Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/6zmZAePOx_qrcfOiDJ44AAYJoFA.roa
File: 6zmZAePOx_qrcfOiDJ44AAYJoFA.roa (raw, json)
Hash identifier: mGg7tXIQGltBFRq+m/K89d3WIBtDHpBbpSyRqB9Pl8k=
Subject key identifier: EB:39:99:01:E3:CE:C7:FA:AB:71:F3:A2:0C:9E:38:00:06:09:A0:50
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 01A1807F
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/6zmZAePOx_qrcfOiDJ44AAYJoFA.roa
Signing time: Tue 15 Feb 2022 14:30:10 +0000
ROA not before: Tue 15 Feb 2022 14:30:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60505
IP address blocks: 103.55.100.0/22 maxlen: 22
103.57.40.0/22 maxlen: 22
45.115.108.0/22 maxlen: 22
195.72.124.0/22 maxlen: 22
45.149.52.0/24 maxlen: 24
2a11:a500::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27361407 (0x1a1807f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Feb 15 14:30:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb399901e3cec7faab71f3a20c9e38000609a050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:80:06:89:cb:54:2d:26:ca:d6:1f:8e:da:
58:9f:4f:0e:b8:c4:67:e0:b0:a3:47:6f:d4:5c:42:
98:2e:41:81:b0:69:ce:ce:93:49:51:88:29:ed:8e:
1b:63:2a:37:19:95:a4:04:3d:63:79:51:ab:a7:a8:
83:03:b0:ee:2f:c0:4e:b5:b8:6a:41:b6:c5:b7:1d:
a9:0b:98:99:b6:f0:aa:08:19:64:02:6a:47:80:51:
ac:52:24:b0:a6:ac:93:f1:25:58:54:4e:4e:ae:4d:
ed:7b:c0:66:1b:55:6a:66:12:f5:53:7b:f4:4f:61:
f3:3a:be:dd:ee:3b:d1:3e:70:db:95:b4:94:bd:10:
1a:35:29:19:31:01:7f:51:0b:11:58:7c:ab:0a:8d:
c2:c4:6b:c3:d8:20:c2:59:2d:23:19:4f:77:ac:96:
a3:c3:d5:58:34:2b:48:5c:e5:09:dd:c8:e2:65:a2:
e9:4b:35:47:c5:65:b1:b4:ea:f4:eb:4f:96:37:3a:
25:2c:3c:a7:e7:56:ed:0c:95:18:41:0a:66:a8:39:
3f:dd:bd:b8:ad:67:01:4f:b2:00:fe:c5:2e:6e:bf:
ec:75:c8:ed:f4:62:0e:f2:88:a2:7b:4f:52:0d:aa:
45:5f:69:71:47:3a:c9:58:48:2d:1c:f0:8c:df:67:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:99:01:E3:CE:C7:FA:AB:71:F3:A2:0C:9E:38:00:06:09:A0:50
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/6zmZAePOx_qrcfOiDJ44AAYJoFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.108.0/22
45.149.52.0/24
103.55.100.0/22
103.57.40.0/22
195.72.124.0/22
IPv6:
2a11:a500::/32
Signature Algorithm: sha256WithRSAEncryption
0b:3d:0f:b9:c4:5d:68:92:a1:82:5e:5e:49:15:6a:50:76:13:
70:6d:10:39:56:25:c6:60:25:d6:ec:05:97:18:df:7c:03:78:
5a:4b:19:b9:08:14:1f:e5:af:3a:97:45:4a:40:00:3e:5a:35:
