Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/BqAArtRYJ7XF7PiM_eYUMJUIfI4.roa
File: BqAArtRYJ7XF7PiM_eYUMJUIfI4.roa (raw, json)
Hash identifier: r3WBUCXkfd+tadK95L7xWFQnMmgirdajhJsiZewXUOI=
Subject key identifier: 06:A0:00:AE:D4:58:27:B5:C5:EC:F8:8C:FD:E6:14:30:95:08:7C:8E
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 01856FF05BB2EA51A55BD3149DBF971B8736
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/BqAArtRYJ7XF7PiM_eYUMJUIfI4.roa
Signing time: Mon 02 Jan 2023 00:45:01 +0000
ROA not before: Mon 02 Jan 2023 00:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8426
IP address blocks: 80.172.0.0/16 maxlen: 18
80.172.250.0/24 maxlen: 24
80.172.251.0/24 maxlen: 24
188.93.224.0/21 maxlen: 21
77.91.200.0/21 maxlen: 21
195.22.0.0/19 maxlen: 19
195.72.136.0/22 maxlen: 22
194.62.240.0/22 maxlen: 22
2001:4cc0::/32 maxlen: 48
2a03:73c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:5b:b2:ea:51:a5:5b:d3:14:9d:bf:97:1b:87:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jan 2 00:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06a000aed45827b5c5ecf88cfde6143095087c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:c3:c7:ea:eb:ca:54:2a:cf:9c:fb:21:94:
1f:19:f1:75:d7:4e:38:2f:91:82:28:7b:78:5a:b8:
4a:20:12:6d:ee:25:05:44:5d:8d:eb:13:23:1a:f0:
a5:63:b1:27:ed:47:42:51:27:65:f2:c6:fe:35:8e:
f9:f7:1c:4e:1e:d8:8f:68:cf:aa:d3:65:fd:e8:2a:
aa:38:f3:4d:99:93:50:52:a1:6f:bd:f0:97:af:f7:
ea:9a:55:07:b8:7c:58:78:5c:a6:a1:77:6f:c8:6f:
23:d9:ca:0c:c4:b3:c9:4e:1e:7f:27:75:10:d9:9c:
96:d0:88:18:c3:74:f8:aa:4e:c5:56:e2:f2:c9:cd:
70:61:c6:d4:52:a7:1c:8c:33:a8:05:1c:d1:be:8b:
95:e8:96:5e:1f:2c:90:15:2b:73:4e:08:5a:67:98:
31:ce:80:c4:99:bb:0d:60:67:3c:57:41:a5:d2:2b:
20:6a:92:d4:28:ed:0c:0f:c2:c0:70:44:cf:7b:ef:
2a:68:f2:fb:77:4f:49:d9:79:a4:60:33:7a:2a:e3:
43:07:8b:14:0b:44:b4:b1:cf:8a:09:37:12:b9:95:
0b:02:63:8c:53:68:66:19:bc:0b:0d:fb:93:ff:6f:
7b:4c:b2:25:1f:9d:53:3a:82:cd:93:49:33:ee:0f:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:00:AE:D4:58:27:B5:C5:EC:F8:8C:FD:E6:14:30:95:08:7C:8E
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/BqAArtRYJ7XF7PiM_eYUMJUIfI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.200.0/21
80.172.0.0/16
188.93.224.0/21
194.62.240.0/22
195.22.0.0/19
195.72.136.0/22
IPv6:
2001:4cc0::/32
2a03:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e2:e0:42:c5:98:80:93:85:b8:26:fb:8a:4f:fe:74:18:41:
5b:c8:af:c2:fd:62:1d:06:9e:70:b1:db:e3:38:be:5a:d2:c2:
d0:70:91:fb:ae:c1:c3:32:3e:4e:75:40:67:0a:13:17:ba:fa:
8a:f0:a8:98:c0:48:d1:c2:4a:d0:c8:ef:d0:af:4a:11:26:9a:
39:45:d6:14:77:2e:c7:9b:fa:25:ed:c8:24:d7:5f:52:07:01:
71:a7:42:6c:65:0c:3a:e1:0a:dd:57:45:a0:d6:a4:db:bb:e6:
95:8a:64:2a:11:5d:2e:93:b7:78:32:47:c4:20:bb:c2:a5:fa:
75:d4:a8:b5:17:c9:57:01:bb:a4:94:80:a8:15:0a:75:69:92:
7f:c1:9d:bb:01:cc:1b:dd:d4:e2:00:1c:81:a0:d0:b5:55:84:
a0:ec:54:18:16:f7:24:9d:65:da:0c:90:e3:40:3a:13:b6:b1:
04:fb:7d:5d:cf:af:2b:d7:cc:ad:40:57:c7:2f:14:32:d8:b9:
ab:c4:3f:e7:d1:9b:a9:a8:0e:62:e3:d4:d2:7e:18:be:bd:ce:
d0:db:73:26:de:d9:bc:48:3c:42:68:fc:43:28:f5:78:d2:1f:
85:1f:45:40:6d:d3:15:bc:a3:d5:d6:fe:9a:2c:1f:fb:df:c4:
b0:f1:9e:7d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYVv8Fuy6lGlW9MUnb+XG4c2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjMwMTAyMDA0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmEwMDBhZWQ0NTgyN2I1YzVlY2Y4OGNmZGU2MTQzMDk1MDg3YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqXDx+rrylQqz5z7IZQfGfF11044
L5GCKHt4WrhKIBJt7iUFRF2N6xMjGvClY7En7UdCUSdl8sb+NY759xxOHtiPaM+q
02X96CqqOPNNmZNQUqFvvfCXr/fqmlUHuHxYeFymoXdvyG8j2coMxLPJTh5/J3UQ
2ZyW0IgYw3T4qk7FVuLyyc1wYcbUUqccjDOoBRzRvouV6JZeHyyQFStzTghaZ5gx
zoDEmbsNYGc8V0Gl0isgapLUKO0MD8LAcETPe+8qaPL7d09J2XmkYDN6KuNDB4sU
C0S0sc+KCTcSuZULAmOMU2hmGbwLDfuT/297TLIlH51TOoLNk0kz7g96xQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFAagAK7UWCe1xez4jP3mFDCVCHyOMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvQnFBQXJ0UllKN1hGN1BpTV9lWVVNSlVJZkk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzApBAIAATAjAwQDTVvIAwMA
UKwDBAO8XeADBALCPvADBAXDFgADBALDSIgwFgQCAAIwEAMFACABTMADBwAqA3PA
AAAwDQYJKoZIhvcNAQELBQADggEBAD3i4ELFmICThbgm+4pP/nQYQVvIr8L9Yh0G
nnCx2+M4vlrSwtBwkfuuwcMyPk51QGcKExe6+orwqJjASNHCStDI79CvShEmmjlF
1hR3Lseb+iXtyCTXX1IHAXGnQmxlDDrhCt1XRaDWpNu75pWKZCoRXS6Tt3gyR8Qg
u8Kl+nXUqLUXyVcBu6SUgKgVCnVpkn/BnbsBzBvd1OIAHIGg0LVVhKDsVBgW9ySd
ZdoMkONAOhO2sQT7fV3PryvXzK1AV8cvFDLYuavEP+fRm6moDmLj1NJ+GL69ztDb
cybe2bxIPEJo/EMo9XjSH4UfRUBt0xW8o9XW/posH/vfxLDxnn0=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:14 2025 by rpki-client