: Z5SFnUWTwdM5keEL4aojhgABJgovVpVadXZdlynBRI0=
Subject key identifier: 6E:BB:11:1C:7F:D9:CE:3D:59:07:78:3D:09:85:5C:C9:AF:DE:2E:B2
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 0182D66F39636A0C6BA1CCE9D25FA8C11A18
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/brsRHH_Zzj1ZB3g9CYVcya_eLrI.roa
Signing time: Thu 25 Aug 2022 19:16:29 +0000
ROA not before: Thu 25 Aug 2022 19:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14593
IP address blocks: 145.224.64.0/21 maxlen: 24
145.224.64.0/18 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
188.92.248.0/21 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.92.0/23 maxlen: 24
216.128.0.0/19 maxlen: 24
217.65.136.0/22 maxlen: 24
91.102.180.0/22 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d6:6f:39:63:6a:0c:6b:a1:cc:e9:d2:5f:a8:c1:1a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Aug 25 19:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ebb111c7fd9ce3d5907783d09855cc9afde2eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:47:dc:b1:89:47:47:3d:f5:dc:83:c0:ab:
b3:f9:c5:4c:de:fa:ce:5b:2c:4f:72:d4:29:63:77:
97:1c:3b:dc:aa:a1:b7:4a:34:00:05:63:53:10:e6:
0d:74:f4:9f:1c:4d:2b:e6:c5:d1:8b:c9:85:7a:eb:
57:c0:76:b7:6f:77:f8:31:00:b5:40:d6:47:ca:00:
50:50:0c:ea:2f:f2:ad:c7:e3:62:41:4f:98:99:17:
93:86:84:60:f1:db:2b:9b:76:9f:cf:e4:d6:0e:66:
97:2e:88:ff:61:7d:42:d7:fa:e1:4b:15:17:22:d3:
3c:76:dc:0c:55:30:4e:f9:62:cb:b2:25:03:2c:c6:
32:eb:0b:b2:76:88:5c:98:3f:47:27:40:c0:a9:7d:
56:93:93:ec:7c:60:7c:ba:49:26:fe:ab:ce:55:b4:
04:8e:f4:9d:94:57:da:7f:cd:b9:eb:d3:03:69:5d:
2b:0e:3d:87:9c:0c:b4:8a:71:e5:6f:01:84:8f:f2:
bc:52:11:bf:0b:04:27:be:fe:5d:07:97:01:92:64:
22:19:5a:85:1d:3b:86:e6:6a:88:a0:2c:3f:1c:60:
5d:ba:53:8d:2b:42:cb:59:8d:b2:20:21:9d:17:71:
46:f1:f7:30:d2:40:b5:66:dc:65:cb:59:e4:b0:97:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BB:11:1C:7F:D9:CE:3D:59:07:78:3D:09:85:5C:C9:AF:DE:2E:B2
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/brsRHH_Zzj1ZB3g9CYVcya_eLrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.180.0/22
145.224.64.0/18
188.92.248.0/21
216.128.0.0/19
217.65.136.0/22
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
99:42:b4:4f:fd:aa:31:98:b4:f3:f3:04:7c:e1:ce:13:19:e0:
2b:fe:79:80:57:81:b6:06:06:d6:b3:be:ea:56:8d:0c:80:80:
2a:61:c5:df:21:b5:56:ca:0a:27:bd:aa:6a:4d:11:b7:df:02:
1d:e7:ca:09:70:76:2f:ad:32:e5:c3:68:3e:fe:1b:f1:8d:1d:
f2:10:a6:67:d3:f1:f5:42:7a:fb:f0:e8:06:73:67:04:47:79:
a2:72:8c:98:f9:a0:af:23:f2:49:9b:f2:c4:6c:c8:52:fc:70:
2b:bc:2b:b9:9c:ba:3d:96:db:9a:43:de:58:08:1e:e5:97:e7:
99:33:18:09:69:8e:75:89:2a:5c:9b:39:b8:24:88:94:eb:cc:
25:aa:ff:22:05:39:8c:6b:56:73:5d:83:b7:23:a3:06:c8:75:
cf:25:75:86:2b:78:28:37:0e:87:a2:9c:13:30:9e:61:3d:9b:
bf:60:fc:c8:ab:9d:a9:b7:00:2e:32:09:59:4d:7c:16:5c:a5:
b8:ad:5d:0d:62:87:37:f0:13:db:44:37:f1:c0:02:7c:ac:ea:
7d:8e:e6:79:69:c6:3e:a4:73:04:b5:7c:f1:87:18:51:34:88:
31:2d:4a:10:d5:e2:ff:e9:7c:7b:d3:9b:1d:eb:58:57:2e:69:
60:35:b1:f4
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYLWbzljagxroczp0l+owRoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTliMzI3ZGQ2Y2RhMWFkMzdiYzFjMjI0YTQ1NGIwMmRl
YTJhZmMwHhcNMjIwODI1MTkxNjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWJiMTExYzdmZDljZTNkNTkwNzc4M2QwOTg1NWNjOWFmZGUyZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox9H3LGJR0c99dyDwKuz+cVM3vrO
WyxPctQpY3eXHDvcqqG3SjQABWNTEOYNdPSfHE0r5sXRi8mFeutXwHa3b3f4MQC1
QNZHygBQUAzqL/Ktx+NiQU+YmReThoRg8dsrm3afz+TWDmaXLoj/YX1C1/rhSxUX
ItM8dtwMVTBO+WLLsiUDLMYy6wuydohcmD9HJ0DAqX1Wk5PsfGB8ukkm/qvOVbQE
jvSdlFfaf82569MDaV0rDj2HnAy0inHlbwGEj/K8UhG/CwQnvv5dB5cBkmQiGVqF
HTuG5mqIoCw/HGBdulONK0LLWY2yICGdF3FG8fcw0kC1Ztxly1nksJcNeQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFG67ERx/2c49WQd4PQmFXMmv3i6yMB8GA1UdIwQY
MBaAFFeZsyfdbNoa03vBwiSkVLAt6ir8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2Et
ZWExNTBlNzYzOGNlLzEvYnJzUkhIX1p6ajFaQjNnOUNZVmN5YV9lTHJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2EtZWExNTBlNzYzOGNl
LzEvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCW2a0AwQG
keBAAwQDvFz4AwQF2IAAAwQC2UGIMA0EAgACMAcDBQMqDTNAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZQrRP/aoxmLTz8wR84c4TGeAr/nmAV4G2BgbWs77qVo0MgIAqYcXf
IbVWygonvapqTRG33wId58oJcHYvrTLlw2g+/hvxjR3yEKZn0/H1Qnr78OgGc2cE
R3micoyY+aCvI/JJm/LEbMhS/HArvCu5nLo9ltuaQ95YCB7ll+eZMxgJaY51iSpc
mzm4JIiU68wlqv8iBTmMa1ZzXYO3I6MGyHXPJXWGK3goNw6HopwTMJ5hPZu/YPzI
q52ptwAuMglZTXwWXKW4rV0NYoc38BPbRDfxwAJ8rOp9juZ5acY+pHMEtXzxhxhR
NIgxLUoQ1eL/6Xx705sd61hXLmlgNbH0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:18 2024 by rpki-client on console-ams.rpki-client.org