Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/am6r6UAh82h721hIxtOskbzwgHs.roa
File: am6r6UAh82h721hIxtOskbzwgHs.roa (raw, json)
Hash identifier: NpICauk8v/o7l//ynT/y0pH9mOeJ65nJs64TzEvaC/I=
Subject key identifier: 6A:6E:AB:E9:40:21:F3:68:7B:DB:58:48:C6:D3:AC:91:BC:F0:80:7B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 018571BA126320C18C21BF20932DA245D1FE
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/am6r6UAh82h721hIxtOskbzwgHs.roa
Signing time: Mon 02 Jan 2023 09:04:57 +0000
ROA not before: Mon 02 Jan 2023 09:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207673
IP address blocks: 194.76.58.0/23 maxlen: 23
194.76.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:12:63:20:c1:8c:21:bf:20:93:2d:a2:45:d1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Jan 2 09:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6eabe94021f3687bdb5848c6d3ac91bcf0807b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:3f:db:ba:38:76:90:7b:de:f7:bf:ba:02:
95:f5:db:b6:cb:43:d8:2a:84:a7:bd:3c:93:55:c0:
09:9f:99:8b:03:70:0d:b1:0e:b8:54:b2:38:d3:89:
4e:58:e5:ac:3a:aa:91:fd:ec:66:48:27:d7:0c:eb:
87:18:96:d2:4a:33:a5:1d:5c:0b:0b:6c:8b:eb:8c:
4e:1a:9a:b5:5c:20:09:f3:f6:5b:d7:ab:ed:70:6b:
50:22:e5:e7:5e:b2:e6:df:d8:85:32:d2:74:3e:53:
02:d0:cd:0b:1e:fe:14:7a:d0:23:d3:df:c1:9c:97:
15:39:34:93:ba:df:15:82:c9:21:d6:64:12:25:1a:
41:4e:ad:d8:10:53:6c:73:67:cc:f7:ee:f5:b4:ca:
c1:f6:38:55:0c:63:e2:b7:47:4d:44:ff:7a:f2:65:
89:8b:13:24:b7:db:36:12:fb:16:6c:1d:e5:c2:27:
20:fd:b6:a9:d9:ee:22:8b:c0:0d:93:ae:3c:ad:2b:
5a:f7:3a:39:c4:ed:2b:74:f5:e0:85:35:76:b6:dc:
69:f2:33:be:44:3e:63:81:bb:1d:dd:95:a3:18:e3:
12:b6:92:db:27:77:c4:b9:a5:bd:6e:0e:70:64:f8:
db:6b:bf:b1:4d:e1:5e:b7:08:33:f4:3d:17:e0:f0:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6E:AB:E9:40:21:F3:68:7B:DB:58:48:C6:D3:AC:91:BC:F0:80:7B
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/am6r6UAh82h721hIxtOskbzwgHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.58.0/23
194.76.104.0/23
Signature Algorithm: sha256WithRSAEncryption
44:d9:91:d3:54:af:52:36:29:79:7a:f4:fa:34:41:75:d6:35:
ea:75:14:7c:af:fc:40:08:32:be:32:bd:3e:73:85:15:ae:35:
a8:94:fe:c3:46:12:ad:3d:cc:e1:8e:38:dd:0c:8d:9b:1b:52:
39:ad:1e:0b:ef:20:d5:51:9d:69:41:e9:22:b0:9c:8f:49:7a:
ac:de:c2:07:87:e7:b7:71:75:cf:ce:dc:4c:1c:d2:6f:4f:9e:
62:00:cf:75:83:71:c2:cf:33:6e:ea:66:4c:15:c9:7e:cc:69:
fa:69:1f:cc:03:c7:af:f5:1b:67:83:41:06:d7:7c:ba:bd:4f:
dd:43:c4:40:5a:c2:6f:86:cf:50:d5:a1:97:a9:18:32:fc:c1:
ba:81:54:f9:f6:4c:4e:02:af:73:b0:94:9d:5e:f9:62:9a:f9:
d9:ff:b2:6f:75:a0:e6:67:ee:82:be:7e:3e:e1:b6:db:2e:f9:
a0:70:0d:84:cf:df:a9:a9:ea:fb:d6:57:ee:cb:88:d1:8f:62:
95:a8:6c:7b:b1:f1:be:91:5c:60:e1:2b:21:73:c6:1d:5a:e8:
81:cc:9b:36:18:2b:fa:9d:98:96:88:18:96:c5:30:ea:03:41:
9d:ab:cb:93:80:78:e8:a9:25:3d:ec:8b:a3:5f:e1:46:20:4e:
08:e9:01:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxuhJjIMGMIb8gky2iRdH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjQwZWU3NDg5ZTk1YzU3ZjEwNDI3MTkxOWRhMjY4YmM1
MTNmOWIwHhcNMjMwMTAyMDkwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTZlYWJlOTQwMjFmMzY4N2JkYjU4NDhjNmQzYWM5MWJjZjA4MDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGI/27o4dpB73ve/ugKV9du2y0PY
KoSnvTyTVcAJn5mLA3ANsQ64VLI404lOWOWsOqqR/exmSCfXDOuHGJbSSjOlHVwL
C2yL64xOGpq1XCAJ8/Zb16vtcGtQIuXnXrLm39iFMtJ0PlMC0M0LHv4UetAj09/B
nJcVOTSTut8Vgskh1mQSJRpBTq3YEFNsc2fM9+71tMrB9jhVDGPit0dNRP968mWJ
ixMkt9s2EvsWbB3lwicg/bap2e4ii8ANk648rSta9zo5xO0rdPXghTV2ttxp8jO+
RD5jgbsd3ZWjGOMStpLbJ3fEuaW9bg5wZPjba7+xTeFetwgz9D0X4PCvAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGpuq+lAIfNoe9tYSMbTrJG88IB7MB8GA1UdIwQY
MBaAFF30DudInpXFfxBCcZGdomi8UT+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hN2U4NTAtMDBiZS00ZGMyLThjNDEt
Mzg2NmI5NWY0ODVmLzEvYW02cjZVQWg4Mmg3MjFoSXh0T3NrYnp3Z0hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hN2U4NTAtMDBiZS00ZGMyLThjNDEtMzg2NmI5NWY0ODVm
LzEvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwkw6AwQB
wkxoMA0GCSqGSIb3DQEBCwUAA4IBAQBE2ZHTVK9SNil5evT6NEF11jXqdRR8r/xA
CDK+Mr0+c4UVrjWolP7DRhKtPczhjjjdDI2bG1I5rR4L7yDVUZ1pQekisJyPSXqs
3sIHh+e3cXXPztxMHNJvT55iAM91g3HCzzNu6mZMFcl+zGn6aR/MA8ev9Rtng0EG
13y6vU/dQ8RAWsJvhs9Q1aGXqRgy/MG6gVT59kxOAq9zsJSdXvlimvnZ/7JvdaDm
Z+6Cvn4+4bbbLvmgcA2Ez9+pqer71lfuy4jRj2KVqGx7sfG+kVxg4Sshc8YdWuiB
zJs2GCv6nZiWiBiWxTDqA0Gdq8uTgHjoqSU97IujX+FGIE4I6QGk
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:23 2025 by rpki-client