Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/BxoW3ZmJx4k7Ho9iFSvHuMCywV8.roa
File: BxoW3ZmJx4k7Ho9iFSvHuMCywV8.roa (raw, json)
Hash identifier: wzahaXzj5kRUT1XJ9e946Z/01DKLli2DnQGGWBXakF4=
Subject key identifier: 07:1A:16:DD:99:89:C7:89:3B:1E:8F:62:15:2B:C7:B8:C0:B2:C1:5F
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 055511B0
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/BxoW3ZmJx4k7Ho9iFSvHuMCywV8.roa
Signing time: Mon 23 May 2022 09:31:29 +0000
ROA not before: Mon 23 May 2022 09:31:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 85.239.148.0/24 maxlen: 24
85.239.151.0/24 maxlen: 24
85.239.149.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
185.95.156.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89461168 (0x55511b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 23 09:31:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=071a16dd9989c7893b1e8f62152bc7b8c0b2c15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:f7:ba:4a:dc:17:65:e0:6a:f1:4a:74:0a:
d2:6b:ce:19:96:7b:c7:e7:30:8e:4f:42:5f:37:1c:
a5:71:96:ef:ae:8b:b6:ed:e2:0c:c4:e3:a8:a5:49:
51:95:b2:4f:fd:e8:76:e9:19:21:08:e7:37:0a:c0:
e9:59:1b:5c:38:32:0e:b8:d8:28:39:94:a2:25:b7:
b6:1c:d9:70:03:9c:eb:d2:2f:ac:e0:68:29:51:10:
15:e7:0d:c1:0c:c3:35:e2:98:9e:db:b1:4d:c8:9e:
00:57:3b:4d:f9:5b:06:9f:38:a0:b2:95:ed:73:35:
ff:8d:bd:d5:46:3f:b0:ec:ca:26:eb:f7:0b:14:4a:
fc:18:ed:05:53:a4:5c:f1:da:75:dc:ae:86:35:56:
0c:70:76:b9:fd:b5:90:bb:f8:cf:4f:20:ad:04:ea:
8c:82:b6:e5:9e:86:cf:a4:79:81:b6:7f:b5:ad:05:
2a:aa:1a:05:84:ba:99:6c:c4:70:00:bf:ef:96:71:
b7:c1:89:3a:2e:d7:72:30:a9:4c:e1:75:d6:fe:f6:
ed:7a:32:86:64:90:a8:23:ee:bf:ba:3d:74:51:47:
d3:ca:4b:33:73:a1:f9:3c:cf:df:1b:e7:b2:1c:62:
c8:69:c1:2c:a6:19:3f:3a:ee:f3:7e:61:38:d0:71:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:16:DD:99:89:C7:89:3B:1E:8F:62:15:2B:C7:B8:C0:B2:C1:5F
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/BxoW3ZmJx4k7Ho9iFSvHuMCywV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/23
85.239.151.0/24
185.95.156.0/23
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0a:b5:23:48:41:6c:63:a9:1e:68:33:34:2d:ab:8a:06:8c:
ac:a7:01:e9:79:3c:70:67:f2:d7:92:37:85:f9:0d:41:8c:9e:
6b:d3:1a:65:d0:ae:4f:eb:ed:15:b9:f4:75:43:b6:ca:08:54:
94:70:db:37:9d:d9:55:d6:61:7d:f3:e9:33:90:a7:a4:c5:69:
9f:15:7c:60:f0:54:dc:7c:07:b3:c4:04:63:84:3f:68:b5:3f:
5b:40:54:c1:13:ba:5f:78:1e:aa:d6:58:18:df:f1:dc:e9:91:
fe:03:6a:a6:68:f9:4e:3e:b8:c0:ed:dc:66:bf:b4:11:42:39:
17:ef:6a:47:05:c0:8a:70:7c:3a:70:ed:ad:73:1e:18:46:97:
0f:53:04:ac:ff:c3:db:5f:ef:bb:9c:89:d4:8e:6d:a4:a1:15:
7e:8e:37:19:71:24:cc:f7:c5:6d:8a:41:1d:e8:0c:0a:35:f7:
00:5a:08:d2:06:86:4a:c4:e8:f1:fb:f6:56:cf:a2:1b:95:45:
1b:99:3f:63:f5:67:5a:c3:39:5b:e5:7a:cc:32:d1:3a:76:a4:
49:1c:3f:04:d6:1d:26:0d:ca:6d:7a:97:86:e1:81:14:7e:f7:
00:08:8c:45:02:a6:59:6b:0f:8b:10:25:70:4e:58:3e:86:32:
0b:4b:e3:eb
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBVURsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OWQyZGFmZjFjNWJiNjFhMGFjOGIzY2FlYWQ0YjhhMWZhMjg0ZDBmMB4XDTIyMDUy
MzA5MzEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDcxYTE2ZGQ5OTg5
Yzc4OTNiMWU4ZjYyMTUyYmM3YjhjMGIyYzE1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxb97pK3Bdl4GrxSnQK0mvOGZZ7x+cwjk9CXzccpXGW766L
tu3iDMTjqKVJUZWyT/3odukZIQjnNwrA6VkbXDgyDrjYKDmUoiW3thzZcAOc69Iv
rOBoKVEQFecNwQzDNeKYntuxTcieAFc7TflbBp84oLKV7XM1/4291UY/sOzKJuv3
CxRK/BjtBVOkXPHaddyuhjVWDHB2uf21kLv4z08grQTqjIK25Z6Gz6R5gbZ/ta0F
KqoaBYS6mWzEcAC/75Zxt8GJOi7XcjCpTOF11v727XoyhmSQqCPuv7o9dFFH08pL
M3Oh+TzP3xvnshxiyGnBLKYZPzru835hONBxllMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQHGhbdmYnHiTsej2IVK8e4wLLBXzAfBgNVHSMEGDAWgBQp0tr/HFu2GgrI
s8rq1Lih+ihNDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tkTGFfeHhidGhvS3lMUEs2dFM0b2Zvb1RROC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvZTVlYTk4LTk2MDEtNGFkZC1hN2Y4LTRmNTdkOWNmNWNhYS8x
L0J4b1czWm1KeDRrN0hvOWlGU3ZIdU1DeXdWOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
ZTVlYTk4LTk2MDEtNGFkZC1hN2Y4LTRmNTdkOWNmNWNhYS8xL0tkTGFfeHhidGhv
S3lMUEs2dFM0b2Zvb1RROC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAVXvlAMEAFXvlwMEAblfnAMEALlf
nzANBgkqhkiG9w0BAQsFAAOCAQEAEQq1I0hBbGOpHmgzNC2rigaMrKcB6Xk8cGfy
15I3hfkNQYyea9MaZdCuT+vtFbn0dUO2yghUlHDbN53ZVdZhffPpM5CnpMVpnxV8
YPBU3HwHs8QEY4Q/aLU/W0BUwRO6X3geqtZYGN/x3OmR/gNqpmj5Tj64wO3cZr+0
EUI5F+9qRwXAinB8OnDtrXMeGEaXD1MErP/D21/vu5yJ1I5tpKEVfo43GXEkzPfF
bYpBHegMCjX3AFoI0gaGSsTo8fv2Vs+iG5VFG5k/Y/VnWsM5W+V6zDLROnakSRw/
BNYdJg3KbXqXhuGBFH73AAiMRQKmWWsPixAlcE5YPoYyC0vj6w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:35 2023 by rpki-client on console.sobornost.net