Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/6TD3iBpPBG9ye1aLVKTRkJjkwvk.roa
File: 6TD3iBpPBG9ye1aLVKTRkJjkwvk.roa (raw, json)
Hash identifier: QiB/5FJmCxT7WTU1j93Lo0+Pk2eMn/jsPGJkk3zUeOI=
Subject key identifier: E9:30:F7:88:1A:4F:04:6F:72:7B:56:8B:54:A4:D1:90:98:E4:C2:F9
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 01856F02197F7AE2DBA2A29ECD3F3808B527
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/6TD3iBpPBG9ye1aLVKTRkJjkwvk.roa
Signing time: Sun 01 Jan 2023 20:24:46 +0000
ROA not before: Sun 01 Jan 2023 20:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 185.201.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:19:7f:7a:e2:db:a2:a2:9e:cd:3f:38:08:b5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: Jan 1 20:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e930f7881a4f046f727b568b54a4d19098e4c2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:07:4a:23:26:88:ac:a0:c7:3e:0b:87:82:
2f:b8:23:0e:b2:39:59:59:99:3b:94:34:80:f6:93:
d7:3a:68:b2:95:6f:e9:54:53:ad:ab:1e:33:44:99:
2c:b1:c1:df:96:73:4f:76:56:cd:40:74:e2:54:7f:
dd:c3:48:08:42:7e:31:9e:23:01:3b:b9:99:96:ea:
d5:18:fe:2b:f5:78:e3:73:16:f0:ee:a6:31:97:88:
70:52:2f:7c:8a:f3:53:76:4b:d0:f2:d1:b9:7a:93:
f1:66:41:6a:09:39:79:9a:d7:17:5f:31:d1:39:a5:
f1:af:fe:da:7c:04:3e:6f:ce:01:8e:da:93:d0:00:
7b:c4:22:8d:1a:9c:d3:57:99:00:de:42:6e:5a:b8:
97:41:bc:23:80:52:b9:8e:b6:c1:67:3d:13:eb:96:
53:ad:c9:86:59:49:4f:6c:9d:cd:c7:97:af:a1:a7:
ce:09:f1:9a:28:78:83:ac:a1:b3:ae:a5:b9:48:9b:
c4:5a:1c:4f:7f:fd:5f:02:db:ca:eb:37:72:5e:52:
6a:99:7a:06:56:57:a8:00:09:ad:1d:f1:3e:49:6d:
e4:24:40:8b:ba:04:70:3c:76:0a:11:f4:dc:38:7a:
17:05:26:6f:f9:4c:54:92:c4:ab:ce:2b:eb:34:69:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:F7:88:1A:4F:04:6F:72:7B:56:8B:54:A4:D1:90:98:E4:C2:F9
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/6TD3iBpPBG9ye1aLVKTRkJjkwvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.220.0/24
Signature Algorithm: sha256WithRSAEncryption
04:65:de:55:aa:2c:0d:82:0a:ae:72:8e:29:25:f3:d7:da:7c:
9a:7a:be:9d:0c:e5:b6:fc:5c:57:5c:69:24:d3:72:32:0d:42:
ef:f9:bd:04:88:a6:86:8f:c2:52:8e:bf:a8:aa:b7:96:51:c1:
52:7b:d5:94:49:28:69:07:03:04:0e:02:15:74:25:6f:77:6e:
2c:32:d1:6e:fb:88:ac:b0:43:47:f5:8c:a4:d1:fb:22:c3:d3:
37:b0:3a:ab:dc:69:ff:78:ee:b9:eb:70:15:99:4a:fc:35:29:
5f:87:a1:66:3e:52:fa:c7:15:82:a6:2b:ce:d5:31:de:12:3a:
f2:14:8e:6e:8a:c6:15:33:22:e6:ca:48:3a:c9:1e:ad:8e:b9:
23:09:ea:ec:e9:2f:33:ed:28:c1:98:14:a9:01:c8:c3:a5:d7:
dd:1e:e5:c0:a7:a8:1c:31:46:1d:7c:9f:b7:a6:3b:f9:91:e4:
6f:9b:e7:36:a7:6a:12:00:f3:73:3e:40:79:eb:51:3e:74:34:
76:df:c0:74:0c:38:f8:15:88:bc:d1:dd:6d:88:b4:ba:48:1e:
de:48:e8:68:f2:e2:ec:95:bb:bb:4b:ac:e4:13:a8:70:15:3c:
69:8c:8e:51:d0:ce:73:f4:c9:94:0c:88:a2:1c:ee:85:0e:f2:
c2:77:77:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAhl/euLboqKezT84CLUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYWFhMTZkZGQ4ZDhhMTJkZmQwZTUzMjExNzAzYWQ5NTJl
M2IyMTQwHhcNMjMwMTAxMjAyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTMwZjc4ODFhNGYwNDZmNzI3YjU2OGI1NGE0ZDE5MDk4ZTRjMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03YHSiMmiKygxz4Lh4IvuCMOsjlZ
WZk7lDSA9pPXOmiylW/pVFOtqx4zRJksscHflnNPdlbNQHTiVH/dw0gIQn4xniMB
O7mZlurVGP4r9Xjjcxbw7qYxl4hwUi98ivNTdkvQ8tG5epPxZkFqCTl5mtcXXzHR
OaXxr/7afAQ+b84BjtqT0AB7xCKNGpzTV5kA3kJuWriXQbwjgFK5jrbBZz0T65ZT
rcmGWUlPbJ3Nx5evoafOCfGaKHiDrKGzrqW5SJvEWhxPf/1fAtvK6zdyXlJqmXoG
VleoAAmtHfE+SW3kJECLugRwPHYKEfTcOHoXBSZv+UxUksSrzivrNGmxuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOkw94gaTwRvcntWi1Sk0ZCY5ML5MB8GA1UdIwQY
MBaAFPGqoW3djYoS39DlMhFwOtlS47IUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFxaGJkMk5paExmME9VeUVYQTYyVkxqc2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ZWFjYTAtOGRiOS00ZDBhLWJhMjIt
OGE5OTM1ZGEwNTg4LzEvNlREM2lCcFBCRzl5ZTFhTFZLVFJrSmprd3ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ZWFjYTAtOGRiOS00ZDBhLWJhMjItOGE5OTM1ZGEwNTg4
LzEvOGFxaGJkMk5paExmME9VeUVYQTYyVkxqc2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucncMA0G
CSqGSIb3DQEBCwUAA4IBAQAEZd5VqiwNggquco4pJfPX2nyaer6dDOW2/FxXXGkk
03IyDULv+b0EiKaGj8JSjr+oqreWUcFSe9WUSShpBwMEDgIVdCVvd24sMtFu+4is
sENH9Yyk0fsiw9M3sDqr3Gn/eO6563AVmUr8NSlfh6FmPlL6xxWCpivO1THeEjry
FI5uisYVMyLmykg6yR6tjrkjCers6S8z7SjBmBSpAcjDpdfdHuXAp6gcMUYdfJ+3
pjv5keRvm+c2p2oSAPNzPkB561E+dDR238B0DDj4FYi80d1tiLS6SB7eSOho8uLs
lbu7S6zkE6hwFTxpjI5R0M5z9MmUDIiiHO6FDvLCd3du
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:27 2025 by rpki-client