Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/e5WplqMnj5KB8iNrZ4DL9qf47nI.roa
File: e5WplqMnj5KB8iNrZ4DL9qf47nI.roa (raw, json)
Hash identifier: oZ+Ty08F23W4itds/2UcrTrLoXeA5Uke3d30lE+4WWE=
Subject key identifier: 7B:95:A9:96:A3:27:8F:92:81:F2:23:6B:67:80:CB:F6:A7:F8:EE:72
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 1C6E2F78
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/e5WplqMnj5KB8iNrZ4DL9qf47nI.roa
Signing time: Sat 01 Jan 2022 09:58:11 +0000
ROA not before: Sat 01 Jan 2022 09:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206123
IP address blocks: 176.10.116.0/24 maxlen: 24
185.32.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476983160 (0x1c6e2f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 1 09:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b95a996a3278f9281f2236b6780cbf6a7f8ee72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:de:e9:87:cb:81:85:08:39:62:c3:ed:9e:
dd:c4:4b:55:ed:29:b4:59:f8:e3:90:a2:13:c8:07:
43:f4:cf:ab:24:8d:74:d4:0e:06:5b:3d:f0:b2:5a:
85:d5:e7:9b:18:86:38:92:46:36:3a:3d:4e:ee:5d:
ca:56:b8:50:36:6f:ec:5e:cb:7f:4c:a8:5a:59:37:
cb:1f:9b:e8:f6:fe:85:9f:13:d7:80:4b:9f:73:40:
75:c5:72:87:73:33:ee:86:1a:2c:67:78:4e:94:3c:
ef:88:ea:08:a4:0a:94:27:b0:88:57:9e:af:26:a0:
08:3b:6f:8d:23:7b:9b:af:cb:44:0f:ff:84:f2:ba:
74:4b:d7:a4:5e:f2:c5:77:87:be:88:a2:c3:b8:3c:
35:ae:b7:d4:07:9d:85:fc:39:91:6f:e4:7c:8c:f4:
b2:5a:0f:9c:7c:5a:2b:ea:58:73:0b:25:8d:3e:92:
db:75:50:be:f7:20:55:ed:1e:f9:0b:11:cd:2a:3f:
34:27:22:0b:99:6e:26:6c:14:fd:9f:c6:70:24:13:
95:d7:b7:59:80:8a:8c:92:bb:29:93:58:eb:e8:6e:
1d:64:2c:67:e1:ac:63:4a:12:63:6b:65:83:03:7b:
fa:a2:b8:69:c9:1c:af:cd:43:c2:03:7a:f9:9f:79:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:A9:96:A3:27:8F:92:81:F2:23:6B:67:80:CB:F6:A7:F8:EE:72
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/e5WplqMnj5KB8iNrZ4DL9qf47nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.116.0/24
185.32.221.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e9:4f:56:f0:71:af:e8:59:cf:3b:8a:21:67:97:b7:56:52:
66:2e:e5:43:c4:07:e9:18:9e:fa:99:bf:b0:aa:b0:74:f6:ef:
c8:c8:d3:68:42:8c:3a:6a:72:98:11:66:b1:d0:8d:fa:76:d6:
1b:2d:b5:d9:bd:31:d8:c6:e3:7b:a0:be:33:b6:0b:4e:c2:ae:
6a:00:ff:cf:2e:ec:19:cb:d1:5e:94:51:dd:03:e9:a5:5b:43:
68:ac:c7:99:8f:32:cd:8d:ad:bb:22:15:84:08:54:b8:46:15:
cb:cc:25:50:9b:92:2d:22:0a:43:ab:83:10:ed:68:8c:c9:b0:
25:e4:77:03:7c:3f:d0:b4:8f:02:78:65:ee:17:c5:0a:5e:71:
13:07:83:f6:c0:8b:57:0e:a8:69:1a:14:e4:37:36:23:19:ac:
7c:8e:5f:9e:a0:6a:94:7d:ac:70:fc:08:5f:a7:6d:af:60:76:
a4:27:6b:5b:1d:b8:a7:5f:c5:36:11:67:b1:3f:97:62:80:50:
b4:3a:ba:f9:fd:ff:3e:b4:4d:50:fd:7b:5b:14:5a:57:ab:11:
6d:84:62:96:92:b4:c5:bf:db:d0:9d:bd:61:21:93:da:57:a8:
e8:4b:84:46:b2:1b:1b:15:85:d8:82:d9:4b:f7:f7:73:77:a2:
fa:7a:4d:15
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHG4veDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NmRhMWM2YjFhNjVmN2EzZDk3ZjliZDc1ZTdjYWMzMTM1MjQ2ZmE1MB4XDTIyMDEw
MTA5NTgxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2I5NWE5OTZhMzI3
OGY5MjgxZjIyMzZiNjc4MGNiZjZhN2Y4ZWU3MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1i3umHy4GFCDliw+2e3cRLVe0ptFn445CiE8gHQ/TPqySN
dNQOBls98LJahdXnmxiGOJJGNjo9Tu5dyla4UDZv7F7Lf0yoWlk3yx+b6Pb+hZ8T
14BLn3NAdcVyh3Mz7oYaLGd4TpQ874jqCKQKlCewiFeeryagCDtvjSN7m6/LRA//
hPK6dEvXpF7yxXeHvoiiw7g8Na631Aedhfw5kW/kfIz0sloPnHxaK+pYcwsljT6S
23VQvvcgVe0e+QsRzSo/NCciC5luJmwU/Z/GcCQTlde3WYCKjJK7KZNY6+huHWQs
Z+GsY0oSY2tlgwN7+qK4ackcr81DwgN6+Z95MasCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR7lamWoyePkoHyI2tngMv2p/jucjAfBgNVHSMEGDAWgBQG2hxrGmX3o9l/
m9defKwxNSRvpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0J0b2NheHBsOTZQWmY1dlhYbnlzTVRVa2I2VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvNjJhM2IxLTExN2QtNGIxNy05NjYyLTQ1ZWI3MzhjYjljOC8x
L2U1V3BscU1uajVLQjhpTnJaNERMOXFmNDduSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
NjJhM2IxLTExN2QtNGIxNy05NjYyLTQ1ZWI3MzhjYjljOC8xL0J0b2NheHBsOTZQ
WmY1dlhYbnlzTVRVa2I2VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALAKdAMEALkg3TANBgkqhkiG9w0B
AQsFAAOCAQEAB+lPVvBxr+hZzzuKIWeXt1ZSZi7lQ8QH6Rie+pm/sKqwdPbvyMjT
aEKMOmpymBFmsdCN+nbWGy212b0x2Mbje6C+M7YLTsKuagD/zy7sGcvRXpRR3QPp
pVtDaKzHmY8yzY2tuyIVhAhUuEYVy8wlUJuSLSIKQ6uDEO1ojMmwJeR3A3w/0LSP
Anhl7hfFCl5xEweD9sCLVw6oaRoU5Dc2IxmsfI5fnqBqlH2scPwIX6dtr2B2pCdr
Wx24p1/FNhFnsT+XYoBQtDq6+f3/PrRNUP17WxRaV6sRbYRilpK0xb/b0J29YSGT
2leo6EuERrIbGxWF2ILZS/f3c3ei+npNFQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:47 2023 by rpki-client on console-fra.rpki-client.org