Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Cg6aDzQk0Fe_Q6e0WU5yjkNJ96E.roa
File: Cg6aDzQk0Fe_Q6e0WU5yjkNJ96E.roa (raw, json)
Hash identifier: GRbXcRu6hLeyAONhSvCmSGGtY86TJ3qWDzochFICbBo=
Subject key identifier: 0A:0E:9A:0F:34:24:D0:57:BF:43:A7:B4:59:4E:72:8E:43:49:F7:A1
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 079E7421
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Cg6aDzQk0Fe_Q6e0WU5yjkNJ96E.roa
Signing time: Mon 28 Feb 2022 10:44:36 +0000
ROA not before: Mon 28 Feb 2022 10:44:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8330
IP address blocks: 91.198.81.0/24 maxlen: 24
5.57.88.0/21 maxlen: 21
193.203.5.0/24 maxlen: 24
195.35.120.0/24 maxlen: 24
2001:7f8:17::/48 maxlen: 48
2a00:eb20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127824929 (0x79e7421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Feb 28 10:44:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a0e9a0f3424d057bf43a7b4594e728e4349f7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:f3:ef:e8:f1:3d:bb:2c:fa:da:59:89:b9:
da:59:a9:a3:b7:92:2e:82:ae:07:08:93:3c:a4:98:
ed:cc:bd:f9:0c:82:1e:3f:dd:91:e0:c1:1c:07:5b:
48:8d:ce:21:67:d1:c8:a2:77:6c:d9:99:73:1c:97:
4a:d0:58:65:90:ed:08:3b:7f:06:50:84:bb:59:11:
e8:b3:a9:47:70:a1:22:42:a5:e8:94:68:8d:31:b1:
9f:84:9b:ef:b3:ef:24:aa:f9:40:0e:3f:50:77:eb:
e9:36:c0:69:04:60:04:9f:ae:a0:48:29:c0:98:55:
12:b9:51:4f:3c:73:af:80:42:21:3e:57:87:f5:01:
7d:72:66:ab:ba:c7:d5:2b:24:33:8c:61:af:c6:ac:
71:25:06:41:db:af:ab:b0:b7:97:5e:eb:8d:24:0a:
ce:38:b8:29:1b:78:cb:a2:9e:0b:6d:46:30:8b:67:
98:33:f2:22:65:63:75:c5:87:5b:93:72:e2:55:ab:
31:1c:15:ff:a9:c1:12:63:79:a6:bb:5e:d7:38:3a:
9e:36:36:51:0a:b2:d1:0f:5a:ea:4e:e8:18:3a:a6:
50:9f:ab:b8:0e:df:d6:ab:ff:84:82:80:b1:49:44:
ab:28:8f:d6:91:95:64:2d:5b:7a:c9:4d:c4:4c:2e:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:9A:0F:34:24:D0:57:BF:43:A7:B4:59:4E:72:8E:43:49:F7:A1
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Cg6aDzQk0Fe_Q6e0WU5yjkNJ96E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.88.0/21
91.198.81.0/24
193.203.5.0/24
195.35.120.0/24
IPv6:
2001:7f8:17::/48
2a00:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
1b:37:69:94:33:a1:4f:cc:83:a6:83:7c:68:88:7c:91:05:46:
b3:5d:21:cc:e0:c2:4b:89:c9:ec:b0:60:07:f8:3e:37:2d:be:
ff:0b:68:cc:74:e0:3e:e7:7a:2a:b5:8d:f6:8e:95:c1:70:71:
2c:1e:2e:14:bf:39:3d:3e:b5:81:1e:cd:51:6c:bf:47:e0:5c:
