Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/BBO2UZ2bTmJ9d9UUpmqyF4ZBrHs.roa
File: BBO2UZ2bTmJ9d9UUpmqyF4ZBrHs.roa (raw, json)
Hash identifier: RncTJIdoEUXwimo+Ge9+HPibljtEC14TVXnhiR+fK3I=
Subject key identifier: 04:13:B6:51:9D:9B:4E:62:7D:77:D5:14:A6:6A:B2:17:86:41:AC:7B
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 40C5D6F3
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/BBO2UZ2bTmJ9d9UUpmqyF4ZBrHs.roa
Signing time: Sat 01 Jan 2022 08:00:27 +0000
ROA not before: Sat 01 Jan 2022 08:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 764
IP address blocks: 194.211.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086707443 (0x40c5d6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 1 08:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0413b6519d9b4e627d77d514a66ab2178641ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:95:bf:ed:6f:c8:85:f1:7a:48:c1:15:12:
07:33:8b:e8:f6:b4:db:20:7f:fc:d5:70:fc:b4:df:
e8:2f:1d:b9:02:58:c5:9f:17:c8:ac:f8:ae:d9:84:
4b:1c:48:28:ef:46:e3:fe:43:b5:41:47:f0:de:66:
20:1c:c9:ce:9a:b4:b4:c3:0e:c1:cb:ee:6e:78:dc:
12:e5:74:a0:8c:48:5e:30:b0:93:f7:16:07:93:6d:
ae:9b:65:dc:1e:a9:52:0d:3d:c5:55:40:d7:30:44:
a7:3d:4a:7d:99:de:ad:af:a9:19:a6:96:76:d5:7d:
f6:cd:d8:ea:65:a4:0d:f6:05:a3:ab:cb:73:37:dc:
65:d4:eb:ec:da:81:04:86:b5:c0:ef:e1:f3:f3:dd:
6f:15:b1:ec:cd:2f:b5:61:2c:4c:b3:bb:42:2e:ce:
01:52:f2:cb:d5:1d:d5:c1:98:bf:3f:d3:81:e8:63:
ec:82:71:29:1e:5e:14:aa:25:4b:bb:ee:55:b5:a6:
ad:4c:8c:7f:ff:3d:76:37:d9:9e:56:fc:0a:fe:01:
31:65:3f:00:0c:09:df:3f:6b:92:f2:cc:50:3e:30:
34:ad:9d:7b:3d:bf:24:b6:3d:82:1b:ad:41:ab:d9:
a9:79:df:8e:7e:ba:8c:2a:aa:4b:39:12:9a:1c:10:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:B6:51:9D:9B:4E:62:7D:77:D5:14:A6:6A:B2:17:86:41:AC:7B
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/BBO2UZ2bTmJ9d9UUpmqyF4ZBrHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.211.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:60:7e:3e:34:32:ad:45:5b:64:f9:da:e3:a1:1c:c0:49:d5:
d3:e4:7b:4c:61:26:8d:fe:8f:b8:f4:e3:a2:55:fa:33:73:f6:
84:1a:52:8f:b0:22:01:e3:ee:39:0f:b8:a4:81:bc:95:24:7f:
8f:b8:15:e3:35:ee:cc:85:44:68:db:86:11:c5:e2:79:1b:14:
ce:0e:5a:f4:22:7d:38:15:2a:ff:3a:3a:5a:01:24:fd:34:de:
ff:54:72:1c:12:1b:54:ae:a4:01:50:33:fa:63:84:b8:55:6d:
5d:3d:35:f8:d9:d5:03:72:80:ed:91:11:4f:eb:d0:1d:8d:db:
29:56:21:88:ea:82:73:c4:ab:e0:3c:21:81:90:66:03:0b:31:
b9:46:71:a6:0b:62:b7:cb:8a:39:2d:37:25:6c:e9:06:a4:88:
05:27:7e:17:d5:8b:b3:44:74:c9:a4:bc:e5:76:b4:75:55:c7:
97:c9:51:59:a8:f1:12:ee:00:53:a9:72:86:56:72:03:cf:9f:
c5:5d:79:41:4a:c7:c9:41:e9:43:64:59:1d:66:32:23:53:c8:
5e:c6:9b:9b:b9:65:7c:c6:17:40:fc:9a:96:dc:5c:d4:5b:4a:
07:a6:a6:fb:67:9d:1f:49:a6:0e:db:74:5a:74:86:74:c0:46:
12:ea:08:05
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQMXW8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGRlZTFiMDZiYTI0YTY3NjIxM2Y5NzZhNGI1MGMxMjlkY2IyYjczMB4XDTIyMDEw
MTA4MDAyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQxM2I2NTE5ZDli
NGU2MjdkNzdkNTE0YTY2YWIyMTc4NjQxYWM3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALA0lb/tb8iF8XpIwRUSBzOL6Pa02yB//NVw/LTf6C8duQJY
xZ8XyKz4rtmESxxIKO9G4/5DtUFH8N5mIBzJzpq0tMMOwcvubnjcEuV0oIxIXjCw
k/cWB5Ntrptl3B6pUg09xVVA1zBEpz1KfZnera+pGaaWdtV99s3Y6mWkDfYFo6vL
czfcZdTr7NqBBIa1wO/h8/PdbxWx7M0vtWEsTLO7Qi7OAVLyy9Ud1cGYvz/Tgehj
7IJxKR5eFKolS7vuVbWmrUyMf/89djfZnlb8Cv4BMWU/AAwJ3z9rkvLMUD4wNK2d
ez2/JLY9ghutQavZqXnfjn66jCqqSzkSmhwQyQUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQEE7ZRnZtOYn131RSmarIXhkGsezAfBgNVHSMEGDAWgBTg3uGwa6JKZ2IT
+XaktQwSncsrczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRON2hzR3VpU21kaUVfbDJwTFVNRXAzTEszTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvYzIyZGM5LWM3YmEtNDE1Ni1hNzljLTE1ZTkwYmY4N2ZhYi8x
L0JCTzJVWjJiVG1KOWQ5VVVwbXF5RjRaQnJIcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
YzIyZGM5LWM3YmEtNDE1Ni1hNzljLTE1ZTkwYmY4N2ZhYi8xLzRON2hzR3VpU21k
aUVfbDJwTFVNRXAzTEszTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMLT5zANBgkqhkiG9w0BAQsFAAOC
AQEATGB+PjQyrUVbZPna46EcwEnV0+R7TGEmjf6PuPTjolX6M3P2hBpSj7AiAePu
OQ+4pIG8lSR/j7gV4zXuzIVEaNuGEcXieRsUzg5a9CJ9OBUq/zo6WgEk/TTe/1Ry
HBIbVK6kAVAz+mOEuFVtXT01+NnVA3KA7ZERT+vQHY3bKVYhiOqCc8Sr4DwhgZBm
AwsxuUZxpgtit8uKOS03JWzpBqSIBSd+F9WLs0R0yaS85Xa0dVXHl8lRWajxEu4A
U6lyhlZyA8+fxV15QUrHyUHpQ2RZHWYyI1PIXsabm7llfMYXQPyaltxc1FtKB6am
+2edH0mmDtt0WnSGdMBGEuoIBQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:50 2023 by rpki-client on console.sobornost.net