Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rgek5oFhP0_8_OFCHbz61_5o0nY.roa
File: rgek5oFhP0_8_OFCHbz61_5o0nY.roa (raw, json)
Hash identifier: PiZ5MEWgMFeM3Zycz2hp+Q0qwcr4xjuwBe66WjZsPdQ=
Subject key identifier: AE:07:A4:E6:81:61:3F:4F:FC:FC:E1:42:1D:BC:FA:D7:FE:68:D2:76
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 466525A2
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rgek5oFhP0_8_OFCHbz61_5o0nY.roa
Signing time: Mon 13 Jun 2022 14:50:45 +0000
ROA not before: Mon 13 Jun 2022 14:50:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2281
IP address blocks: 90.84.10.0/24 maxlen: 24
2a01:c9c0:8020::/48 maxlen: 64
2a01:c9c0:802f::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181033890 (0x466525a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jun 13 14:50:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae07a4e681613f4ffcfce1421dbcfad7fe68d276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c4:c9:47:5b:d2:26:bb:39:e5:ab:85:1d:36:
21:c5:4a:00:d9:6c:81:14:54:17:49:c0:b9:f5:f4:
2e:0b:87:ad:93:e6:eb:60:d9:8b:40:42:f6:8c:15:
dd:f2:1a:b0:0e:8f:82:4c:07:74:03:29:00:dc:c7:
6f:7d:85:90:6a:28:0e:7a:ce:df:e8:cc:58:8c:95:
c0:2d:e2:8c:40:bf:1b:16:74:58:6c:db:0a:77:bc:
d1:69:ae:04:59:a5:c0:d3:a9:c2:e4:3c:ab:0e:0e:
5e:5f:cd:47:a6:47:9d:a5:c2:80:15:12:04:91:d7:
d5:29:c6:6a:15:8c:16:60:e3:18:84:c2:69:1a:39:
1e:f7:b3:c5:28:64:c5:8d:03:c2:39:bc:24:4b:f9:
3e:11:54:78:37:33:05:92:b0:82:5a:9d:a8:43:8d:
3a:72:64:2f:d5:f2:64:72:d5:77:08:64:16:11:db:
a8:6e:f9:27:6c:7a:23:5e:50:46:e6:66:0d:95:67:
c3:ff:76:a6:4b:f8:5a:27:68:d8:22:37:84:be:05:
ae:85:8d:8d:98:d5:cd:14:50:00:da:05:a5:5b:e3:
81:dc:78:5f:aa:36:0b:fe:36:bf:ec:15:46:53:3c:
c9:bc:35:22:b9:d7:e5:a9:78:08:87:61:9b:b3:9e:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:A4:E6:81:61:3F:4F:FC:FC:E1:42:1D:BC:FA:D7:FE:68:D2:76
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rgek5oFhP0_8_OFCHbz61_5o0nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.10.0/24
IPv6:
2a01:c9c0:8020::/48
2a01:c9c0:802f::/48
Signature Algorithm: sha256WithRSAEncryption
34:d1:ad:be:ea:34:75:8d:82:c9:1f:d5:b5:bb:0a:d5:0a:12:
e1:7b:54:bf:66:98:32:3d:35:da:d4:38:c8:be:67:6c:79:d9:
87:a0:9c:ad:81:de:44:be:a0:57:23:5a:0f:8d:95:cd:36:41:
05:69:53:f6:a1:d4:b0:43:15:2b:ed:d7:e9:b8:89:e6:a4:6b:
63:a9:03:71:78:b6:a7:3a:0d:38:4a:a6:12:84:5d:20:f3:82:
e6:7c:52:cb:8c:21:3e:89:28:22:f9:eb:91:b6:1c:f3:70:18:
82:c3:f1:66:af:27:93:c0:97:bf:22:bc:49:2f:58:fc:6b:46:
32:7f:9e:9c:1b:04:e5:fd:ae:dc:f3:87:e8:a5:5c:c1:f0:d2:
5b:5a:de:71:f1:bd:ac:15:5f:f2:8b:b8:c6:c9:18:bb:d9:fe:
79:c7:66:fa:33:cb:eb:d1:09:65:8a:fd:ca:05:2b:a6:84:0a:
bd:68:30:96:23:48:70:a5:03:27:05:4c:bb:76:1f:67:aa:c8:
58:b3:d4:34:37:cf:bd:8e:2f:a8:15:b3:cc:84:97:59:2c:ac:
df:c3:95:d6:b2:1b:8b:38:c0:15:94:19:86:33:c4:e3:6a:14:
31:32:7f:8c:2a:0b:5d:81:f5:a3:a2:e8:ed:42:d4:de:3e:a5:
9e:52:01:00
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIERmUlojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMB4XDTIyMDYx
MzE0NTA0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWUwN2E0ZTY4MTYx
M2Y0ZmZjZmNlMTQyMWRiY2ZhZDdmZTY4ZDI3NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPHEyUdb0ia7OeWrhR02IcVKANlsgRRUF0nAufX0LguHrZPm
62DZi0BC9owV3fIasA6PgkwHdAMpANzHb32FkGooDnrO3+jMWIyVwC3ijEC/GxZ0
WGzbCne80WmuBFmlwNOpwuQ8qw4OXl/NR6ZHnaXCgBUSBJHX1SnGahWMFmDjGITC
aRo5HvezxShkxY0Dwjm8JEv5PhFUeDczBZKwglqdqEONOnJkL9XyZHLVdwhkFhHb
qG75J2x6I15QRuZmDZVnw/92pkv4Wido2CI3hL4FroWNjZjVzRRQANoFpVvjgdx4
X6o2C/42v+wVRlM8ybw1IrnX5al4CIdhm7OeU8cCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBSuB6TmgWE/T/z84UIdvPrX/mjSdjAfBgNVHSMEGDAWgBQ68JujO1rlgbDS
kyMkkxT3aqEFETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8x
L3JnZWs1b0ZoUDBfOF9PRkNIYno2MV81bzBuWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
MzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlH
dzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEAFpUCjAYBAIAAjASAwcAKgHJwIAg
AwcAKgHJwIAvMA0GCSqGSIb3DQEBCwUAA4IBAQA00a2+6jR1jYLJH9W1uwrVChLh
e1S/ZpgyPTXa1DjIvmdsedmHoJytgd5EvqBXI1oPjZXNNkEFaVP2odSwQxUr7dfp
uInmpGtjqQNxeLanOg04SqYShF0g84LmfFLLjCE+iSgi+euRthzzcBiCw/FmryeT
wJe/IrxJL1j8a0Yyf56cGwTl/a7c84fopVzB8NJbWt5x8b2sFV/yi7jGyRi72f55
x2b6M8vr0Qlliv3KBSumhAq9aDCWI0hwpQMnBUy7dh9nqshYs9Q0N8+9ji+oFbPM
hJdZLKzfw5XWshuLOMAVlBmGM8TjahQxMn+MKgtdgfWjoujtQtTePqWeUgEA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org