Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6N3gGiux0Id1FUuEnTCjGUGmSqY.roa
File: 6N3gGiux0Id1FUuEnTCjGUGmSqY.roa (raw, json)
Hash identifier: wd7O3P1XDWVib4dYbhu30sbcwcVr6nzy0h1MLWXFufg=
Subject key identifier: E8:DD:E0:1A:2B:B1:D0:87:75:15:4B:84:9D:30:A3:19:41:A6:4A:A6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E0CC4EB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6N3gGiux0Id1FUuEnTCjGUGmSqY.roa
Signing time: Sat 01 Jan 2022 01:58:10 +0000
ROA not before: Sat 01 Jan 2022 01:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 194.87.207.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235717867 (0xe0cc4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8dde01a2bb1d08775154b849d30a31941a64aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:19:a8:65:3a:8c:52:99:49:4a:cc:6d:54:
d9:78:26:47:a1:98:7c:37:7b:04:a0:a7:06:1c:26:
37:de:3d:ed:9f:bc:b3:57:58:28:e1:b1:dd:da:b6:
02:cb:ce:62:fe:eb:c1:05:4a:84:82:71:a3:a0:a6:
4f:69:dc:af:af:65:04:97:9f:07:40:d0:03:d1:e4:
16:01:c0:a7:38:54:ad:37:e6:99:28:74:67:6f:fd:
92:d9:f4:27:9b:15:f5:13:b0:7d:9e:8e:9d:a1:aa:
03:d8:da:5f:e3:e1:04:f3:d0:23:3b:16:e4:53:a0:
5f:fd:76:5b:dd:bb:0b:e0:20:04:d4:d1:63:7d:4b:
04:fd:ce:cf:4e:ba:ee:da:a9:60:ac:dd:e3:bc:4d:
81:cb:47:7e:ea:c7:ff:6a:48:cf:5b:80:fe:ef:4a:
f6:9a:8a:b3:87:9b:47:08:60:ae:98:6c:e4:9c:4b:
b1:08:05:96:e0:fe:df:e4:da:50:c9:c8:da:2c:63:
85:e9:2f:de:1c:5f:ae:fc:94:16:19:50:75:71:99:
5a:ad:35:d1:9d:5b:c3:a6:67:0c:f5:d9:3c:9f:42:
5a:fc:b2:97:04:b0:da:ab:d7:df:0b:3e:91:ec:b0:
29:20:86:e4:3d:12:af:c1:43:71:f9:af:49:d2:ae:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DD:E0:1A:2B:B1:D0:87:75:15:4B:84:9D:30:A3:19:41:A6:4A:A6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6N3gGiux0Id1FUuEnTCjGUGmSqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.207.0/24
194.135.30.0/24
195.58.34.0/24
Signature Algorithm: sha256WithRSAEncryption
01:30:3b:2b:a4:51:01:7a:4c:4f:4d:a3:b5:e8:5d:4a:f0:5a:
6b:87:60:d9:94:3a:0d:6c:8e:59:cf:17:23:a1:d3:6d:a5:55:
9d:88:e6:8d:ab:ef:f5:6e:9f:e1:e5:cc:28:3a:41:56:2c:3a:
5b:a7:e3:04:38:09:f0:26:b8:0b:3b:39:f7:7d:1e:6a:77:2e:
49:ad:be:39:39:61:fc:0a:82:f6:c5:cb:a2:a5:c1:7e:2c:70:
a8:79:75:dc:6a:b8:18:53:b2:13:1b:4d:cb:3e:c7:3a:04:fe:
35:53:c2:dd:5e:a8:81:7a:0e:b4:23:6c:64:2a:a3:20:4f:23:
91:ac:4f:d3:98:7f:e0:a7:40:e9:d7:fb:3b:24:6a:30:1f:a9:
11:0a:f0:b5:d0:8f:c7:47:33:0f:d1:02:0e:28:97:21:1e:94:
fe:6d:98:5a:aa:3a:e3:63:d9:6b:97:00:96:fa:95:ad:f1:e5:
c9:92:fc:34:f8:8a:1f:7d:75:3e:46:3e:54:89:5d:bc:cd:1f:
4d:de:8e:52:19:3a:bc:0a:4d:06:f9:23:ab:47:4f:58:5e:a8:
b1:49:ec:84:1c:b9:3e:14:76:dd:e0:be:ea:a6:4a:18:b6:34:
16:bf:d4:d2:a3:0e:6e:41:1d:76:8d:4f:42:f1:89:e9:ca:9c:
8b:47:1f:76
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEDgzE6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDEw
MTAxNTgxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZThkZGUwMWEyYmIx
ZDA4Nzc1MTU0Yjg0OWQzMGEzMTk0MWE2NGFhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ1hGahlOoxSmUlKzG1U2XgmR6GYfDd7BKCnBhwmN9497Z+8
s1dYKOGx3dq2AsvOYv7rwQVKhIJxo6CmT2ncr69lBJefB0DQA9HkFgHApzhUrTfm
mSh0Z2/9ktn0J5sV9ROwfZ6OnaGqA9jaX+PhBPPQIzsW5FOgX/12W927C+AgBNTR
Y31LBP3Oz0667tqpYKzd47xNgctHfurH/2pIz1uA/u9K9pqKs4ebRwhgrphs5JxL
sQgFluD+3+TaUMnI2ixjhekv3hxfrvyUFhlQdXGZWq010Z1bw6ZnDPXZPJ9CWvyy
lwSw2qvX3ws+keywKSCG5D0Sr8FDcfmvSdKuplcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTo3eAaK7HQh3UVS4SdMKMZQaZKpjAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
LzZOM2dHaXV4MElkMUZVdUVuVENqR1VHbVNxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMJXzwMEAMKHHgMEAMM6IjANBgkq
hkiG9w0BAQsFAAOCAQEAATA7K6RRAXpMT02jtehdSvBaa4dg2ZQ6DWyOWc8XI6HT
baVVnYjmjavv9W6f4eXMKDpBViw6W6fjBDgJ8Ca4Czs5930eancuSa2+OTlh/AqC
9sXLoqXBfixwqHl13Gq4GFOyExtNyz7HOgT+NVPC3V6ogXoOtCNsZCqjIE8jkaxP
05h/4KdA6df7OyRqMB+pEQrwtdCPx0czD9ECDiiXIR6U/m2YWqo642PZa5cAlvqV
rfHlyZL8NPiKH311PkY+VIldvM0fTd6OUhk6vApNBvkjq0dPWF6osUnshBy5PhR2
3eC+6qZKGLY0Fr/U0qMObkEddo1PQvGJ6cqci0cfdg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org