Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6wdpNzArnEXy85Maj7GV_r_HYkg.roa
File: 6wdpNzArnEXy85Maj7GV_r_HYkg.roa (raw, json)
Hash identifier: GmLExHbb0UePNoRmtj9+x4QVgY4tWxQbLavJdi2oQtw=
Subject key identifier: EB:07:69:37:30:2B:9C:45:F2:F3:93:1A:8F:B1:95:FE:BF:C7:62:48
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0184834676BB9ADCBE44AB495D281EE9865C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6wdpNzArnEXy85Maj7GV_r_HYkg.roa
Signing time: Thu 17 Nov 2022 01:49:03 +0000
ROA not before: Thu 17 Nov 2022 01:49:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 185.243.4.0/24 maxlen: 24
185.243.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:83:46:76:bb:9a:dc:be:44:ab:49:5d:28:1e:e9:86:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Nov 17 01:49:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb076937302b9c45f2f3931a8fb195febfc76248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:50:1e:a2:b0:44:e9:4b:42:23:9b:74:b8:
30:2a:2e:b2:0c:6b:a4:65:11:10:a8:fc:e4:a2:e2:
4e:78:41:65:20:b1:bc:17:6c:dc:ee:5b:e6:2c:d8:
19:3a:76:bf:7a:4a:b9:b8:76:28:a8:62:9b:08:26:
6f:23:4c:a4:52:89:80:5e:14:dc:c4:7d:8c:78:89:
4d:c1:46:ca:34:24:6e:94:63:e4:80:cb:18:17:c0:
16:e8:29:07:1b:8a:6d:f8:0d:1f:e5:c0:8e:3f:5a:
2b:a4:14:61:b0:14:01:16:c7:ce:a7:b7:27:91:1a:
db:69:f5:65:40:d9:5f:5c:f7:6c:c8:ab:3c:2a:53:
00:f3:fd:8f:86:8c:43:47:e7:86:d0:17:f1:da:ce:
c2:bd:2b:ae:e8:bd:ee:1c:c7:70:c3:a5:ba:60:d0:
97:ea:e2:88:a7:3f:d2:9f:28:fd:3e:80:be:05:16:
ac:c7:f5:ce:0b:32:03:71:76:81:3c:31:8b:ef:1f:
71:92:93:0b:cc:35:49:98:d9:2a:b2:10:f0:a7:85:
4d:6a:11:6d:f1:cd:1e:4b:18:3c:11:36:73:77:cf:
aa:a5:9b:1c:f9:0f:01:41:a4:b1:7b:da:e4:db:35:
27:9d:6a:f0:2f:6c:b2:5e:b3:6d:f6:81:7e:e0:0f:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:69:37:30:2B:9C:45:F2:F3:93:1A:8F:B1:95:FE:BF:C7:62:48
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6wdpNzArnEXy85Maj7GV_r_HYkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.4.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:a4:81:58:6c:6f:b2:a0:b1:d6:03:80:31:3f:ad:25:f4:df:
f5:6e:a0:0f:8a:eb:c7:bd:2b:99:91:d0:e1:f4:91:e3:13:a8:
20:17:7f:45:e3:5d:97:e7:db:4f:f9:a0:ba:70:f3:e8:44:5c:
5a:26:48:5b:8e:b8:97:bb:6b:95:30:57:0f:6b:d1:1e:f5:9b:
bd:4e:ef:f6:90:fa:cb:0e:3e:7f:46:64:48:bf:bf:52:11:03:
26:e5:c9:69:66:7c:fd:75:48:e8:e9:63:c4:00:61:75:c1:26:
57:69:22:57:87:34:23:25:f3:4d:d6:02:1e:68:46:e1:95:58:
20:f1:1c:47:b1:eb:35:fc:94:61:cd:9c:ff:cf:1c:dd:57:3b:
6c:0c:a1:bd:0e:fd:65:15:25:44:89:2a:95:69:99:a9:05:e5:
f0:8b:bf:03:37:a9:89:fa:16:f5:af:9f:b0:67:46:c5:a8:cf:
c6:82:98:77:71:2a:58:1d:39:da:0f:22:3d:72:d4:79:be:2b:
21:f7:3b:c6:2c:17:74:50:78:45:f3:d1:5c:02:c5:1e:b2:e3:
8b:61:33:6f:e3:b0:76:58:48:71:52:de:ff:9d:03:17:fa:bd:
b9:44:3a:89:1e:2e:05:f5:bf:35:83:c0:2d:e0:de:06:90:a3:
63:a4:0b:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSDRna7mty+RKtJXSge6YZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjIxMTE3MDE0OTAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjA3NjkzNzMwMmI5YzQ1ZjJmMzkzMWE4ZmIxOTVmZWJmYzc2MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJQHqKwROlLQiObdLgwKi6yDGuk
ZREQqPzkouJOeEFlILG8F2zc7lvmLNgZOna/ekq5uHYoqGKbCCZvI0ykUomAXhTc
xH2MeIlNwUbKNCRulGPkgMsYF8AW6CkHG4pt+A0f5cCOP1orpBRhsBQBFsfOp7cn
kRrbafVlQNlfXPdsyKs8KlMA8/2PhoxDR+eG0Bfx2s7CvSuu6L3uHMdww6W6YNCX
6uKIpz/Snyj9PoC+BRasx/XOCzIDcXaBPDGL7x9xkpMLzDVJmNkqshDwp4VNahFt
8c0eSxg8ETZzd8+qpZsc+Q8BQaSxe9rk2zUnnWrwL2yyXrNt9oF+4A+nzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsHaTcwK5xF8vOTGo+xlf6/x2JIMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvNndkcE56QXJuRVh5ODVNYWo3R1Zfcl9IWWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufMEMA0G
CSqGSIb3DQEBCwUAA4IBAQDDpIFYbG+yoLHWA4AxP60l9N/1bqAPiuvHvSuZkdDh
9JHjE6ggF39F412X59tP+aC6cPPoRFxaJkhbjriXu2uVMFcPa9Ee9Zu9Tu/2kPrL
Dj5/RmRIv79SEQMm5clpZnz9dUjo6WPEAGF1wSZXaSJXhzQjJfNN1gIeaEbhlVgg
8RxHses1/JRhzZz/zxzdVztsDKG9Dv1lFSVEiSqVaZmpBeXwi78DN6mJ+hb1r5+w
Z0bFqM/Ggph3cSpYHTnaDyI9ctR5vish9zvGLBd0UHhF89FcAsUesuOLYTNv47B2
WEhxUt7/nQMX+r25RDqJHi4F9b81g8At4N4GkKNjpAvP
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:20 2025 by rpki-client