Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/BJ8QN7JjjBtB52uoJxZXU8I3dC4.roa
File: BJ8QN7JjjBtB52uoJxZXU8I3dC4.roa (raw, json)
Hash identifier: KckFnaFeDd6R/UJ+1LfuN+EbSgRLYSLqkklanpUoNUA=
Subject key identifier: 04:9F:10:37:B2:63:8C:1B:41:E7:6B:A8:27:16:57:53:C2:37:74:2E
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 0D5C3EE0
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/BJ8QN7JjjBtB52uoJxZXU8I3dC4.roa
Signing time: Sat 01 Jan 2022 02:54:02 +0000
ROA not before: Sat 01 Jan 2022 02:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19994
IP address blocks: 185.194.86.0/24 maxlen: 24
185.194.87.0/24 maxlen: 24
91.230.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224149216 (0xd5c3ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jan 1 02:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=049f1037b2638c1b41e76ba827165753c237742e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0d:d8:be:38:39:20:6e:13:4d:e1:bf:00:70:
fb:a1:3d:8e:50:f6:36:ae:0e:ca:15:dc:28:89:fc:
61:6f:09:9d:fd:a2:4c:69:03:41:30:b3:2f:b2:a3:
0a:a2:c3:02:6c:68:52:d0:44:00:77:45:20:2b:f0:
b0:01:97:40:5a:a2:85:bf:4b:e2:4a:ae:e9:7e:cd:
0f:ec:d8:29:83:fc:2a:b9:53:fc:98:a7:86:4e:4a:
4b:b0:75:82:4f:e9:b9:ed:e0:ad:6c:95:a7:b9:12:
73:3e:f8:0a:75:8d:bf:63:17:28:4a:fc:10:e9:46:
2e:c3:a0:f7:23:08:02:bb:6b:0c:6e:bf:5d:22:48:
f8:bf:fe:c0:2b:ee:62:c3:82:19:b5:fd:89:c9:83:
c9:99:70:61:60:8a:2d:7a:25:33:d7:24:82:63:cf:
88:46:0b:8a:09:6d:28:3d:fd:b7:0f:2d:f9:c8:12:
e2:26:45:24:1a:17:c0:f4:34:c9:9a:3a:2c:ba:22:
15:8d:7e:2c:81:3b:64:2f:ff:ac:8f:62:35:c4:7b:
f7:2e:28:18:9f:b9:e2:3f:b7:54:b5:e7:eb:da:a2:
41:c8:1a:e4:55:00:55:24:f4:94:a6:58:eb:02:58:
81:7c:1f:20:53:48:9f:35:5a:69:37:b0:0c:a3:71:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9F:10:37:B2:63:8C:1B:41:E7:6B:A8:27:16:57:53:C2:37:74:2E
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/BJ8QN7JjjBtB52uoJxZXU8I3dC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.179.0/24
185.194.86.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:80:94:77:ae:34:e3:8a:6a:c3:db:23:b1:59:36:4a:1d:46:
ae:f7:5c:1f:03:a7:7c:b3:61:31:a7:4c:c6:99:0b:60:f4:51:
3f:34:57:d7:51:0d:46:37:0b:34:af:2a:5a:54:cd:97:0e:12:
a9:98:0d:d3:f2:cb:cb:12:fa:4a:85:0b:c8:e4:db:2f:c8:8d:
2e:53:02:df:a9:3a:f1:c0:bb:ae:31:99:c6:83:11:7f:ad:e2:
41:4b:04:04:fa:a3:82:aa:0a:e7:53:94:39:72:da:15:d5:26:
d7:9c:17:cd:6b:c0:2c:1c:f8:48:0d:02:b9:5a:19:35:d6:a1:
8a:3c:56:60:48:3a:45:c3:aa:40:d7:85:a6:f2:df:51:f1:54:
4b:eb:3e:d4:04:c2:e8:d7:ef:01:00:a9:05:43:fc:5c:e1:7b:
03:18:61:11:36:63:f1:0c:3c:1d:7c:5d:0a:53:38:13:39:34:
d1:0b:f2:08:64:9e:57:f0:b5:e6:7e:6c:a2:a0:ea:6d:ff:3c:
f7:b7:5c:8b:0f:d6:aa:42:be:9e:c3:21:ff:75:c3:bc:e6:0c:
1f:7e:e9:7e:c5:f5:14:e4:61:56:13:e6:e9:97:0e:f3:97:13:
28:be:3e:82:3b:ce:93:9f:bc:7f:f4:99:76:c8:6d:b7:41:36:
aa:b9:18:55
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDVw+4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OWEyYzJlY2Y1OGM0NGIzNWEwZGEyOTU3ZmY0ZGNhMmU2MGI2ODZhMB4XDTIyMDEw
MTAyNTQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQ5ZjEwMzdiMjYz
OGMxYjQxZTc2YmE4MjcxNjU3NTNjMjM3NzQyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPUN2L44OSBuE03hvwBw+6E9jlD2Nq4OyhXcKIn8YW8Jnf2i
TGkDQTCzL7KjCqLDAmxoUtBEAHdFICvwsAGXQFqihb9L4kqu6X7ND+zYKYP8KrlT
/Jinhk5KS7B1gk/pue3grWyVp7kScz74CnWNv2MXKEr8EOlGLsOg9yMIArtrDG6/
XSJI+L/+wCvuYsOCGbX9icmDyZlwYWCKLXolM9ckgmPPiEYLigltKD39tw8t+cgS
4iZFJBoXwPQ0yZo6LLoiFY1+LIE7ZC//rI9iNcR79y4oGJ+54j+3VLXn69qiQcga
5FUAVST0lKZY6wJYgXwfIFNInzVaaTewDKNxVv8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQEnxA3smOMG0Hna6gnFldTwjd0LjAfBgNVHSMEGDAWgBSZosLs9YxEs1oN
opV/9Nyi5gtoajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21hTEM3UFdNUkxOYURhS1ZmX1Rjb3VZTGFHby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvYmE5Njc0LWU1NzEtNGUzNS1hYjIwLWU1ZDUwN2E4MjZiZi8x
L0JKOFFON0pqakJ0QjUydW9KeFpYVThJM2RDNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
YmE5Njc0LWU1NzEtNGUzNS1hYjIwLWU1ZDUwN2E4MjZiZi8xL21hTEM3UFdNUkxO
YURhS1ZmX1Rjb3VZTGFHby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvmswMEAbnCVjANBgkqhkiG9w0B
AQsFAAOCAQEADoCUd64044pqw9sjsVk2Sh1GrvdcHwOnfLNhMadMxpkLYPRRPzRX
11ENRjcLNK8qWlTNlw4SqZgN0/LLyxL6SoULyOTbL8iNLlMC36k68cC7rjGZxoMR
f63iQUsEBPqjgqoK51OUOXLaFdUm15wXzWvALBz4SA0CuVoZNdahijxWYEg6RcOq
QNeFpvLfUfFUS+s+1ATC6NfvAQCpBUP8XOF7AxhhETZj8Qw8HXxdClM4Ezk00Qvy
CGSeV/C15n5soqDqbf8897dciw/WqkK+nsMh/3XDvOYMH37pfsX1FORhVhPm6ZcO
85cTKL4+gjvOk5+8f/SZdshtt0E2qrkYVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:04 2024 by rpki-client on console-ams.rpki-client.org