Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/6pX7QBpOidOnQUh6zg4MB2QueHM.roa
File: 6pX7QBpOidOnQUh6zg4MB2QueHM.roa (raw, json)
Hash identifier: 2wZq16wDi8Kzl/0HuRwa6gMiiCt14HPS3l8z/jTKNWs=
Subject key identifier: EA:95:FB:40:1A:4E:89:D3:A7:41:48:7A:CE:0E:0C:07:64:2E:78:73
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 0182C9AA93CE5843B23872B18626879D936A
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/6pX7QBpOidOnQUh6zg4MB2QueHM.roa
Signing time: Tue 23 Aug 2022 07:46:15 +0000
ROA not before: Tue 23 Aug 2022 07:46:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210664
IP address blocks: 185.150.88.0/22 maxlen: 22
2a05:4b40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:aa:93:ce:58:43:b2:38:72:b1:86:26:87:9d:93:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Aug 23 07:46:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea95fb401a4e89d3a741487ace0e0c07642e7873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:9a:ae:a2:96:79:0b:36:d5:53:0e:5d:3e:
15:21:34:85:be:5c:46:80:96:39:89:bd:c0:73:02:
30:2d:db:13:2f:0e:74:63:47:12:37:df:87:95:cf:
96:1d:d9:3d:64:88:66:09:3d:bf:39:bb:23:c0:6a:
ff:4b:12:b8:b0:98:09:1e:a4:ee:05:1d:97:5b:1c:
e3:c0:2a:8e:b6:41:81:98:66:10:d5:db:68:a2:8d:
81:51:7a:28:c8:5d:bf:08:6c:64:70:b7:da:bd:9f:
6b:2f:20:3a:de:3c:25:6d:31:8a:17:89:9d:40:69:
44:5d:01:6a:be:6f:38:07:6a:6c:7a:9f:47:e7:27:
5a:30:21:6e:d6:e1:3c:5a:21:36:4c:8f:b0:cc:b2:
eb:2d:08:a4:77:5c:d6:d0:07:cc:c4:bf:e9:f2:06:
6f:e9:03:1c:93:75:dd:e4:ed:a8:eb:a4:da:bb:87:
0d:65:cf:b5:21:0d:f7:43:bd:14:54:6a:6a:9b:06:
62:6f:a2:ec:ed:e6:86:14:21:ff:ad:2c:da:9f:bb:
af:4f:96:32:a6:ac:ec:08:26:da:ee:4b:23:10:cb:
7e:10:db:77:72:05:19:a5:82:fe:f4:74:d6:b4:e2:
bf:c5:b2:ab:16:0c:41:63:eb:3e:b2:62:9c:be:7b:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:95:FB:40:1A:4E:89:D3:A7:41:48:7A:CE:0E:0C:07:64:2E:78:73
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/6pX7QBpOidOnQUh6zg4MB2QueHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.88.0/22
IPv6:
2a05:4b40::/32
Signature Algorithm: sha256WithRSAEncryption
be:bd:18:e9:d7:83:bb:d5:b7:1d:45:cf:65:1c:fe:60:0f:c5:
9c:59:66:09:1e:62:fb:4d:df:11:ed:08:a5:f7:37:f3:f4:c7:
a2:ff:ff:0a:f9:75:13:0c:93:15:e9:3b:77:b4:7a:03:ca:64:
d4:ba:bd:5b:fd:ed:14:03:c6:ce:4e:f5:b1:60:4f:8b:d3:5f:
c2:a6:bf:ee:fa:bf:fa:18:ad:c9:75:e7:7a:e1:da:0e:fa:d2:
12:70:75:49:f1:7c:51:2f:78:b6:95:62:94:04:cc:24:25:94:
04:6e:85:89:20:d9:20:c4:57:be:ab:d5:79:9f:84:2a:39:ee:
5e:8b:06:d6:68:90:af:60:d0:e5:56:29:b5:30:06:cf:73:8e:
f8:7f:30:ed:b2:35:b1:c7:08:4b:35:aa:b2:53:d2:f7:bf:44:
d6:4f:36:b9:75:46:7a:63:c7:16:fd:bd:3b:b1:af:8b:62:29:
af:1f:96:e8:9a:32:11:b1:46:22:64:85:27:e3:42:e5:b9:13:
37:ac:b0:54:31:81:b9:4e:ba:be:89:9c:4c:0b:fe:0d:5b:dc:
f5:93:5e:12:92:2b:c4:dd:f3:c7:30:54:33:64:1b:dc:18:17:
05:16:ea:0f:74:f7:9d:79:00:21:dc:5d:51:73:a0:d7:7c:6a:
20:bd:15:e2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYLJqpPOWEOyOHKxhiaHnZNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1
MWMyN2UwHhcNMjIwODIzMDc0NjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTk1ZmI0MDFhNGU4OWQzYTc0MTQ4N2FjZTBlMGMwNzY0MmU3ODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHWarqKWeQs21VMOXT4VITSFvlxG
gJY5ib3AcwIwLdsTLw50Y0cSN9+Hlc+WHdk9ZIhmCT2/ObsjwGr/SxK4sJgJHqTu
BR2XWxzjwCqOtkGBmGYQ1dtooo2BUXooyF2/CGxkcLfavZ9rLyA63jwlbTGKF4md
QGlEXQFqvm84B2psep9H5ydaMCFu1uE8WiE2TI+wzLLrLQikd1zW0AfMxL/p8gZv
6QMck3Xd5O2o66Tau4cNZc+1IQ33Q70UVGpqmwZib6Ls7eaGFCH/rSzan7uvT5Yy
pqzsCCba7ksjEMt+ENt3cgUZpYL+9HTWtOK/xbKrFgxBY+s+smKcvntkjQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOqV+0AaTonTp0FIes4ODAdkLnhzMB8GA1UdIwQY
MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt
Yjc1NzhiMTBiYTdlLzEvNnBYN1FCcE9pZE9uUVVoNnpnNE1CMlF1ZUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl
LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZZYMA0E
AgACMAcDBQAqBUtAMA0GCSqGSIb3DQEBCwUAA4IBAQC+vRjp14O71bcdRc9lHP5g
D8WcWWYJHmL7Td8R7Qil9zfz9Mei//8K+XUTDJMV6Tt3tHoDymTUur1b/e0UA8bO
TvWxYE+L01/Cpr/u+r/6GK3Jded64doO+tIScHVJ8XxRL3i2lWKUBMwkJZQEboWJ
INkgxFe+q9V5n4QqOe5eiwbWaJCvYNDlVim1MAbPc474fzDtsjWxxwhLNaqyU9L3
v0TWTza5dUZ6Y8cW/b07sa+LYimvH5bomjIRsUYiZIUn40LluRM3rLBUMYG5Trq+
iZxMC/4NW9z1k14SkivE3fPHMFQzZBvcGBcFFuoPdPedeQAh3F1Rc6DXfGogvRXi
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:30 2025 by rpki-client