Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/x-Vw6w--03ADNsFfQ4zO06XI9VI.roa
File: x-Vw6w--03ADNsFfQ4zO06XI9VI.roa (raw, json)
Hash identifier: ckiKmx5g4PEE/1TBDox2L/bgdb2irbZUmE47Np0D/Gs=
Subject key identifier: C7:E5:70:EB:0F:BE:D3:70:03:36:C1:5F:43:8C:CE:D3:A5:C8:F5:52
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CAB2FC3
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/x-Vw6w--03ADNsFfQ4zO06XI9VI.roa
Signing time: Sat 01 Jan 2022 04:59:39 +0000
ROA not before: Sat 01 Jan 2022 04:59:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57966
IP address blocks: 206.252.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749416387 (0x2cab2fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7e570eb0fbed3700336c15f438cced3a5c8f552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:f0:38:97:91:1a:9f:30:80:89:02:63:f9:
f6:00:85:70:89:eb:fd:56:5c:e1:4d:15:98:e0:b5:
2a:c7:2c:e4:26:26:dc:e8:03:74:d8:d8:3b:9f:67:
d5:37:c6:f5:52:1e:46:df:9f:06:98:e0:fe:75:a4:
da:1e:e5:09:5e:ad:bd:69:e2:4b:3c:a9:f1:40:71:
d0:e5:76:f7:46:01:06:61:7c:2a:69:52:44:04:ef:
1d:23:70:ef:cb:f9:8b:9d:be:eb:d1:de:80:0e:41:
85:6c:b9:e3:2a:e7:a1:e4:4e:92:65:e6:8b:90:f0:
33:72:7e:15:23:ca:97:cf:1e:f8:03:00:08:94:b6:
fc:34:77:17:ff:13:f1:7d:72:07:b7:84:8b:e3:cc:
0e:a3:55:e0:7d:e6:67:ac:ff:e9:8b:bc:c2:56:1e:
1c:d3:ae:27:5c:33:14:68:06:91:1e:83:9a:50:4d:
ab:ac:0d:fc:4e:c5:26:91:aa:d8:5e:24:60:ab:ee:
ed:65:4f:c3:4e:bf:d2:6f:f5:1a:bc:21:37:4c:f9:
a4:b2:2b:44:d1:f3:06:07:be:0b:f9:c9:a3:6a:34:
e9:54:4c:2a:98:38:32:02:e1:80:5f:00:2e:26:12:
60:c5:c2:b8:3b:b6:34:de:f3:aa:6c:08:c4:9f:f2:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:70:EB:0F:BE:D3:70:03:36:C1:5F:43:8C:CE:D3:A5:C8:F5:52
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/x-Vw6w--03ADNsFfQ4zO06XI9VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.252.231.0/24
Signature Algorithm: sha256WithRSAEncryption
69:38:37:64:48:ff:e2:f3:37:59:47:eb:29:18:81:41:27:8a:
69:ee:51:38:a1:a2:bd:2b:ee:1e:e4:e1:e4:38:eb:b4:28:8c:
4b:b9:00:0f:d4:bc:3a:33:b2:e5:e7:bd:50:db:89:74:7f:bc:
ab:2f:8c:9a:29:62:be:81:67:a1:2a:b5:b7:0b:cb:61:62:b2:
ce:64:f1:06:8b:07:af:fb:29:de:15:04:d5:6c:09:6e:4c:57:
92:6c:0f:08:d7:12:24:e9:03:c4:60:89:1c:fe:2d:48:02:72:
cd:70:56:3a:7b:a7:9c:10:8c:a4:60:0a:01:40:f4:e4:ad:0b:
62:b8:e2:60:5e:ab:16:5d:83:88:6b:a6:a9:57:09:f9:d2:6c:
e5:3e:7a:3b:d7:80:8f:d7:0b:ae:8d:ea:80:fb:ad:18:85:e6:
fc:41:c5:68:09:8a:70:c8:95:94:d6:5f:83:2a:63:b5:46:d1:
4b:85:d0:13:b0:5d:df:7c:60:fd:ee:da:69:61:20:f7:2b:22:
35:d5:df:86:11:05:8c:04:23:c9:3e:46:31:30:ab:ef:f2:05:
f4:60:e7:b2:96:dd:f3:9c:ef:d7:3f:a0:7f:47:40:5e:84:44:
06:2b:10:8c:4a:ba:b5:7e:fb:3d:d1:3a:3a:c7:e1:e6:5f:ea:
2b:79:5d:ea
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIELKsvwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGM1MTBmYzliODY1ZDk2ZTNhZmM3YzU2MDU2ZWZhZDlhMzMwYzViMB4XDTIyMDEw
MTA0NTkzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzdlNTcwZWIwZmJl
ZDM3MDAzMzZjMTVmNDM4Y2NlZDNhNWM4ZjU1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAz8DiXkRqfMICJAmP59gCFcInr/VZc4U0VmOC1Kscs5CYm
3OgDdNjYO59n1TfG9VIeRt+fBpjg/nWk2h7lCV6tvWniSzyp8UBx0OV290YBBmF8
KmlSRATvHSNw78v5i52+69HegA5BhWy54yrnoeROkmXmi5DwM3J+FSPKl88e+AMA
CJS2/DR3F/8T8X1yB7eEi+PMDqNV4H3mZ6z/6Yu8wlYeHNOuJ1wzFGgGkR6DmlBN
q6wN/E7FJpGq2F4kYKvu7WVPw06/0m/1GrwhN0z5pLIrRNHzBge+C/nJo2o06VRM
Kpg4MgLhgF8ALiYSYMXCuDu2NN7zqmwIxJ/yrJMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTH5XDrD77TcAM2wV9DjM7Tpcj1UjAfBgNVHSMEGDAWgBRoxRD8m4ZdluOv
x8VgVu+tmjMMWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FNVVFfSnVHWFpianI4ZkZZRmJ2clpvekRGcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2YS8x
L3gtVnc2dy0tMDNBRE5zRmZRNHpPMDZYSTlWSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
ZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2YS8xL2FNVVFfSnVHWFpi
anI4ZkZZRmJ2clpvekRGcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM785zANBgkqhkiG9w0BAQsFAAOC
AQEAaTg3ZEj/4vM3WUfrKRiBQSeKae5ROKGivSvuHuTh5DjrtCiMS7kAD9S8OjOy
5ee9UNuJdH+8qy+MmilivoFnoSq1twvLYWKyzmTxBosHr/sp3hUE1WwJbkxXkmwP
CNcSJOkDxGCJHP4tSAJyzXBWOnunnBCMpGAKAUD05K0LYrjiYF6rFl2DiGumqVcJ
+dJs5T56O9eAj9cLro3qgPutGIXm/EHFaAmKcMiVlNZfgypjtUbRS4XQE7Bd33xg
/e7aaWEg9ysiNdXfhhEFjAQjyT5GMTCr7/IF9GDnspbd85zv1z+gf0dAXoREBisQ
jEq6tX77PdE6Osfh5l/qK3ld6g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:12 2025 by rpki-client