Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/6y9mnd2shP7Rt4Y57R4OBjfOa20.roa
File: 6y9mnd2shP7Rt4Y57R4OBjfOa20.roa (raw, json)
Hash identifier: GWFY3DtlUDLg82KBpZuWvEYow+o0hv2rVlf8+eQ8kTk=
Subject key identifier: EB:2F:66:9D:DD:AC:84:FE:D1:B7:86:39:ED:1E:0E:06:37:CE:6B:6D
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 06D9918B
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/6y9mnd2shP7Rt4Y57R4OBjfOa20.roa
Signing time: Sat 01 Jan 2022 05:05:54 +0000
ROA not before: Sat 01 Jan 2022 05:05:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208327
IP address blocks: 45.145.92.0/22 maxlen: 22
2a0c:4d80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114921867 (0x6d9918b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Jan 1 05:05:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb2f669dddac84fed1b78639ed1e0e0637ce6b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:31:b0:6a:c7:89:1e:93:85:7b:0c:78:27:
ef:f3:ab:62:b8:60:af:72:86:85:2f:22:5b:8d:55:
6c:50:f7:87:37:1c:32:96:09:73:cb:13:94:54:42:
0c:b5:20:ef:e4:09:a2:d9:56:42:ab:db:d9:3a:4b:
31:d2:cb:a3:38:21:76:d7:d5:57:33:c6:0b:04:e4:
95:90:df:12:66:65:ba:43:d2:f2:38:dd:92:71:37:
22:f2:ae:53:b3:12:eb:fe:19:e9:48:c4:d5:5e:64:
1b:c8:8e:77:82:7c:92:f3:e3:3b:9a:be:84:03:99:
5d:32:f5:6e:bd:25:21:1e:ec:62:96:85:d3:6e:6a:
59:51:70:49:8d:58:94:72:2d:fb:4e:30:01:82:85:
1d:3b:03:e0:2c:c7:60:0a:a7:89:cd:62:60:32:45:
7c:a5:e1:5a:e1:02:bb:e3:ed:98:64:c2:ec:1e:53:
d7:9f:a2:27:57:99:e1:34:c5:56:bc:02:12:0f:dc:
2f:8a:4c:34:6d:af:35:e9:fe:d4:a5:0e:8b:19:84:
37:7b:ac:59:d0:1f:c3:5b:17:44:35:00:7d:ac:c1:
bf:63:1c:ac:6d:e5:2c:9b:c3:82:21:c2:9f:4d:bd:
9e:32:a5:50:eb:60:5d:09:16:a4:de:ec:da:12:81:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:66:9D:DD:AC:84:FE:D1:B7:86:39:ED:1E:0E:06:37:CE:6B:6D
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/6y9mnd2shP7Rt4Y57R4OBjfOa20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.92.0/22
IPv6:
2a0c:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
ad:12:59:77:ff:be:ae:9c:2b:04:74:55:30:7a:69:56:19:c7:
8b:18:3c:b5:b2:36:16:94:a1:1b:4d:a2:c5:f4:d8:68:b1:f0:
e1:3f:85:cb:db:2c:66:35:a5:32:40:e9:46:d0:bc:23:f5:48:
74:a6:4a:c4:16:bd:60:b8:e7:72:a2:0b:dd:fe:0a:b7:79:26:
40:d7:d4:ef:0d:03:6f:3d:1a:48:3f:b9:86:e4:ac:f5:49:0d:
7e:6c:e4:dd:9c:8f:ab:8e:a9:c1:ca:46:70:6f:f1:6c:1a:64:
9c:e6:59:cc:9a:19:ba:9f:c1:a4:09:31:e3:8d:96:b4:98:b4:
4b:90:29:a9:1a:4b:39:d0:bf:8d:ca:df:fb:d2:2b:9e:0f:f8:
fd:13:da:f1:a7:31:23:2e:a9:b9:3c:00:35:4a:b0:a8:91:2e:
86:15:07:30:df:e5:89:1e:30:31:d8:28:63:e6:90:5c:25:85:
18:75:ed:64:24:79:3c:c9:08:24:f1:cf:0d:67:65:7d:fe:c8:
2f:3b:4a:61:86:7d:c6:27:20:b1:20:33:22:f0:64:a1:d8:19:
60:ed:bf:fe:96:d4:cf:78:9a:d3:9c:98:bb:d6:e0:3d:43:10:
e3:09:25:eb:12:ad:b0:fd:9b:0d:27:4e:a4:bd:1e:10:0e:75:
35:a4:36:60
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBtmRizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZGE2MGU5MDAwYzc1YTc1ZDY3ZTM3ZmUwN2IxNGUwN2IyMmM1ODg3MB4XDTIyMDEw
MTA1MDU1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWIyZjY2OWRkZGFj
ODRmZWQxYjc4NjM5ZWQxZTBlMDYzN2NlNmI2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKODMbBqx4kek4V7DHgn7/OrYrhgr3KGhS8iW41VbFD3hzcc
MpYJc8sTlFRCDLUg7+QJotlWQqvb2TpLMdLLozghdtfVVzPGCwTklZDfEmZlukPS
8jjdknE3IvKuU7MS6/4Z6UjE1V5kG8iOd4J8kvPjO5q+hAOZXTL1br0lIR7sYpaF
025qWVFwSY1YlHIt+04wAYKFHTsD4CzHYAqnic1iYDJFfKXhWuECu+PtmGTC7B5T
15+iJ1eZ4TTFVrwCEg/cL4pMNG2vNen+1KUOixmEN3usWdAfw1sXRDUAfazBv2Mc
rG3lLJvDgiHCn029njKlUOtgXQkWpN7s2hKBJg0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTrL2ad3ayE/tG3hjntHg4GN85rbTAfBgNVHSMEGDAWgBSNpg6QAMdaddZ+
N/4HsU4HsixYhzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2phWU9rQURIV25YV2ZqZi1CN0ZPQjdJc1dJYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvNzI4MDZhLTAzOTQtNGFkNS04ZTA0LWI1YjhkMDI0NDhiOC8x
LzZ5OW1uZDJzaFA3UnQ0WTU3UjRPQmpmT2EyMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
NzI4MDZhLTAzOTQtNGFkNS04ZTA0LWI1YjhkMDI0NDhiOC8xL2phWU9rQURIV25Y
V2ZqZi1CN0ZPQjdJc1dJYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2RXDANBAIAAjAHAwUDKgxNgDAN
BgkqhkiG9w0BAQsFAAOCAQEArRJZd/++rpwrBHRVMHppVhnHixg8tbI2FpShG02i
xfTYaLHw4T+Fy9ssZjWlMkDpRtC8I/VIdKZKxBa9YLjncqIL3f4Kt3kmQNfU7w0D
bz0aSD+5huSs9UkNfmzk3ZyPq46pwcpGcG/xbBpknOZZzJoZup/BpAkx442WtJi0
S5ApqRpLOdC/jcrf+9Irng/4/RPa8acxIy6puTwANUqwqJEuhhUHMN/liR4wMdgo
Y+aQXCWFGHXtZCR5PMkIJPHPDWdlff7ILztKYYZ9xicgsSAzIvBkodgZYO2//pbU
z3ia05yYu9bgPUMQ4wkl6xKtsP2bDSdOpL0eEA51NaQ2YA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:32 2024 by rpki-client on console-ams.rpki-client.org