Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/Qx5fnXFfyxutBuiMQjID6C1tkvE.roa
File: Qx5fnXFfyxutBuiMQjID6C1tkvE.roa (raw, json)
Hash identifier: g8+LlcQpqB33kMWWYGaCXSiAhBekwv1mMh0026+tqn0=
Subject key identifier: 43:1E:5F:9D:71:5F:CB:1B:AD:06:E8:8C:42:32:03:E8:2D:6D:92:F1
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 0185553CBD545754FAC5C606B79737D4AEE6
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/Qx5fnXFfyxutBuiMQjID6C1tkvE.roa
Signing time: Tue 27 Dec 2022 20:18:41 +0000
ROA not before: Tue 27 Dec 2022 20:18:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212947
IP address blocks: 206.204.107.0/24 maxlen: 24
206.204.106.0/24 maxlen: 24
93.157.187.0/24 maxlen: 24
206.204.104.0/24 maxlen: 24
206.204.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:3c:bd:54:57:54:fa:c5:c6:06:b7:97:37:d4:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Dec 27 20:18:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=431e5f9d715fcb1bad06e88c423203e82d6d92f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:31:53:5c:66:6f:b3:9d:43:ee:0b:29:8d:0e:
fd:88:81:16:cb:44:8a:c0:09:c7:4a:9d:ff:21:9e:
c8:a8:c9:03:d3:c6:1a:ef:c2:68:17:99:35:32:0c:
fb:e4:dc:06:31:9c:79:73:ef:8e:7b:1d:4d:a1:20:
4b:a3:c7:ec:eb:f8:77:98:a9:f6:35:20:30:82:b5:
a7:d5:09:c8:01:b6:00:bc:42:6c:19:f0:f0:2a:54:
be:bb:74:b7:6a:01:a5:96:61:42:8c:02:23:d6:c6:
b4:d4:1b:c1:5d:45:66:b6:c7:b7:6a:5f:d3:91:74:
27:b4:13:e7:a6:d0:b7:cf:a6:f2:40:d1:a7:d4:5f:
54:48:33:a0:74:14:d5:89:26:ac:88:c2:81:2f:f0:
aa:05:8d:9a:de:9b:98:f6:34:0b:50:2c:66:10:ee:
39:8f:f9:e7:fd:f7:70:c9:28:98:4f:33:42:86:27:
66:bd:ac:ae:de:24:1c:e3:d6:43:57:d9:93:2c:9a:
3a:a0:8d:c7:3b:b5:c7:94:ca:61:7a:9c:7f:4d:51:
20:03:19:1a:33:15:fe:4b:83:f6:99:21:00:eb:52:
ae:a3:df:02:01:c1:b8:ad:b9:d3:7d:93:8e:bf:e4:
d3:96:75:3c:8e:a2:f1:c2:77:ea:4f:0b:7b:36:80:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:5F:9D:71:5F:CB:1B:AD:06:E8:8C:42:32:03:E8:2D:6D:92:F1
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/Qx5fnXFfyxutBuiMQjID6C1tkvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.187.0/24
206.204.104.0/22
Signature Algorithm: sha256WithRSAEncryption
71:4a:40:d7:f6:59:b5:90:c4:08:31:09:cd:70:4b:81:ae:d3:
5b:f6:b3:35:a2:46:6c:a1:ea:91:67:37:18:dd:ed:a2:48:d6:
56:3f:f4:e2:db:76:b5:6a:9d:46:6e:04:60:a4:3d:df:0b:84:
a4:66:ae:85:42:40:d2:2d:b8:68:98:a2:01:27:36:44:17:f0:
c7:6f:b3:1a:16:5f:df:96:1e:90:69:1d:61:22:c2:0c:92:54:
a5:88:eb:88:c4:9e:08:07:4b:d1:75:15:0c:48:af:21:ae:cf:
35:93:55:c7:89:17:7b:19:68:ff:56:a6:80:be:6e:02:36:b8:
6a:22:45:af:97:fb:31:85:7b:a5:19:12:4c:a6:91:66:64:2a:
d2:41:90:96:4d:58:4c:8a:ef:d1:43:c1:5a:69:7a:98:f9:48:
78:ff:7a:cc:72:fe:0b:bf:7f:eb:5a:f0:e9:74:18:1d:de:bd:
cb:76:c9:34:e7:d4:ef:45:b7:3a:b9:6e:8a:b3:60:94:5e:04:
00:1b:5c:48:0a:8a:7d:2e:05:72:4e:f3:15:be:22:fa:41:b2:
02:36:e4:c9:34:e0:33:d8:1d:21:e2:9a:7b:79:74:78:f6:60:
48:cf:2a:5e:52:f7:19:77:bf:21:07:81:56:57:ea:8b:07:9a:
90:a5:65:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVVPL1UV1T6xcYGt5c31K7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDFlZjE2M2E2NjFjY2U1YmM2MjExN2VjNzYzNzU4YjFi
NWJiODkwHhcNMjIxMjI3MjAxODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzFlNWY5ZDcxNWZjYjFiYWQwNmU4OGM0MjMyMDNlODJkNmQ5MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDFTXGZvs51D7gspjQ79iIEWy0SK
wAnHSp3/IZ7IqMkD08Ya78JoF5k1Mgz75NwGMZx5c++Oex1NoSBLo8fs6/h3mKn2
NSAwgrWn1QnIAbYAvEJsGfDwKlS+u3S3agGllmFCjAIj1sa01BvBXUVmtse3al/T
kXQntBPnptC3z6byQNGn1F9USDOgdBTViSasiMKBL/CqBY2a3puY9jQLUCxmEO45
j/nn/fdwySiYTzNChidmvayu3iQc49ZDV9mTLJo6oI3HO7XHlMphepx/TVEgAxka
MxX+S4P2mSEA61Kuo98CAcG4rbnTfZOOv+TTlnU8jqLxwnfqTwt7NoABywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEMeX51xX8sbrQbojEIyA+gtbZLxMB8GA1UdIwQY
MBaAFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2Qt
M2E4YTYxMDA2YTRmLzEvUXg1Zm5YRmZ5eHV0QnVpTVFqSUQ2QzF0a3ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2QtM2E4YTYxMDA2YTRm
LzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXZ27AwQC
zsxoMA0GCSqGSIb3DQEBCwUAA4IBAQBxSkDX9lm1kMQIMQnNcEuBrtNb9rM1okZs
oeqRZzcY3e2iSNZWP/Ti23a1ap1GbgRgpD3fC4SkZq6FQkDSLbhomKIBJzZEF/DH
b7MaFl/flh6QaR1hIsIMklSliOuIxJ4IB0vRdRUMSK8hrs81k1XHiRd7GWj/VqaA
vm4CNrhqIkWvl/sxhXulGRJMppFmZCrSQZCWTVhMiu/RQ8FaaXqY+Uh4/3rMcv4L
v3/rWvDpdBgd3r3Ldsk059TvRbc6uW6Ks2CUXgQAG1xICop9LgVyTvMVviL6QbIC
NuTJNOAz2B0h4pp7eXR49mBIzypeUvcZd78hB4FWV+qLB5qQpWWJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:56 2024 by rpki-client on console-ams.rpki-client.org