Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/6oe-YUSGirzDJhYV8E2Iqnyw_Gw.roa
File: 6oe-YUSGirzDJhYV8E2Iqnyw_Gw.roa (raw, json)
Hash identifier: JsXoPghd2s6S8SHkwRj0hxGn1RFgpTxU9V+UK8pFX+M=
Subject key identifier: EA:87:BE:61:44:86:8A:BC:C3:26:16:15:F0:4D:88:AA:7C:B0:FC:6C
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 0AB2A190
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/6oe-YUSGirzDJhYV8E2Iqnyw_Gw.roa
Signing time: Sat 01 Jan 2022 07:57:19 +0000
ROA not before: Sat 01 Jan 2022 07:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208096
IP address blocks: 89.200.246.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179478928 (0xab2a190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Jan 1 07:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea87be6144868abcc3261615f04d88aa7cb0fc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d5:ab:87:39:30:4e:03:19:fc:60:b4:77:c1:
55:8b:db:7a:d1:e8:88:f1:99:de:99:83:54:49:9c:
2e:0a:f1:8b:d9:1c:1f:1b:fd:be:be:2d:24:bc:30:
5a:68:78:a5:c6:5e:ee:a6:7e:17:d1:40:34:2b:26:
66:ae:3b:e3:c8:56:9a:88:02:24:cd:2a:f1:6c:24:
15:9f:88:96:9f:48:12:24:58:28:22:bb:d5:98:03:
f2:ac:6f:a9:a1:1e:9d:6c:0d:b5:b4:fc:f3:26:84:
95:38:85:a0:7c:34:e6:8e:04:29:85:f5:84:e1:97:
30:65:72:74:6a:66:76:2d:a3:7b:33:c0:1f:a2:98:
a0:2a:3f:3e:7e:ca:87:66:7c:5c:49:03:a5:26:27:
81:3d:ef:dc:1e:9e:55:94:ce:25:ad:77:25:93:b4:
09:63:e6:00:2d:24:d3:b1:11:33:4c:2f:7f:d1:8d:
54:9a:58:2a:d6:86:fd:0e:9e:66:4d:9b:5c:81:98:
08:a3:35:a2:8f:28:58:07:ed:41:6b:e0:fc:9d:ff:
b2:6e:0d:56:26:80:d4:81:57:0f:81:6d:bb:70:a6:
e6:de:f5:80:b9:9c:2d:6d:8c:b0:e4:ab:36:41:25:
73:5b:8f:91:dd:45:ad:7a:2f:4e:20:f0:e9:53:59:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:87:BE:61:44:86:8A:BC:C3:26:16:15:F0:4D:88:AA:7C:B0:FC:6C
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/6oe-YUSGirzDJhYV8E2Iqnyw_Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b2:76:96:ed:8c:ce:eb:a2:e4:80:71:c5:04:c7:ec:30:80:
8f:6a:14:17:27:24:da:4a:17:28:df:21:1a:41:ff:32:09:bf:
7f:63:8e:f1:a1:cd:0d:d2:6d:4b:08:0a:61:4b:76:2f:27:1e:
bf:cc:3c:26:31:db:c0:57:c1:81:57:1f:b7:c4:a6:da:a2:22:
a4:a1:a3:70:3b:87:72:b1:dd:66:20:d1:8a:ac:33:74:72:43:
c1:25:43:55:1f:71:62:5c:fe:d7:9a:14:cc:4d:fd:6f:7d:05:
ab:34:01:47:69:bd:df:3e:d4:00:0c:49:88:15:60:6a:47:ad:
a2:8f:9b:9e:c9:82:bd:33:1d:f4:79:23:f3:5c:92:48:09:7c:
18:ac:81:b3:0e:42:c9:66:6c:d9:34:66:a2:30:a0:8c:76:cc:
7f:02:70:0a:8e:1e:c1:6b:9c:63:28:51:91:9c:ed:74:6f:18:
c5:ac:ff:a5:4d:ee:e5:00:76:05:07:08:4c:96:99:59:88:09:
ed:93:d0:ef:a4:0a:70:6e:2b:e4:c5:51:5a:b8:9b:64:25:9a:
05:12:c4:29:6d:fb:47:80:19:bf:31:15:c0:24:10:cc:32:7f:
76:8d:d8:54:3d:ef:f8:80:f4:6d:04:f5:98:ff:78:6a:0e:87:
85:ce:a9:ff
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECrKhkDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
Nzk1YWM4NDNjZDhiYTkwMTg4ZjczMTM2NTJiYjU2MTI5OWIyOTZmMB4XDTIyMDEw
MTA3NTcxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWE4N2JlNjE0NDg2
OGFiY2MzMjYxNjE1ZjA0ZDg4YWE3Y2IwZmM2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPLVq4c5ME4DGfxgtHfBVYvbetHoiPGZ3pmDVEmcLgrxi9kc
Hxv9vr4tJLwwWmh4pcZe7qZ+F9FANCsmZq4748hWmogCJM0q8WwkFZ+Ilp9IEiRY
KCK71ZgD8qxvqaEenWwNtbT88yaElTiFoHw05o4EKYX1hOGXMGVydGpmdi2jezPA
H6KYoCo/Pn7Kh2Z8XEkDpSYngT3v3B6eVZTOJa13JZO0CWPmAC0k07ERM0wvf9GN
VJpYKtaG/Q6eZk2bXIGYCKM1oo8oWAftQWvg/J3/sm4NViaA1IFXD4Ftu3Cm5t71
gLmcLW2MsOSrNkElc1uPkd1FrXovTiDw6VNZNnsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqh75hRIaKvMMmFhXwTYiqfLD8bDAfBgNVHSMEGDAWgBQXlayEPNi6kBiP
cxNlK7VhKZspbzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Y1V3NoRHpZdXBBWWozTVRaU3UxWVNtYktXOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGEvNjY4M2Y0LTNlZWMtNGRjYi04Nzg3LTczMWFiYzZmNzVjYS8x
LzZvZS1ZVVNHaXJ6REpoWVY4RTJJcW55d19Hdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEv
NjY4M2Y0LTNlZWMtNGRjYi04Nzg3LTczMWFiYzZmNzVjYS8xL0Y1V3NoRHpZdXBB
WWozTVRaU3UxWVNtYktXOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFnI9jANBgkqhkiG9w0BAQsFAAOC
AQEANrJ2lu2Mzuui5IBxxQTH7DCAj2oUFyck2koXKN8hGkH/Mgm/f2OO8aHNDdJt
SwgKYUt2Lycev8w8JjHbwFfBgVcft8Sm2qIipKGjcDuHcrHdZiDRiqwzdHJDwSVD
VR9xYlz+15oUzE39b30FqzQBR2m93z7UAAxJiBVgaketoo+bnsmCvTMd9Hkj81yS
SAl8GKyBsw5CyWZs2TRmojCgjHbMfwJwCo4ewWucYyhRkZztdG8Yxaz/pU3u5QB2
BQcITJaZWYgJ7ZPQ76QKcG4r5MVRWribZCWaBRLEKW37R4AZvzEVwCQQzDJ/do3Y
VD3v+ID0bQT1mP94ag6Hhc6p/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:19 2024 by rpki-client on console-fra.rpki-client.org