24:37:9b:df:89:93:c0:ea:f7:86:d1:44:e1:2a:ff:31:e5:8a:
7f:9d:d1:d1:a6:9a:04:4b:73:98:8f:92:89:87:e6:c4:0c:16:
6a:1a:db:46:08:26:3c:f9:b8:cc:b2:fd:e8:8a:78:63:38:fd:
6f:d6:f9:34:e9:1d:b4:f1:f2:75:f0:3e:be:86:b8:d7:37:d8:
d5:62:d9:07:ff:c1:d6:38:b8:23:96:f6:3b:09:de:56:da:3d:
5e:53:8d:2f:23:84:4f:c4:87:9d:99:9e:7a:4f:e7:94:87:99:
b3:64:41:83:07:f5:8d:fb:8e:42:53:9c:c0:1a:5f:ac:a3:c0:
aa:4e:96:ad:bb:05:3b:57:b0:ce:7f:96:4e:eb:10:b1:f4:27:
ab:80:72:03:a3:03:e8:0d:f1:1c:dc:b5:78:a4:9e:c6:03:5a:
9b:14:02:62:b0:63:00:62:e5:ee:93:21:7b:e0:94:7d:84:5f:
1e:6a:ae:6e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIEB550ITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZThkMDdiNDVmN2Q4MzEyNGM5ZjhjMGZhYzAzYmVjMDI0NjhiMzdlMB4XDTIyMDIy
ODEwNDQzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGEwZTlhMGYzNDI0
ZDA1N2JmNDNhN2I0NTk0ZTcyOGU0MzQ5ZjdhMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALks8+/o8T27LPraWYm52lmpo7eSLoKuBwiTPKSY7cy9+QyC
Hj/dkeDBHAdbSI3OIWfRyKJ3bNmZcxyXStBYZZDtCDt/BlCEu1kR6LOpR3ChIkKl
6JRojTGxn4Sb77PvJKr5QA4/UHfr6TbAaQRgBJ+uoEgpwJhVErlRTzxzr4BCIT5X
h/UBfXJmq7rH1SskM4xhr8ascSUGQduvq7C3l17rjSQKzji4KRt4y6KeC21GMItn
mDPyImVjdcWHW5Ny4lWrMRwV/6nBEmN5prte1zg6njY2UQqy0Q9a6k7oGDqmUJ+r
uA7f1qv/hIKAsUlEqyiP1pGVZC1beslNxEwuk1UCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBQKDpoPNCTQV79Dp7RZTnKOQ0n3oTAfBgNVHSMEGDAWgBRejQe0X32DEkyf
jA+sA77AJGizfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hvMEh0Rjk5Z3hKTW40d1ByQU8td0NSb3MzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTIvYTE2OGU5LWQwNzAtNDRlMC05NGE0LTZjOGZkODRiYjVmNS8x
L0NnNmFEelFrMEZlX1E2ZTBXVTV5amtOSjk2RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIv
YTE2OGU5LWQwNzAtNDRlMC05NGE0LTZjOGZkODRiYjVmNS8xL1hvMEh0Rjk5Z3hK
TW40d1ByQU8td0NSb3MzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwHgQCAAEwGAMEAwU5WAMEAFvGUQMEAMHLBQMEAMMj
eDAWBAIAAjAQAwcAIAEH+AAXAwUAKgDrIDANBgkqhkiG9w0BAQsFAAOCAQEAGzdp
lDOhT8yDpoN8aIh8kQVGs10hzODCS4nJ7LBgB/g+Ny2+/wtozHTgPud6KrWN9o6V
wXBxLB4uFL85PT61gR7NUWy/R+BcJDeb34mTwOr3htFE4Sr/MeWKf53R0aaaBEtz
mI+SiYfmxAwWahrbRggmPPm4zLL96Ip4Yzj9b9b5NOkdtPHydfA+voa41zfY1WLZ
B//B1ji4I5b2OwneVto9XlONLyOET8SHnZmeek/nlIeZs2RBgwf1jfuOQlOcwBpf
rKPAqk6WrbsFO1ewzn+WTusQsfQnq4ByA6MD6A3xHNy1eKSexgNamxQCYrBjAGLl
7pMhe+CUfYRfHmqubg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:07 2025 by rpki-client