Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bt-mu1xnc97RW62OhgEX4JwLN1s.roa
File: Bt-mu1xnc97RW62OhgEX4JwLN1s.roa (raw, json)
Hash identifier: M7d0o0RSF3sn0e4l3tHJOiHfugAJ10RwPvuW25ih4c8=
Subject key identifier: 06:DF:A6:BB:5C:67:73:DE:D1:5B:AD:8E:86:01:17:E0:9C:0B:37:5B
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 01AC0B1F
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bt-mu1xnc97RW62OhgEX4JwLN1s.roa
Signing time: Sat 01 Jan 2022 00:52:21 +0000
ROA not before: Sat 01 Jan 2022 00:52:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45671
IP address blocks: 194.15.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28052255 (0x1ac0b1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 1 00:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06dfa6bb5c6773ded15bad8e860117e09c0b375b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:81:18:37:ca:37:28:35:40:50:1c:a0:80:
f5:e5:2a:09:ee:c7:c7:a1:c9:ea:26:5a:48:22:6c:
13:10:e0:9d:7b:f7:08:8e:ec:a0:48:3d:29:c4:97:
b4:a5:cc:36:e0:95:c2:79:73:76:86:f9:a7:f7:2d:
01:2b:31:af:2a:b8:46:04:68:6a:4b:ae:46:6c:7b:
6b:c5:99:11:d2:5e:0c:83:4a:a7:d2:fb:0b:10:47:
44:46:1b:17:c8:14:1a:cc:b6:48:10:be:b9:2a:86:
f1:af:1a:04:0c:8d:ab:1a:3b:3d:63:6e:d5:b4:4f:
b2:90:c0:34:9b:07:bf:b2:9f:28:7e:c1:8f:20:36:
32:f5:48:83:0e:af:ee:57:41:a4:2e:7a:ed:52:3e:
82:d2:16:16:15:c7:13:0d:01:02:e2:c0:ba:1f:ae:
ce:ee:03:b6:a0:90:65:b9:2d:d2:d7:25:df:5e:82:
91:04:bc:95:73:46:87:70:4f:74:2a:ce:2e:b6:80:
45:43:61:9c:c6:3c:dc:7a:7d:07:d4:c9:00:02:3b:
b3:ff:b3:31:4c:12:6f:c7:fa:3f:87:07:90:1c:aa:
05:3e:7b:17:7c:12:61:4e:b2:fd:f7:c9:ab:47:f9:
b5:b4:bd:a4:fd:47:a2:64:5e:ee:3a:2e:dd:c6:fd:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:A6:BB:5C:67:73:DE:D1:5B:AD:8E:86:01:17:E0:9C:0B:37:5B
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bt-mu1xnc97RW62OhgEX4JwLN1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:91:43:37:e9:d2:55:a4:05:ac:8d:a6:5b:a6:ac:bd:91:ba:
9b:2e:42:5d:07:3b:d0:39:fd:2c:6c:d7:ca:cf:ab:96:84:56:
e9:db:98:a2:01:94:15:29:cd:73:0d:0e:1a:00:ad:fe:cc:85:
f7:0b:72:72:98:ac:34:a1:9b:48:21:06:19:6b:ac:22:ad:82:
e3:a8:83:8d:96:a7:48:ff:8b:e4:5c:a3:3b:91:4a:01:63:8e:
13:47:36:de:58:ad:b1:bc:d6:a2:9a:45:f0:97:e6:79:1d:58:
83:99:4d:3b:68:de:26:44:7a:ae:c4:b0:49:5e:9d:c9:7e:ea:
02:e3:63:cb:93:cc:c1:ea:2c:f2:68:af:56:58:2a:0a:36:1e:
04:ba:b6:79:fd:99:b7:1b:a8:8b:e0:0a:6d:bf:7b:48:ee:05:
a2:14:0b:48:62:47:df:76:f0:6b:7d:22:b2:7e:34:e7:03:c7:
4c:e4:ce:65:f1:4a:08:1f:f1:50:b4:7d:22:4a:25:b8:eb:e3:
13:b8:78:b4:e2:da:83:cd:ae:ac:7d:c6:f1:2a:84:a6:45:fe:
fb:e2:f9:cd:15:ae:6e:26:e6:89:a0:09:da:8a:cb:36:be:aa:
58:c4:fb:c8:58:d1:43:4d:d3:a5:f6:5b:6c:97:6d:1f:2c:88:
c4:d7:6a:1d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAawLHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YzRlZDk0MmU1Yzc0MmU3N2JmYjliZWI5NTRmODcyNTM0ZjUyODQ4MB4XDTIyMDEw
MTAwNTIyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDZkZmE2YmI1YzY3
NzNkZWQxNWJhZDhlODYwMTE3ZTA5YzBiMzc1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMLdgRg3yjcoNUBQHKCA9eUqCe7Hx6HJ6iZaSCJsExDgnXv3
CI7soEg9KcSXtKXMNuCVwnlzdob5p/ctASsxryq4RgRoakuuRmx7a8WZEdJeDINK
p9L7CxBHREYbF8gUGsy2SBC+uSqG8a8aBAyNqxo7PWNu1bRPspDANJsHv7KfKH7B
jyA2MvVIgw6v7ldBpC567VI+gtIWFhXHEw0BAuLAuh+uzu4DtqCQZbkt0tcl316C
kQS8lXNGh3BPdCrOLraARUNhnMY83Hp9B9TJAAI7s/+zMUwSb8f6P4cHkByqBT57
F3wSYU6y/ffJq0f5tbS9pP1HomRe7jou3cb90mECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQG36a7XGdz3tFbrY6GARfgnAs3WzAfBgNVHSMEGDAWgBQ8TtlC5cdC53v7
m+uVT4clNPUoSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BFN1pRdVhIUXVkNy01dnJsVS1ISlRUMUtFZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjYvMWJiNDVhLTU1MWMtNDk2Ny05NWNhLTc3MzQ0YmNjOTE5MS8x
L0J0LW11MXhuYzk3Ulc2Mk9oZ0VYNEp3TE4xcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYv
MWJiNDVhLTU1MWMtNDk2Ny05NWNhLTc3MzQ0YmNjOTE5MS8xL1BFN1pRdVhIUXVk
Ny01dnJsVS1ISlRUMUtFZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIPmzANBgkqhkiG9w0BAQsFAAOC
AQEAHpFDN+nSVaQFrI2mW6asvZG6my5CXQc70Dn9LGzXys+rloRW6duYogGUFSnN
cw0OGgCt/syF9wtycpisNKGbSCEGGWusIq2C46iDjZanSP+L5FyjO5FKAWOOE0c2
3litsbzWoppF8JfmeR1Yg5lNO2jeJkR6rsSwSV6dyX7qAuNjy5PMweos8mivVlgq
CjYeBLq2ef2Ztxuoi+AKbb97SO4FohQLSGJH33bwa30isn405wPHTOTOZfFKCB/x
ULR9IkoluOvjE7h4tOLag82urH3G8SqEpkX+++L5zRWubibmiaAJ2orLNr6qWMT7
yFjRQ03TpfZbbJdtHyyIxNdqHQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net