Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/06mUVLb35HoNFNMbCeWGL34G0bc.roa
File: 06mUVLb35HoNFNMbCeWGL34G0bc.roa (raw, json)
Hash identifier: wz2fthfgW3AxW5tkdjhqRC7Il+GI936JfxHd/4u50Cg=
Subject key identifier: D3:A9:94:54:B6:F7:E4:7A:0D:14:D3:1B:09:E5:86:2F:7E:06:D1:B7
Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial: 0765CBAD
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/06mUVLb35HoNFNMbCeWGL34G0bc.roa
Signing time: Sat 01 Jan 2022 07:54:42 +0000
ROA not before: Sat 01 Jan 2022 07:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55081
IP address blocks: 185.83.68.0/24 maxlen: 24
185.83.69.0/24 maxlen: 24
185.83.70.0/24 maxlen: 24
185.83.68.0/22 maxlen: 22
185.83.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124111789 (0x765cbad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39469af33611b79084f575e95b13e66550edb383
Validity
Not Before: Jan 1 07:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3a99454b6f7e47a0d14d31b09e5862f7e06d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:2a:ef:08:58:ad:46:25:3a:bf:f3:21:2f:
87:72:67:42:5b:19:c1:de:4f:a9:f3:17:5c:2b:be:
78:3b:c1:d3:dd:d2:57:67:d4:c6:1c:c3:89:38:dc:
28:b7:5a:53:fa:39:a1:f6:28:0a:fb:7f:45:e0:37:
e6:74:c4:91:f6:23:dd:41:62:d7:4a:9a:14:ae:bb:
23:85:bd:ef:7a:04:9b:c4:95:84:c7:32:37:10:ce:
d3:a5:c8:18:61:56:77:e2:f5:68:e5:2d:ac:12:92:
ca:0e:77:15:1b:de:a9:ae:c0:0e:88:3d:fc:27:40:
12:e0:af:6d:0f:a5:f2:0f:18:aa:5e:cf:f8:4a:3f:
83:c8:ac:58:e6:ab:19:1a:0f:15:88:57:66:5e:b5:
fa:db:cc:51:e7:a8:8b:44:b1:81:b2:c7:ac:ab:6a:
4b:f5:f7:75:71:1f:73:e5:d6:7b:f1:f2:f4:f3:96:
34:f0:1f:02:09:2a:39:2e:15:9c:60:66:4d:08:9a:
e5:0b:c3:1e:aa:92:73:d4:26:0e:be:9a:a4:53:29:
37:f7:10:62:15:40:1b:84:74:04:1d:92:8e:a0:a7:
67:8e:84:22:2c:bf:82:c8:61:d1:3a:b5:75:03:57:
9a:2f:83:11:73:2e:5b:02:4d:27:80:b0:7b:e6:23:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:94:54:B6:F7:E4:7A:0D:14:D3:1B:09:E5:86:2F:7E:06:D1:B7
X509v3 Authority Key Identifier:
keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/06mUVLb35HoNFNMbCeWGL34G0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.68.0/22
Signature Algorithm: sha256WithRSAEncryption
80:90:41:7c:02:5f:3f:9e:77:72:4c:29:0c:72:39:c7:5b:59:
85:e0:e7:15:ba:61:f9:83:23:5e:e5:79:a8:96:92:95:c5:d2:
3a:c6:4a:cc:2b:89:e2:40:f5:7e:88:f8:d0:93:99:5d:69:9f:
0e:e2:83:3b:f0:90:51:0f:b8:94:9f:b6:2e:a5:e1:d2:82:d9:
e5:e1:c9:2b:cf:3d:ed:58:e7:5a:10:f0:8e:f0:07:30:1b:1a:
25:f4:ae:6b:8b:6f:63:8c:3e:cb:1b:e2:e4:b1:ca:59:69:28:
d2:15:a7:62:c6:4e:40:74:8f:bd:7e:b6:db:9a:0a:c7:12:e0:
8f:d0:0f:54:be:b2:d5:18:6c:99:a5:04:ce:e0:ae:ba:ff:15:
20:3f:9f:44:79:2c:b3:af:55:b1:db:98:d3:6d:18:f7:6f:e0:
42:02:7b:8d:ff:8a:d6:ca:5d:e9:15:09:7a:8e:d9:ef:0d:9d:
93:a5:15:dd:13:93:bf:5d:e7:ff:38:7b:30:ca:45:0d:89:23:
b8:58:fd:8f:aa:c3:53:76:c0:73:47:59:8c:0f:d1:1e:1e:4f:
8e:1a:86:a0:f9:35:5b:2e:b1:36:ae:a1:ee:6b:bd:1c:2a:dc:
08:f9:21:34:c1:fb:0d:92:ab:65:6c:65:60:78:8d:6f:ec:82:
e3:fe:c7:f9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2XLrTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTQ2OWFmMzM2MTFiNzkwODRmNTc1ZTk1YjEzZTY2NTUwZWRiMzgzMB4XDTIyMDEw
MTA3NTQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDNhOTk0NTRiNmY3
ZTQ3YTBkMTRkMzFiMDllNTg2MmY3ZTA2ZDFiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO6bKu8IWK1GJTq/8yEvh3JnQlsZwd5PqfMXXCu+eDvB093S
V2fUxhzDiTjcKLdaU/o5ofYoCvt/ReA35nTEkfYj3UFi10qaFK67I4W973oEm8SV
hMcyNxDO06XIGGFWd+L1aOUtrBKSyg53FRveqa7ADog9/CdAEuCvbQ+l8g8Yql7P
+Eo/g8isWOarGRoPFYhXZl61+tvMUeeoi0SxgbLHrKtqS/X3dXEfc+XWe/Hy9POW
NPAfAgkqOS4VnGBmTQia5QvDHqqSc9QmDr6apFMpN/cQYhVAG4R0BB2SjqCnZ46E
Iiy/gshh0Tq1dQNXmi+DEXMuWwJNJ4Cwe+YjEcECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTTqZRUtvfkeg0U0xsJ5YYvfgbRtzAfBgNVHSMEGDAWgBQ5RprzNhG3kIT1
delbE+ZlUO2zgzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09VYWE4ellSdDVDRTlYWHBXeFBtWlZEdHM0TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvMjVlMzhmLWEwOTEtNGU1Yy1iZjYzLTY2ZGQyYTkxZmFjYS8x
LzA2bVVWTGIzNUhvTkZOTWJDZVdHTDM0RzBiYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
MjVlMzhmLWEwOTEtNGU1Yy1iZjYzLTY2ZGQyYTkxZmFjYS8xL09VYWE4ellSdDVD
RTlYWHBXeFBtWlZEdHM0TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlTRDANBgkqhkiG9w0BAQsFAAOC
AQEAgJBBfAJfP553ckwpDHI5x1tZheDnFbph+YMjXuV5qJaSlcXSOsZKzCuJ4kD1
foj40JOZXWmfDuKDO/CQUQ+4lJ+2LqXh0oLZ5eHJK8897VjnWhDwjvAHMBsaJfSu
a4tvY4w+yxvi5LHKWWko0hWnYsZOQHSPvX6225oKxxLgj9APVL6y1RhsmaUEzuCu
uv8VID+fRHkss69VsduY020Y92/gQgJ7jf+K1spd6RUJeo7Z7w2dk6UV3ROTv13n
/zh7MMpFDYkjuFj9j6rDU3bAc0dZjA/RHh5PjhqGoPk1Wy6xNq6h7mu9HCrcCPkh
NMH7DZKrZWxlYHiNb+yC4/7H+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:05 2024 by rpki-client on console-fra.rpki-client.org