f8:b1:07:49:c7:d3:ec:8b:6d:6b:24:e5:76:a6:76:4e:be:cd:
99:ff:f6:34:9d:5d:c0:78:c5:c5:2a:e4:9e:c8:9b:04:8c:a8:
72:be:18:75:6c:14:a0:83:26:6d:f0:68:59:bd:8e:7c:ae:75:
c6:4c:37:94:6e:40:7b:2e:c2:69:3b:d5:01:59:91:9e:8d:c6:
46:ca:2d:55:65:a1:7c:d8:ff:5a:16:ea:22:6b:5b:07:71:0c:
f6:a7:c1:be:fd:83:5d:ec:aa:79:91:c2:de:0b:37:2b:eb:b9:
17:d2:e9:76:67:f0:22:a0:db:e5:0d:d1:f3:e4:4d:65:9b:e5:
64:ce:a1:91:3d:0a:e3:9b:76:5f:28:ce:97:27:76:14:b6:06:
6b:0f:fd:fc:66:75:ed:da:36:cc:df:0e:5b:32:df:1a:ed:eb:
e6:b8:85:35:4c:c2:b4:34:d8:fa:0d:8d:10:74:77:cc:7f:94:
8a:d1:eb:68:c1:a6:6c:eb:38:15:7d:ca:0c:39:3a:19:e5:a8:
73:52:1b:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEAaGAfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Yzc2NzA2OThjZmFlZjI2NDdmYmM5YTA2ZjczODA4NTZlMmIzMDI3MB4XDTIyMDIx
NTE0MzAxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWIzOTk5MDFlM2Nl
YzdmYWFiNzFmM2EyMGM5ZTM4MDAwNjA5YTA1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4ngAaJy1QtJsrWH47aWJ9PDrjEZ+Cwo0dv1FxCmC5BgbBp
zs6TSVGIKe2OG2MqNxmVpAQ9Y3lRq6eogwOw7i/ATrW4akG2xbcdqQuYmbbwqggZ
ZAJqR4BRrFIksKask/ElWFROTq5N7XvAZhtVamYS9VN79E9h8zq+3e470T5w25W0
lL0QGjUpGTEBf1ELEVh8qwqNwsRrw9ggwlktIxlPd6yWo8PVWDQrSFzlCd3I4mWi
6Us1R8VlsbTq9OtPljc6JSw8p+dW7QyVGEEKZqg5P929uK1nAU+yAP7FLm6/7HXI
7fRiDvKIontPUg2qRV9pcUc6yVhILRzwjN9nLuUCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBTrOZkB487H+qtx86IMnjgABgmgUDAfBgNVHSMEGDAWgBSsdnBpjPrvJkf7
yaBvc4CFbiswJzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JIWndhWXo2N3laSC04bWdiM09BaFc0ck1DYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvNjhmNjUxLWYzYTYtNDI1Mi05ZmFmLTllMDQ0MDkyYjgyNi8x
LzZ6bVpBZVBPeF9xcmNmT2lESjQ0QUFZSm9GQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
NjhmNjUxLWYzYTYtNDI1Mi05ZmFmLTllMDQ0MDkyYjgyNi8xL3JIWndhWXo2N3la
SC04bWdiM09BaFc0ck1DYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAi1zbAMEAC2VNAMEAmc3ZAMEAmc5
KAMEAsNIfDANBAIAAjAHAwUAKhGlADANBgkqhkiG9w0BAQsFAAOCAQEACz0PucRd
aJKhgl5eSRVqUHYTcG0QOVYlxmAl1uwFlxjffAN4WksZuQgUH+WvOpdFSkAAPlo1
+LEHScfT7IttayTldqZ2Tr7Nmf/2NJ1dwHjFxSrknsibBIyocr4YdWwUoIMmbfBo
Wb2OfK51xkw3lG5Aey7CaTvVAVmRno3GRsotVWWhfNj/WhbqImtbB3EM9qfBvv2D
XeyqeZHC3gs3K+u5F9LpdmfwIqDb5Q3R8+RNZZvlZM6hkT0K45t2XyjOlyd2FLYG
aw/9/GZ17do2zN8OWzLfGu3r5riFNUzCtDTY+g2NEHR3zH+UitHraMGmbOs4FX3K
DDk6GeWoc1Ib5g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:56 2025 by rpki-client