Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/m06zz6HGOPkf-ztJHdpGp16IOHA.roa
File: m06zz6HGOPkf-ztJHdpGp16IOHA.roa (raw, json)
Hash identifier: wLByBLKwX7G0OGHNGE9f15aE9S6e7EBjde5bj4VO/iU=
Subject key identifier: 9B:4E:B3:CF:A1:C6:38:F9:1F:FB:3B:49:1D:DA:46:A7:5E:88:38:70
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0184F581457C9FFDD8EC0A63391C68B4BE97
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/m06zz6HGOPkf-ztJHdpGp16IOHA.roa
Signing time: Fri 09 Dec 2022 06:10:00 +0000
ROA not before: Fri 09 Dec 2022 06:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.133.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:81:45:7c:9f:fd:d8:ec:0a:63:39:1c:68:b4:be:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Dec 9 06:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b4eb3cfa1c638f91ffb3b491dda46a75e883870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:19:7c:07:54:66:1e:16:a7:a1:3f:7f:3b:
09:7c:b6:0a:88:c6:6b:4c:58:1d:a9:0a:69:3d:ca:
41:17:e3:ca:61:07:d8:d3:31:40:ab:70:b2:87:cd:
ef:b6:c9:cd:da:90:d0:ac:4b:ff:ab:24:07:f2:f3:
db:0a:38:ac:0e:02:fb:99:81:77:37:9f:f4:dd:27:
16:7f:f7:46:b1:59:ae:12:94:db:ca:37:03:a3:af:
d4:c8:f4:64:7e:ac:cb:b3:eb:3b:17:84:f7:ee:48:
62:c0:61:85:5c:b8:6a:5b:dc:89:e6:f7:2f:3c:42:
2f:66:29:13:ec:1f:4b:63:6d:a6:07:4f:ec:78:c8:
88:b1:49:a9:9b:2e:76:e2:95:7b:d0:54:9c:92:06:
63:c3:5b:87:ff:f6:29:b0:4c:2d:82:bf:23:e0:fb:
27:05:7b:bb:fa:c2:a7:5f:86:0e:3d:f7:f7:f8:f8:
a4:d9:47:63:68:31:ad:94:8a:fa:12:4b:76:df:37:
f5:d6:7d:3f:32:05:d5:2e:f0:89:0f:91:b4:2a:92:
32:eb:57:fd:87:7a:71:15:85:e3:db:2d:f8:a6:bc:
8b:ed:7d:e1:29:43:53:d5:f9:84:2d:0b:69:7e:40:
3c:da:cb:77:44:0d:c7:93:4f:35:fa:bb:6d:b5:ce:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:B3:CF:A1:C6:38:F9:1F:FB:3B:49:1D:DA:46:A7:5E:88:38:70
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/m06zz6HGOPkf-ztJHdpGp16IOHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.106.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:ba:6c:4d:fb:b5:b9:b3:35:e1:60:21:6d:3d:ff:2d:d8:30:
23:18:15:6b:4d:26:a1:9a:06:fb:ee:6a:b3:b5:ef:ab:67:2c:
a4:f7:7e:65:2d:5f:85:ab:c9:60:91:4c:af:cf:79:67:c6:6d:
df:51:8a:84:98:e0:53:39:2e:68:75:d4:cb:49:db:85:ba:5d:
9f:ec:76:2b:99:48:7b:58:15:fd:f9:16:ae:a3:85:a7:05:53:
ea:c0:49:20:1f:7f:53:6b:18:a3:90:6e:54:fb:ad:1c:27:f2:
bb:cc:1e:3c:44:98:c7:aa:e0:53:50:ac:e8:c1:f5:f8:a0:71:
0d:66:f5:05:db:01:27:82:1a:b7:39:e3:bf:6c:2a:b1:43:34:
b2:a8:42:48:0f:27:8b:50:52:4a:db:d2:b2:3e:e7:d3:6d:94:
76:ea:6c:7d:68:16:54:0b:31:28:2d:ec:06:64:aa:2a:52:7a:
68:21:4f:76:23:9b:77:69:c5:79:61:ab:eb:3c:3c:1e:8d:10:
cb:a1:85:6c:0a:26:dc:ec:5c:e3:e2:77:a2:56:67:6a:65:ef:
85:6b:7d:87:f1:67:14:a5:0d:71:e6:52:c6:cf:c8:c5:95:cb:
f1:dd:72:a4:79:a8:83:e8:29:27:71:c9:50:44:23:76:0e:6f:
64:98:84:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYT1gUV8n/3Y7ApjORxotL6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjIxMjA5MDYxMDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjRlYjNjZmExYzYzOGY5MWZmYjNiNDkxZGRhNDZhNzVlODgzODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWoZfAdUZh4Wp6E/fzsJfLYKiMZr
TFgdqQppPcpBF+PKYQfY0zFAq3Cyh83vtsnN2pDQrEv/qyQH8vPbCjisDgL7mYF3
N5/03ScWf/dGsVmuEpTbyjcDo6/UyPRkfqzLs+s7F4T37khiwGGFXLhqW9yJ5vcv
PEIvZikT7B9LY22mB0/seMiIsUmpmy524pV70FSckgZjw1uH//YpsEwtgr8j4Psn
BXu7+sKnX4YOPff3+Pik2UdjaDGtlIr6Ekt23zf11n0/MgXVLvCJD5G0KpIy61f9
h3pxFYXj2y34pryL7X3hKUNT1fmELQtpfkA82st3RA3Hk081+rtttc6zbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtOs8+hxjj5H/s7SR3aRqdeiDhwMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvbTA2eno2SEdPUGtmLXp0SkhkcEdwMTZJT0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYVqMA0G
CSqGSIb3DQEBCwUAA4IBAQC2umxN+7W5szXhYCFtPf8t2DAjGBVrTSahmgb77mqz
te+rZyyk935lLV+Fq8lgkUyvz3lnxm3fUYqEmOBTOS5oddTLSduFul2f7HYrmUh7
WBX9+Rauo4WnBVPqwEkgH39TaxijkG5U+60cJ/K7zB48RJjHquBTUKzowfX4oHEN
ZvUF2wEnghq3OeO/bCqxQzSyqEJIDyeLUFJK29KyPufTbZR26mx9aBZUCzEoLewG
ZKoqUnpoIU92I5t3acV5YavrPDwejRDLoYVsCibc7Fzj4neiVmdqZe+Fa32H8WcU
pQ1x5lLGz8jFlcvx3XKkeaiD6CkncclQRCN2Dm9kmIRI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org