Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/6oh1nuIy7j5lZPxDvTr9OWhFB6k.roa
File: 6oh1nuIy7j5lZPxDvTr9OWhFB6k.roa (raw, json)
Hash identifier: FunwmUB9IrptLck6N15Hr3+Eeblu/ahCSwnMqtRTyUM=
Subject key identifier: EA:88:75:9E:E2:32:EE:3E:65:64:FC:43:BD:3A:FD:39:68:45:07:A9
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 032763
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/6oh1nuIy7j5lZPxDvTr9OWhFB6k.roa
Signing time: Sat 12 Feb 2022 08:39:14 +0000
ROA not before: Sat 12 Feb 2022 08:39:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51415
IP address blocks: 185.195.204.0/23 maxlen: 23
185.195.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206691 (0x32763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Feb 12 08:39:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea88759ee232ee3e6564fc43bd3afd39684507a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:2b:4a:3b:28:08:71:92:cb:85:97:45:9e:
31:05:57:08:89:c6:d8:16:7b:91:7a:4c:f3:88:a4:
0b:12:67:e6:a1:ef:84:88:b4:53:88:7f:b7:d9:d9:
a8:c2:5f:91:79:a2:19:5c:6b:9f:6f:ba:e2:dc:fb:
5f:6b:d0:b4:e9:b3:99:e7:b0:b8:2d:f4:cf:59:26:
93:cb:e3:c0:b9:1e:bf:e5:9a:cc:2d:bb:86:e0:17:
b3:e5:60:8d:e5:70:17:c8:fd:b1:08:2b:44:e7:d4:
61:8e:5d:9a:bb:2e:41:c5:87:bf:22:94:f5:8e:6e:
3d:4b:0f:8d:06:35:0a:c1:48:b0:fb:94:07:7d:ec:
43:4b:3f:b1:38:ec:06:d6:50:90:4f:dd:84:50:a1:
8f:c4:cb:66:fa:09:57:2e:1f:29:cd:ba:d6:53:eb:
c8:f4:a3:cd:30:7e:f0:40:3a:15:3b:3a:b6:c2:35:
4d:cf:c4:f9:f3:26:6f:b3:33:3d:88:69:62:ea:34:
b5:ff:3d:15:a0:25:ea:0c:3c:ca:6a:4a:34:43:78:
3d:fe:b9:98:4e:9d:39:05:5a:e2:44:64:8a:1c:ae:
61:d8:9d:7e:b3:86:dd:55:86:44:c4:c4:3d:c8:fb:
8a:79:6d:32:c8:2f:0f:22:24:46:f0:62:51:c0:5d:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:88:75:9E:E2:32:EE:3E:65:64:FC:43:BD:3A:FD:39:68:45:07:A9
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/6oh1nuIy7j5lZPxDvTr9OWhFB6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.204.0/22
Signature Algorithm: sha256WithRSAEncryption
94:fe:88:c7:d6:c8:46:3e:fc:8a:0c:64:5c:b1:49:d2:8f:96:
e2:84:91:a1:ea:be:b5:bb:fa:5f:18:93:2c:2d:55:f2:97:4a:
31:18:bb:2e:d5:ac:ae:b8:74:ba:09:e2:f1:c3:f6:09:5c:08:
5e:c6:91:da:f7:fc:ef:9d:13:99:98:a2:0e:64:a1:87:bf:e1:
d1:70:66:7d:c7:f9:58:d7:b1:c7:49:f7:d7:93:50:20:b7:35:
38:93:cc:bb:41:af:32:a7:f9:6e:d9:32:30:90:c9:e5:41:3a:
eb:4d:d9:2d:56:67:b5:b3:62:d2:6f:c9:5f:de:90:4d:4a:51:
20:2a:13:f0:48:2e:ee:85:01:b8:17:5f:69:3b:11:2f:2e:56:
48:70:04:1a:9c:dd:6d:9a:52:2d:56:ec:f1:a7:ed:d1:6d:85:
8e:c3:59:38:17:b2:f8:2f:b7:41:39:85:42:33:c9:52:73:a7:
94:d5:da:cf:23:d1:09:c1:6d:1c:ea:fb:f9:6e:70:6a:5d:29:
75:58:9a:58:6f:6a:a7:db:4d:d8:97:30:9e:d8:04:65:05:e2:
e2:e0:5a:ae:e3:c6:80:a1:6b:fe:7b:1c:44:47:37:a0:e6:56:
f4:eb:b4:a4:32:31:f7:be:e7:7a:3d:43:75:d4:d8:d7:92:66:
9a:3f:a1:e3
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAydjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQx
ZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1ZThmNTgwHhcNMjIwMjEy
MDgzOTE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlYTg4NzU5ZWUyMzJl
ZTNlNjU2NGZjNDNiZDNhZmQzOTY4NDUwN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0gArSjsoCHGSy4WXRZ4xBVcIicbYFnuRekzziKQLEmfmoe+E
iLRTiH+32dmowl+ReaIZXGufb7ri3Ptfa9C06bOZ57C4LfTPWSaTy+PAuR6/5ZrM
LbuG4Bez5WCN5XAXyP2xCCtE59Rhjl2auy5BxYe/IpT1jm49Sw+NBjUKwUiw+5QH
fexDSz+xOOwG1lCQT92EUKGPxMtm+glXLh8pzbrWU+vI9KPNMH7wQDoVOzq2wjVN
z8T58yZvszM9iGli6jS1/z0VoCXqDDzKako0Q3g9/rmYTp05BVriRGSKHK5h2J1+
s4bdVYZExMQ9yPuKeW0yyC8PIiRG8GJRwF1ZtQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFOqIdZ7iMu4+ZWT8Q706/TloRQepMB8GA1UdIwQYMBaAFNHXiCbhcX7Jk+tk
3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNiLzEv
Nm9oMW51SXk3ajVsWlB4RHZUcjlPV2hGQjZrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8w
ZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21U
NjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucPMMA0GCSqGSIb3DQEBCwUAA4IB
AQCU/ojH1shGPvyKDGRcsUnSj5bihJGh6r61u/pfGJMsLVXyl0oxGLsu1ayuuHS6
CeLxw/YJXAhexpHa9/zvnROZmKIOZKGHv+HRcGZ9x/lY17HHSffXk1AgtzU4k8y7
Qa8yp/lu2TIwkMnlQTrrTdktVme1s2LSb8lf3pBNSlEgKhPwSC7uhQG4F19pOxEv
LlZIcAQanN1tmlItVuzxp+3RbYWOw1k4F7L4L7dBOYVCM8lSc6eU1drPI9EJwW0c
6vv5bnBqXSl1WJpYb2qn203YlzCe2ARlBeLi4Fqu48aAoWv+exxERzeg5lb067Sk
MjH3vud6PUN11NjXkmaaP6Hj
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:55 2025 by rpki-client