Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/hc5ve8Fwt2ZbVrL5uRLUFHsT8Qc.roa
File: hc5ve8Fwt2ZbVrL5uRLUFHsT8Qc.roa (raw, json)
Hash identifier: x5sRZUpvklm+kJg4PkDwomgtfw+LTlYN9zrJLdmN13o=
Subject key identifier: 85:CE:6F:7B:C1:70:B7:66:5B:56:B2:F9:B9:12:D4:14:7B:13:F1:07
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 06AE9C23
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/hc5ve8Fwt2ZbVrL5uRLUFHsT8Qc.roa
Signing time: Sat 01 Jan 2022 15:55:13 +0000
ROA not before: Sat 01 Jan 2022 15:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30910
IP address blocks: 185.39.16.0/23 maxlen: 23
80.64.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112106531 (0x6ae9c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Jan 1 15:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85ce6f7bc170b7665b56b2f9b912d4147b13f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:f4:25:74:b3:90:59:42:c5:34:8c:5c:3f:
9e:33:2f:53:9e:3d:78:64:57:50:a9:e9:e9:a9:d8:
ba:46:8f:65:dd:a0:9f:b8:a1:b0:e2:dc:25:be:d6:
13:42:14:37:37:98:6b:30:2c:7a:bc:a4:3f:f8:83:
bf:11:d3:1e:b5:b4:19:1c:e6:27:cf:b1:87:1d:4d:
34:36:69:6f:87:47:37:c0:d1:d5:3f:03:45:c7:b9:
ce:12:d4:8c:a0:9b:97:7d:75:cb:78:04:dc:91:c3:
7c:f0:68:e3:8c:7b:64:c7:2b:0c:e5:fe:ac:fa:53:
ec:b4:96:7e:a3:26:b4:7e:f6:63:97:d3:09:9c:76:
62:41:0b:af:8f:04:ad:f4:e5:5f:db:3e:e8:81:b6:
c4:65:fa:2c:8b:cc:29:a1:b2:06:0b:8e:38:71:43:
af:5c:2b:99:b4:d1:9b:95:50:02:db:f1:2e:02:fc:
91:22:82:7c:a1:cf:8a:7d:4f:15:b5:35:eb:bd:64:
d1:3f:6e:3c:58:5f:59:77:26:52:95:ee:b6:32:ae:
2c:0f:d5:15:27:e8:5e:75:c0:7e:ab:dd:bc:3f:f4:
2c:f4:cf:67:2b:77:d9:a8:97:93:1c:5d:77:27:fe:
20:03:db:11:5a:85:e3:de:81:a1:5a:39:cf:3f:06:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:6F:7B:C1:70:B7:66:5B:56:B2:F9:B9:12:D4:14:7B:13:F1:07
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/hc5ve8Fwt2ZbVrL5uRLUFHsT8Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.16.0/21
185.39.16.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:e4:4e:08:ed:f7:6a:46:d2:e3:4f:3f:c9:ce:88:91:26:fc:
72:a8:8d:7a:61:e8:05:3e:f6:e4:1e:21:11:14:4e:08:b2:4f:
4d:f5:16:1e:06:94:89:de:11:76:b2:6f:a9:0f:f2:0c:7b:d6:
8c:03:7e:00:6e:e1:d6:a5:ce:55:6e:87:86:8e:a9:48:3c:21:
f2:97:37:83:21:54:c3:a5:f8:0b:06:61:f9:07:cf:31:d2:84:
f5:b0:b7:8f:c6:cd:9b:0a:9b:2e:ef:77:95:7e:a0:dd:c5:c0:
7f:54:51:f3:d8:a2:a7:72:59:2e:38:6b:d9:75:3a:86:8c:2b:
7c:99:06:74:5e:97:1b:12:02:eb:98:cd:f6:1e:4f:70:b9:06:
d4:60:3d:41:86:2f:45:18:20:47:a7:82:d9:77:2a:b2:e5:fc:
cb:cf:68:a0:d8:09:47:e8:72:91:f1:c6:f5:c1:78:2e:df:4c:
f1:40:0b:dc:f9:c7:06:e5:f6:04:f9:ee:b6:01:14:a8:58:a5:
bd:2e:02:91:2a:46:07:fc:72:39:fa:eb:30:61:02:75:4f:29:
85:fc:f7:78:37:cf:2b:92:39:b7:bb:a9:b6:22:0a:53:1d:4b:
cb:fe:e6:9e:68:01:b0:de:ce:71:bc:13:c5:30:24:36:8b:96:
65:9d:2a:bb
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBq6cIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MDM2YWYyMjY2OTE4M2JhMjZmMjM5NzY1MzBlMzQ5YjM0NjUxOTY4MB4XDTIyMDEw
MTE1NTUxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODVjZTZmN2JjMTcw
Yjc2NjViNTZiMmY5YjkxMmQ0MTQ3YjEzZjEwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKg9CV0s5BZQsU0jFw/njMvU549eGRXUKnp6anYukaPZd2g
n7ihsOLcJb7WE0IUNzeYazAserykP/iDvxHTHrW0GRzmJ8+xhx1NNDZpb4dHN8DR
1T8DRce5zhLUjKCbl311y3gE3JHDfPBo44x7ZMcrDOX+rPpT7LSWfqMmtH72Y5fT
CZx2YkELr48ErfTlX9s+6IG2xGX6LIvMKaGyBguOOHFDr1wrmbTRm5VQAtvxLgL8
kSKCfKHPin1PFbU1671k0T9uPFhfWXcmUpXutjKuLA/VFSfoXnXAfqvdvD/0LPTP
Zyt32aiXkxxddyf+IAPbEVqF496BoVo5zz8Gx+MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSFzm97wXC3ZltWsvm5EtQUexPxBzAfBgNVHSMEGDAWgBSgNq8iZpGDuiby
OXZTDjSbNGUZaDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29EYXZJbWFSZzdvbThqbDJVdzQwbXpSbEdXZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvNmNhNWI2LWM0MjMtNGI1NC05NjU1LTdjNTk2NDk5MDM5Ny8x
L2hjNXZlOEZ3dDJaYlZyTDV1UkxVRkhzVDhRYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
NmNhNWI2LWM0MjMtNGI1NC05NjU1LTdjNTk2NDk5MDM5Ny8xL29EYXZJbWFSZzdv
bThqbDJVdzQwbXpSbEdXZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA1BAEAMEAbknEDANBgkqhkiG9w0B
AQsFAAOCAQEAXuROCO33akbS408/yc6IkSb8cqiNemHoBT725B4hERROCLJPTfUW
HgaUid4RdrJvqQ/yDHvWjAN+AG7h1qXOVW6Hho6pSDwh8pc3gyFUw6X4CwZh+QfP
MdKE9bC3j8bNmwqbLu93lX6g3cXAf1RR89iip3JZLjhr2XU6howrfJkGdF6XGxIC
65jN9h5PcLkG1GA9QYYvRRggR6eC2XcqsuX8y89ooNgJR+hykfHG9cF4Lt9M8UAL
3PnHBuX2BPnutgEUqFilvS4CkSpGB/xyOfrrMGECdU8phfz3eDfPK5I5t7uptiIK
Ux1Ly/7mnmgBsN7OcbwTxTAkNouWZZ0quw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:52 2024 by rpki-client on console-fra.rpki-client.org