Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/q2jEOFCKQ-vdr6cQ4TPriOvKLHQ.roa
File: q2jEOFCKQ-vdr6cQ4TPriOvKLHQ.roa (raw, json)
Hash identifier: 6QmdXNOQQWHvAgMRWCCdO9W72QXgAeTsEPgvpwFvmSg=
Subject key identifier: AB:68:C4:38:50:8A:43:EB:DD:AF:A7:10:E1:33:EB:88:EB:CA:2C:74
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 34D67EA7
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/q2jEOFCKQ-vdr6cQ4TPriOvKLHQ.roa
Signing time: Sat 01 Jan 2022 15:01:32 +0000
ROA not before: Sat 01 Jan 2022 15:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16243
IP address blocks: 217.114.96.0/20 maxlen: 24
185.76.16.0/22 maxlen: 24
77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
2001:1540::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886472359 (0x34d67ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Jan 1 15:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab68c438508a43ebddafa710e133eb88ebca2c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:3f:b0:20:dd:f4:82:5e:ef:57:77:f4:d4:
e5:d4:94:6a:c0:68:74:25:ae:52:25:28:23:e6:c4:
7d:96:38:54:50:7e:6d:9c:ac:8a:16:b9:6c:b0:de:
95:1e:b3:26:b2:e1:32:f4:b1:ba:e5:eb:b3:8f:03:
68:57:83:11:7f:b7:00:a2:1e:9a:19:e9:f7:28:22:
b8:ac:8f:11:1d:46:fe:23:24:4b:29:1e:af:dd:31:
c7:60:5e:ea:2d:69:16:d3:2d:a9:42:17:68:a7:34:
ed:4c:b3:77:56:fe:2e:cd:6d:db:c6:73:f9:45:2e:
e4:8c:89:11:ad:29:fe:ef:ce:10:f7:4e:bf:6e:d7:
8e:91:bb:fc:3a:4b:18:53:1a:f5:d5:20:4a:7d:2d:
85:e8:f9:b5:84:fc:4b:ed:ab:a3:e5:c8:40:6e:9d:
d6:44:0c:eb:69:da:f7:dd:e6:fe:99:5d:2e:73:62:
3f:94:a8:9e:89:ec:11:02:f9:a6:de:e1:71:99:64:
4f:2f:ae:71:a7:47:37:b0:3f:c3:45:89:38:1d:44:
78:21:02:29:7c:d3:74:a9:0b:36:89:9e:cd:73:56:
78:59:db:39:73:0f:77:da:8a:7d:d9:3d:8f:fe:8b:
24:5e:88:da:0c:f3:32:e1:f9:cb:6f:ca:75:d2:a5:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:C4:38:50:8A:43:EB:DD:AF:A7:10:E1:33:EB:88:EB:CA:2C:74
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/q2jEOFCKQ-vdr6cQ4TPriOvKLHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
Signature Algorithm: sha256WithRSAEncryption
0d:22:f8:23:b1:6c:49:ed:d6:66:37:5e:81:1b:4d:25:0a:99:
0e:d0:d6:80:35:72:bd:b1:61:5c:89:c7:7c:6c:d4:5d:1c:0c:
36:bf:a7:01:d4:5f:eb:0b:8f:69:d8:80:64:b9:ae:0d:62:20:
df:45:0e:cd:83:f5:d6:f6:74:d6:9e:d7:eb:51:6e:9e:3e:75:
39:cb:d0:e9:83:dc:80:ff:ff:ff:04:48:ee:38:28:f3:81:7c:
34:a0:1e:dd:49:99:bc:48:6b:44:2b:a5:b6:68:b8:d2:fa:ca:
06:a6:e4:bd:93:c3:fc:93:ff:b4:55:33:9c:5b:47:6d:6a:83:
56:86:c5:b4:5c:5b:27:4f:48:52:37:0d:11:8d:86:f3:42:1a:
4f:89:bb:40:11:f8:30:78:e9:f5:b5:9a:07:5f:08:9c:95:01:
19:26:6f:2c:46:fc:c5:a6:2d:42:48:29:fa:60:24:a5:5e:12:
af:37:6b:01:97:d3:9e:b2:85:b9:aa:98:52:7f:53:b4:b0:fe:
01:15:e7:a5:d3:19:f7:07:26:61:95:81:44:4e:ba:38:15:f5:
63:18:56:84:cb:c7:83:54:70:d6:5a:1a:67:f2:47:61:b6:7d:
73:26:b5:cc:68:d1:96:e0:6f:d3:34:65:69:70:b7:2d:5f:9a:
1d:88:d9:cc
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIENNZ+pzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OTkyYTAzNWJmZmM1YTQxNDEyYzQ5N2MxMjg1ZDE4MzgyMzRmZmIwMB4XDTIyMDEw
MTE1MDEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWI2OGM0Mzg1MDhh
NDNlYmRkYWZhNzEwZTEzM2ViODhlYmNhMmM3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOV5P7Ag3fSCXu9Xd/TU5dSUasBodCWuUiUoI+bEfZY4VFB+
bZysiha5bLDelR6zJrLhMvSxuuXrs48DaFeDEX+3AKIemhnp9ygiuKyPER1G/iMk
Syker90xx2Be6i1pFtMtqUIXaKc07Uyzd1b+Ls1t28Zz+UUu5IyJEa0p/u/OEPdO
v27XjpG7/DpLGFMa9dUgSn0thej5tYT8S+2ro+XIQG6d1kQM62na993m/pldLnNi
P5SononsEQL5pt7hcZlkTy+ucadHN7A/w0WJOB1EeCECKXzTdKkLNomezXNWeFnb
OXMPd9qKfdk9j/6LJF6I2gzzMuH5y2/KddKlOM0CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBSraMQ4UIpD692vpxDhM+uI68osdDAfBgNVHSMEGDAWgBTpkqA1v/xaQUEs
SXwShdGDgjT/sDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZaS2dOYl84V2tGQkxFbDhFb1hSZzRJMF83QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDYvNWY1ZjZiLTM1ZTQtNDM5MS05NTE5LWI5N2QzMzZlYTJmNS8x
L3EyakVPRkNLUS12ZHI2Y1E0VFByaU92S0xIUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYv
NWY1ZjZiLTM1ZTQtNDM5MS05NTE5LWI5N2QzMzZlYTJmNS8xLzZaS2dOYl84V2tG
QkxFbDhFb1hSZzRJMF83QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBU3eQAMEBVf5YAMEArlMEAMEBNly
YDANBAIAAjAHAwUAIAEVQDANBgkqhkiG9w0BAQsFAAOCAQEADSL4I7FsSe3WZjde
gRtNJQqZDtDWgDVyvbFhXInHfGzUXRwMNr+nAdRf6wuPadiAZLmuDWIg30UOzYP1
1vZ01p7X61Funj51OcvQ6YPcgP///wRI7jgo84F8NKAe3UmZvEhrRCultmi40vrK
BqbkvZPD/JP/tFUznFtHbWqDVobFtFxbJ09IUjcNEY2G80IaT4m7QBH4MHjp9bWa
B18InJUBGSZvLEb8xaYtQkgp+mAkpV4SrzdrAZfTnrKFuaqYUn9TtLD+ARXnpdMZ
9wcmYZWBRE66OBX1YxhWhMvHg1Rw1loaZ/JHYbZ9cya1zGjRluBv0zRlaXC3LV+a
HYjZzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:33 2024 by rpki-client on console-fra.rpki-client.org