Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/6zCtJpeVGJyutbcI2M_P0iFWOsU.roa
File: 6zCtJpeVGJyutbcI2M_P0iFWOsU.roa (raw, json)
Hash identifier: X4Ymnu6GntI82gVziS4G2f6AN7QWl6QI/y8f9pBOuKE=
Subject key identifier: EB:30:AD:26:97:95:18:9C:AE:B5:B7:08:D8:CF:CF:D2:21:56:3A:C5
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0F9BE7E3
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/6zCtJpeVGJyutbcI2M_P0iFWOsU.roa
Signing time: Sat 01 Jan 2022 00:51:04 +0000
ROA not before: Sat 01 Jan 2022 00:51:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21208
IP address blocks: 84.14.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261875683 (0xf9be7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 00:51:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb30ad269795189caeb5b708d8cfcfd221563ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:ed:e7:26:a4:b1:fc:a2:68:f9:0a:96:52:
35:ed:ae:d6:36:df:bf:f8:d8:c0:75:7f:9d:7c:82:
9f:b1:a4:fb:72:e1:50:ee:aa:93:0e:17:17:8e:aa:
a2:79:65:2c:a3:60:43:1b:d8:3e:cf:e7:9d:4b:86:
7c:f5:07:c5:2f:dc:11:db:cd:c8:20:c9:49:1f:14:
2c:a3:d1:0f:83:81:4d:58:af:c1:5c:49:d7:73:11:
3d:cc:d0:e8:57:2b:73:8f:54:71:11:b2:36:45:55:
3d:97:a1:9f:66:d8:1c:99:31:7a:01:53:e2:69:e9:
cc:19:1f:72:57:55:8b:9c:01:4c:56:f4:21:b1:be:
5b:3e:1f:de:cd:db:5b:7f:92:c8:55:48:64:2d:e3:
33:8e:7b:14:7e:34:b4:ca:bf:75:82:49:36:a3:98:
0d:f0:4f:57:f0:de:fe:6a:42:db:c4:5a:a8:68:44:
45:10:75:f8:81:f5:b9:26:4e:8c:58:f1:30:c6:e8:
87:e5:73:53:63:7b:d1:ed:e7:24:68:e0:6b:ff:2d:
18:fb:79:ee:0b:ca:0b:90:10:3f:67:5c:88:0d:bf:
73:18:8f:de:14:cf:38:14:27:d5:54:9e:30:46:6d:
df:31:8d:a5:8c:c6:84:32:8d:fa:ff:e1:4d:08:dc:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:AD:26:97:95:18:9C:AE:B5:B7:08:D8:CF:CF:D2:21:56:3A:C5
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/6zCtJpeVGJyutbcI2M_P0iFWOsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.14.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:13:f3:a3:17:8e:fe:87:14:77:fc:1c:a0:b9:e7:b6:27:0d:
f5:61:8b:02:18:8e:8b:17:17:8c:95:f0:12:35:73:a0:0c:7c:
a1:24:14:84:72:01:d5:59:cb:a4:19:fa:90:04:54:27:6a:62:
77:04:b1:64:5c:0e:a1:ad:c6:5c:5a:9b:5d:de:f8:d9:ef:42:
65:6f:17:af:bf:b2:50:ba:81:04:dc:9c:c7:a8:4f:da:f2:d2:
82:d9:4b:63:a3:d8:9d:09:5e:66:74:37:32:7d:ef:69:1d:b6:
fa:01:68:8c:a4:dc:ce:b3:a7:48:a0:15:3c:30:39:97:0f:83:
62:ba:16:49:24:e1:12:08:68:f7:ab:0b:06:ad:00:a9:ae:35:
cf:39:97:2a:ba:7e:80:a8:88:79:54:18:de:dd:f7:c1:8f:1a:
c3:fd:1b:e3:58:1c:ea:21:30:f7:61:54:ff:1d:9d:52:8b:b4:
57:e9:0a:42:bb:45:70:2e:d7:98:56:ff:8b:50:61:e9:aa:10:
25:ce:32:bc:04:90:7d:42:f2:17:72:4d:6d:39:4a:99:22:bb:
1d:cf:a8:19:ef:e8:47:02:56:3e:24:ec:8c:8e:cd:6d:8c:d8:
13:23:bd:e9:5a:dc:a8:e9:14:1f:8f:a8:e1:5b:c2:7c:c1:19:
da:e1:74:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED5vn4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Y2Y4ZmZjMDg4NTkxZTRmMjQzYmFhZmEyMWI0Mjk4YmZiMzY2MDI2MB4XDTIyMDEw
MTAwNTEwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWIzMGFkMjY5Nzk1
MTg5Y2FlYjViNzA4ZDhjZmNmZDIyMTU2M2FjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1R7ecmpLH8omj5CpZSNe2u1jbfv/jYwHV/nXyCn7Gk+3Lh
UO6qkw4XF46qonllLKNgQxvYPs/nnUuGfPUHxS/cEdvNyCDJSR8ULKPRD4OBTViv
wVxJ13MRPczQ6Fcrc49UcRGyNkVVPZehn2bYHJkxegFT4mnpzBkfcldVi5wBTFb0
IbG+Wz4f3s3bW3+SyFVIZC3jM457FH40tMq/dYJJNqOYDfBPV/De/mpC28RaqGhE
RRB1+IH1uSZOjFjxMMboh+VzU2N70e3nJGjga/8tGPt57gvKC5AQP2dciA2/cxiP
3hTPOBQn1VSeMEZt3zGNpYzGhDKN+v/hTQjc1T8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTrMK0ml5UYnK61twjYz8/SIVY6xTAfBgNVHSMEGDAWgBRM+P/AiFkeTyQ7
qvohtCmL+zZgJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RQal93SWhaSGs4a082cjZJYlFwaV9zMllDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvYTBhMzljLWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8x
LzZ6Q3RKcGVWR0p5dXRiY0kyTV9QMGlGV09zVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
YTBhMzljLWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8xL1RQal93SWhaSGs4
a082cjZJYlFwaV9zMllDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFQO6jANBgkqhkiG9w0BAQsFAAOC
AQEAThPzoxeO/ocUd/wcoLnnticN9WGLAhiOixcXjJXwEjVzoAx8oSQUhHIB1VnL
pBn6kARUJ2pidwSxZFwOoa3GXFqbXd742e9CZW8Xr7+yULqBBNycx6hP2vLSgtlL
Y6PYnQleZnQ3Mn3vaR22+gFojKTczrOnSKAVPDA5lw+DYroWSSThEgho96sLBq0A
qa41zzmXKrp+gKiIeVQY3t33wY8aw/0b41gc6iEw92FU/x2dUou0V+kKQrtFcC7X
mFb/i1Bh6aoQJc4yvASQfULyF3JNbTlKmSK7Hc+oGe/oRwJWPiTsjI7NbYzYEyO9
6VrcqOkUH4+o4VvCfMEZ2uF05A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org