Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/_8O-2X_banq1S5eFkJNqBxYgwi4.roa
File: _8O-2X_banq1S5eFkJNqBxYgwi4.roa (raw, json)
Hash identifier: V2uvaJE1gB/PxrRLSd4i75dZFwi1ZllkvxHzEpT42QA=
Subject key identifier: FF:C3:BE:D9:7F:DB:6A:7A:B5:4B:97:85:90:93:6A:07:16:20:C2:2E
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 092963E5
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/_8O-2X_banq1S5eFkJNqBxYgwi4.roa
Signing time: Sat 01 Jan 2022 03:56:41 +0000
ROA not before: Sat 01 Jan 2022 03:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203396
IP address blocks: 145.12.0.0/16 maxlen: 24
145.69.0.0/16 maxlen: 24
145.69.47.240/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153707493 (0x92963e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 1 03:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffc3bed97fdb6a7ab54b978590936a071620c22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:87:7a:5c:b0:7b:c6:43:18:41:c3:2f:26:45:
d6:f3:4e:61:9d:fb:26:9e:04:3f:a1:1c:6d:f6:16:
99:7d:7d:1c:a2:a4:1c:94:d0:4f:85:a5:ef:a6:c3:
52:c4:f9:38:a2:c7:dd:34:b8:05:4a:e9:01:a4:26:
23:e3:3e:96:a1:71:43:4b:89:71:1e:4f:37:4d:ea:
b5:69:ad:e2:44:69:c8:9b:ab:ea:aa:ef:d7:e1:2b:
cf:a4:a4:b6:4d:8d:52:95:91:ba:c4:c0:f0:c0:88:
5f:2b:94:ab:b3:86:b8:81:a6:fb:57:10:f0:90:2c:
96:6e:8b:96:25:b6:12:f6:18:01:80:f1:95:9e:ce:
b7:4d:7b:3a:1f:8a:b3:16:b4:1a:97:9a:58:d1:5d:
85:8c:59:47:d5:8c:a4:dd:b6:a9:34:ec:d5:37:24:
f0:13:c0:83:84:e9:79:64:24:0b:75:75:47:6a:5a:
e5:fd:39:73:77:28:e9:b3:41:09:1e:29:fb:55:d4:
da:0e:cc:cd:d1:81:e6:06:f4:49:ee:01:18:4b:ea:
82:5b:8e:35:6e:d5:7d:0e:23:44:30:32:99:03:0c:
2c:c5:1e:cb:83:ae:de:3f:21:39:24:8e:6b:47:d2:
7d:6e:d6:05:23:39:f1:ec:3d:b1:d8:23:6c:67:43:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:BE:D9:7F:DB:6A:7A:B5:4B:97:85:90:93:6A:07:16:20:C2:2E
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/_8O-2X_banq1S5eFkJNqBxYgwi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.12.0.0/16
145.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:af:c1:60:6e:d3:a6:c3:f8:53:3b:22:45:48:fd:0a:01:38:
7e:c5:38:c6:d9:99:bb:87:09:5d:00:c8:ea:a5:a7:98:ed:3e:
13:d4:ed:36:66:fd:4a:c7:bf:9c:45:15:ed:80:56:22:ba:af:
ed:4a:53:bc:be:28:07:66:c4:2f:df:09:b9:c6:9b:02:0e:10:
d3:b1:88:ee:e0:84:e9:54:9f:39:eb:07:7a:ce:2e:cb:c7:82:
3c:5a:28:6a:59:02:9e:49:af:1b:b2:16:ba:e5:e7:03:2b:97:
d7:e0:77:87:45:46:1a:ed:91:45:4a:95:1b:3c:10:2b:c2:b9:
f9:6b:4f:80:f5:53:68:4c:c9:2e:4e:c4:c9:f3:a3:d2:f8:8e:
49:e7:99:d9:15:57:d5:c7:53:be:89:c6:6c:a1:31:3c:aa:8b:
45:e8:8a:46:82:b9:20:4a:76:b0:3d:8d:e6:52:14:d2:a8:cf:
0a:32:bf:36:6c:42:1d:da:fc:d5:a4:1a:bf:d9:83:44:d8:22:
d3:7c:7b:74:a6:c1:e4:95:e7:13:a2:8c:c0:fa:01:c7:dd:b9:
9d:b4:51:f1:f0:f8:18:0a:c8:3a:8b:e1:84:1a:42:c6:ff:0e:
7a:35:2d:e3:3f:ca:72:60:a7:9b:b0:72:ca:e2:82:66:3a:e8:
6b:76:c6:60
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIECSlj5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDA2OWUxOWUxMmMxMDQwMDRlOGI0Yjc1ZjhhNzc4OWI3ZTExMzk2MB4XDTIyMDEw
MTAzNTY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZjM2JlZDk3ZmRi
NmE3YWI1NGI5Nzg1OTA5MzZhMDcxNjIwYzIyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOuHelywe8ZDGEHDLyZF1vNOYZ37Jp4EP6EcbfYWmX19HKKk
HJTQT4Wl76bDUsT5OKLH3TS4BUrpAaQmI+M+lqFxQ0uJcR5PN03qtWmt4kRpyJur
6qrv1+Erz6Sktk2NUpWRusTA8MCIXyuUq7OGuIGm+1cQ8JAslm6LliW2EvYYAYDx
lZ7Ot017Oh+Ksxa0GpeaWNFdhYxZR9WMpN22qTTs1Tck8BPAg4TpeWQkC3V1R2pa
5f05c3co6bNBCR4p+1XU2g7MzdGB5gb0Se4BGEvqgluONW7VfQ4jRDAymQMMLMUe
y4Ou3j8hOSSOa0fSfW7WBSM58ew9sdgjbGdDFr0CAwEAAaOCAg0wggIJMB0GA1Ud
DgQWBBT/w77Zf9tqerVLl4WQk2oHFiDCLjAfBgNVHSMEGDAWgBRtBp4Z4SwQQATo
tLdfineJt+ETljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JRYWVHZUVzRUVBRTZMUzNYNHAzaWJmaEU1WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvY2Y2NGY2LTA3ODktNDNlMy1iZDZiLTdiZmYyOTZjNmIwMi8x
L184Ty0yWF9iYW5xMVM1ZUZrSk5xQnhZZ3dpNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
Y2Y2NGY2LTA3ODktNDNlMy1iZDZiLTdiZmYyOTZjNmIwMi8xL2JRYWVHZUVzRUVB
RTZMUzNYNHAzaWJmaEU1WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAj
BggrBgEFBQcBBwEB/wQUMBIwEAQCAAEwCgMDAJEMAwMAkUUwDQYJKoZIhvcNAQEL
BQADggEBAAqvwWBu06bD+FM7IkVI/QoBOH7FOMbZmbuHCV0AyOqlp5jtPhPU7TZm
/UrHv5xFFe2AViK6r+1KU7y+KAdmxC/fCbnGmwIOENOxiO7ghOlUnznrB3rOLsvH
gjxaKGpZAp5JrxuyFrrl5wMrl9fgd4dFRhrtkUVKlRs8ECvCuflrT4D1U2hMyS5O
xMnzo9L4jknnmdkVV9XHU76JxmyhMTyqi0XoikaCuSBKdrA9jeZSFNKozwoyvzZs
Qh3a/NWkGr/Zg0TYItN8e3SmweSV5xOijMD6AcfduZ20UfHw+BgKyDqL4YQaQsb/
Dno1LeM/ynJgp5uwcsrigmY66Gt2xmA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:02 2024 by rpki-client on console-ams.rpki-client.org