Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/BaYllBSx7SlvzKtRIZYOPmytLpM.roa
File: BaYllBSx7SlvzKtRIZYOPmytLpM.roa (raw, json)
Hash identifier: ZK+yc22BPdu4UwYgP81wIkyKo3UZrHmRM/39VIjWMYY=
Subject key identifier: 05:A6:25:94:14:B1:ED:29:6F:CC:AB:51:21:96:0E:3E:6C:AD:2E:93
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 0182F8DEBA647D38570A477E23A5A2F71CC6
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/BaYllBSx7SlvzKtRIZYOPmytLpM.roa
Signing time: Thu 01 Sep 2022 11:45:22 +0000
ROA not before: Thu 01 Sep 2022 11:45:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12743
IP address blocks: 194.9.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:de:ba:64:7d:38:57:0a:47:7e:23:a5:a2:f7:1c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Sep 1 11:45:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05a6259414b1ed296fccab5121960e3e6cad2e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:16:e5:9c:79:f9:d5:a6:7c:df:41:39:c3:
80:86:b8:24:fd:80:00:eb:50:f5:17:c6:ea:10:63:
db:07:82:be:e6:16:1a:0e:10:86:86:0a:34:98:04:
06:c6:34:d0:d6:20:7a:e1:7b:fe:1f:0b:e3:0e:5c:
51:5e:32:ac:33:95:8e:cf:6c:ae:d4:32:ce:b4:18:
e7:4b:0b:67:47:71:00:ab:c3:6c:ed:58:61:67:ce:
c3:5f:ad:7d:0d:3a:73:2f:af:9d:b8:a0:d7:79:70:
91:48:28:6f:16:cc:aa:fb:38:54:db:18:3a:63:a5:
ed:03:69:1e:ca:d0:a4:8d:bc:52:c4:4b:5e:3a:45:
29:d2:d8:29:bd:da:9e:d2:d0:ed:e8:b0:95:ef:ed:
6e:4c:13:1f:4a:63:8e:cc:a8:a4:7f:b6:9d:56:72:
8e:1d:10:37:3c:e3:1b:ae:0b:b1:9c:34:21:93:3b:
c3:59:7f:14:fd:0a:a0:0f:a4:b1:99:50:bf:e2:92:
50:44:0d:4b:ce:ab:3a:9f:81:83:c7:c7:6f:1b:04:
70:f1:2f:25:53:74:d5:21:3a:8c:5e:2f:77:cc:4b:
5e:46:f0:e4:93:3c:33:9a:e6:d4:da:c3:2c:dd:6f:
0b:01:49:61:ef:97:35:05:fa:f1:16:21:e3:a0:cb:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:25:94:14:B1:ED:29:6F:CC:AB:51:21:96:0E:3E:6C:AD:2E:93
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/BaYllBSx7SlvzKtRIZYOPmytLpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.223.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a2:cd:3c:13:48:0f:8f:f9:66:c5:ec:fb:a9:91:fe:d1:8d:
f6:0b:87:99:a0:4f:aa:a7:85:bf:9d:46:f8:f0:de:82:03:c6:
b8:b0:b5:ce:eb:36:01:6d:cc:ae:3b:80:82:d5:98:7b:6b:7d:
9f:f7:5f:01:cd:fd:6e:42:9b:01:21:f2:1a:6c:39:23:f9:1c:
60:ae:c8:ec:8a:38:71:79:eb:ad:13:6d:48:f3:46:44:88:fa:
3f:ae:9f:fc:3e:02:37:25:ad:56:34:50:2e:b9:fa:6d:92:ab:
25:9e:68:12:0d:77:8d:d0:1e:c9:c5:6e:02:8e:0d:e2:80:c4:
9f:40:36:21:4d:d8:ff:89:37:13:74:17:e4:75:84:f1:56:e3:
96:63:05:15:ed:c4:62:6a:cd:40:e3:9d:c8:70:52:ab:30:6a:
fc:0d:07:3a:07:bc:74:af:c1:6e:79:c5:f3:34:40:3d:1a:d7:
d2:c2:fc:6b:b8:74:ab:e4:a8:ae:c8:bb:58:ed:d8:98:4c:bf:
f0:92:cd:f1:f0:42:4c:cd:8b:f5:d9:9a:c2:78:c2:52:dd:43:
bc:76:a9:e8:c6:af:a5:b2:4b:a5:6d:5d:a7:a6:88:3b:3f:13:
9b:2b:28:95:96:fc:ca:14:ed:d9:7e:d8:e9:45:9b:16:b2:79:
40:36:90:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL43rpkfThXCkd+I6Wi9xzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw
Yzc3MTQwHhcNMjIwOTAxMTE0NTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWE2MjU5NDE0YjFlZDI5NmZjY2FiNTEyMTk2MGUzZTZjYWQyZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JEW5Zx5+dWmfN9BOcOAhrgk/YAA
61D1F8bqEGPbB4K+5hYaDhCGhgo0mAQGxjTQ1iB64Xv+HwvjDlxRXjKsM5WOz2yu
1DLOtBjnSwtnR3EAq8Ns7VhhZ87DX619DTpzL6+duKDXeXCRSChvFsyq+zhU2xg6
Y6XtA2keytCkjbxSxEteOkUp0tgpvdqe0tDt6LCV7+1uTBMfSmOOzKikf7adVnKO
HRA3POMbrguxnDQhkzvDWX8U/QqgD6SxmVC/4pJQRA1Lzqs6n4GDx8dvGwRw8S8l
U3TVITqMXi93zEteRvDkkzwzmubU2sMs3W8LAUlh75c1BfrxFiHjoMvyVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAWmJZQUse0pb8yrUSGWDj5srS6TMB8GA1UdIwQY
MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt
Y2I4YjNhMDk0MjA5LzEvQmFZbGxCU3g3U2x2ekt0UklaWU9QbXl0THBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5
LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgnfMA0G
CSqGSIb3DQEBCwUAA4IBAQADos08E0gPj/lmxez7qZH+0Y32C4eZoE+qp4W/nUb4
8N6CA8a4sLXO6zYBbcyuO4CC1Zh7a32f918Bzf1uQpsBIfIabDkj+Rxgrsjsijhx
eeutE21I80ZEiPo/rp/8PgI3Ja1WNFAuufptkqslnmgSDXeN0B7JxW4Cjg3igMSf
QDYhTdj/iTcTdBfkdYTxVuOWYwUV7cRias1A453IcFKrMGr8DQc6B7x0r8FuecXz
NEA9GtfSwvxruHSr5KiuyLtY7diYTL/wks3x8EJMzYv12ZrCeMJS3UO8dqnoxq+l
skulbV2npog7PxObKyiVlvzKFO3ZftjpRZsWsnlANpCn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:23 2024 by rpki-client on console-fra.rpki-client.org