Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6W1boTKKhdI2M97y2_andZuwiQA.roa
File: 6W1boTKKhdI2M97y2_andZuwiQA.roa (raw, json)
Hash identifier: Xg/Hm3EpNe+OwUGn73EoVH9VF6a6CjAUEDvrL3uKAPM=
Subject key identifier: E9:6D:5B:A1:32:8A:85:D2:36:33:DE:F2:DB:F6:A7:75:9B:B0:89:00
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F02374C020316CCE0E646C93F79AC00
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6W1boTKKhdI2M97y2_andZuwiQA.roa
Signing time: Sun 01 Jan 2023 20:24:54 +0000
ROA not before: Sun 01 Jan 2023 20:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 159.148.137.0/24 maxlen: 24
159.148.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:37:4c:02:03:16:cc:e0:e6:46:c9:3f:79:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e96d5ba1328a85d23633def2dbf6a7759bb08900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:f4:26:ae:48:ac:21:2f:07:ee:a2:c4:42:
30:77:a3:ba:b4:91:44:9c:7b:e0:d5:f6:10:6e:b4:
48:3a:71:cf:8c:a0:2d:01:99:aa:60:c3:ba:78:0c:
ad:8c:be:48:ff:3c:3a:2b:82:a3:36:bc:6e:a1:d2:
4d:95:99:3e:ad:55:e1:81:00:f2:69:56:47:8f:71:
70:0d:24:3a:3b:69:33:1d:c2:d0:cf:29:f6:4b:f2:
7f:dc:f9:26:08:5c:c2:de:8b:de:f1:f1:24:4b:89:
88:65:4c:b4:ca:f9:06:b4:c6:42:e2:72:f8:88:67:
f4:46:dd:b9:79:af:59:85:44:ee:02:38:66:a4:24:
f6:83:f5:3d:35:52:fd:68:18:81:f1:74:66:f7:e0:
78:8b:05:05:9e:24:4d:8f:f9:cd:af:94:92:2d:13:
e3:86:e3:91:6a:38:ff:1f:15:3f:6b:5f:bd:99:3d:
2f:ab:1c:45:66:04:4d:7c:1d:99:ac:ce:c6:33:d8:
4b:d2:3d:3e:84:10:16:5d:95:c0:02:35:b8:dd:06:
44:87:e7:7a:63:3f:3b:7f:cb:5b:90:62:89:f6:1f:
04:19:9f:ef:bc:ae:12:d2:63:79:5e:53:a2:a2:bf:
a1:a3:56:73:3f:72:74:e1:25:bd:6a:47:26:20:b0:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6D:5B:A1:32:8A:85:D2:36:33:DE:F2:DB:F6:A7:75:9B:B0:89:00
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6W1boTKKhdI2M97y2_andZuwiQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.136.0/23
Signature Algorithm: sha256WithRSAEncryption
08:66:e6:3c:91:fa:ae:40:64:ce:f4:c3:71:d0:f3:5c:11:f7:
d0:95:51:08:67:22:08:45:9e:ef:68:be:98:ca:38:62:98:3b:
81:83:28:2c:28:39:0e:8c:c9:e8:24:8b:65:bc:28:f1:be:8c:
d7:7c:11:76:c1:43:8b:3f:2b:16:87:d9:b6:3a:98:d4:05:52:
80:de:67:3f:c8:4e:d0:e1:7c:28:06:c6:db:cf:93:64:ff:cf:
aa:d2:f4:07:8e:45:ff:93:66:9d:82:89:1d:27:be:91:fe:e6:
36:aa:4c:c4:e5:28:5c:c0:ac:a4:7a:47:30:54:58:40:85:f7:
b1:b9:f7:23:bf:04:1b:26:66:c2:01:93:7c:b9:4a:95:61:96:
6d:66:4c:8a:61:53:e0:54:6c:5f:ff:80:e1:46:c4:24:4d:39:
5e:9a:e5:36:1f:b4:29:ce:3f:af:9b:4d:eb:bd:f3:57:79:8a:
63:ad:e4:6b:2f:9c:a6:66:cd:1d:0f:a2:0e:2c:23:6d:1c:8d:
2d:a1:c1:b1:a9:f1:f8:81:07:dc:84:43:5e:18:a0:05:89:4d:
9d:54:2a:46:2d:f7:bf:c9:88:8b:61:e0:2b:4f:33:0b:85:31:
f2:12:e2:01:fb:72:c5:c1:2b:3b:b7:3f:d4:9d:d4:24:aa:c7:
8c:e1:62:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAjdMAgMWzODmRsk/eawAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwMTAxMjAyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTZkNWJhMTMyOGE4NWQyMzYzM2RlZjJkYmY2YTc3NTliYjA4OTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwn0Jq5IrCEvB+6ixEIwd6O6tJFE
nHvg1fYQbrRIOnHPjKAtAZmqYMO6eAytjL5I/zw6K4KjNrxuodJNlZk+rVXhgQDy
aVZHj3FwDSQ6O2kzHcLQzyn2S/J/3PkmCFzC3ove8fEkS4mIZUy0yvkGtMZC4nL4
iGf0Rt25ea9ZhUTuAjhmpCT2g/U9NVL9aBiB8XRm9+B4iwUFniRNj/nNr5SSLRPj
huORajj/HxU/a1+9mT0vqxxFZgRNfB2ZrM7GM9hL0j0+hBAWXZXAAjW43QZEh+d6
Yz87f8tbkGKJ9h8EGZ/vvK4S0mN5XlOior+ho1ZzP3J04SW9akcmILAQUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOltW6EyioXSNjPe8tv2p3WbsIkAMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvNlcxYm9US0toZEkyTTk3eTJfYW5kWnV3aVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn5SIMA0G
CSqGSIb3DQEBCwUAA4IBAQAIZuY8kfquQGTO9MNx0PNcEffQlVEIZyIIRZ7vaL6Y
yjhimDuBgygsKDkOjMnoJItlvCjxvozXfBF2wUOLPysWh9m2OpjUBVKA3mc/yE7Q
4XwoBsbbz5Nk/8+q0vQHjkX/k2adgokdJ76R/uY2qkzE5ShcwKykekcwVFhAhfex
ufcjvwQbJmbCAZN8uUqVYZZtZkyKYVPgVGxf/4DhRsQkTTlemuU2H7Qpzj+vm03r
vfNXeYpjreRrL5ymZs0dD6IOLCNtHI0tocGxqfH4gQfchENeGKAFiU2dVCpGLfe/
yYiLYeArTzMLhTHyEuIB+3LFwSs7tz/UndQkqseM4WIR
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:32 2025 by rpki-client