Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/6XfT3x2Sr0Y4YZrVaWByWvdnTp0.roa
File: 6XfT3x2Sr0Y4YZrVaWByWvdnTp0.roa (raw, json)
Hash identifier: J+YyqAVhdV3xwxc8i/Wq/9ANBco8LpGw8AQYdbVhzcY=
Subject key identifier: E9:77:D3:DF:1D:92:AF:46:38:61:9A:D5:69:60:72:5A:F7:67:4E:9D
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 0C37671C
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/6XfT3x2Sr0Y4YZrVaWByWvdnTp0.roa
Signing time: Sat 01 Jan 2022 11:58:33 +0000
ROA not before: Sat 01 Jan 2022 11:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12952
IP address blocks: 176.241.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204957468 (0xc37671c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Jan 1 11:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e977d3df1d92af4638619ad56960725af7674e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:4e:e3:64:a4:85:56:0c:e8:8b:bf:c8:35:
65:50:0a:86:d0:9f:b9:0e:a2:4e:08:a4:aa:54:a0:
04:09:99:37:b2:d5:b8:e0:51:9b:a4:f0:c7:95:12:
fc:2e:cf:bd:55:d4:8a:9b:06:03:91:8b:db:8c:c7:
fe:6f:12:a3:85:c9:aa:b5:36:29:2a:ea:ae:7c:47:
63:96:fd:21:3f:18:f7:5a:66:1d:d7:fd:b4:3e:0e:
1d:60:d6:a1:90:a8:e3:38:93:23:46:73:b5:37:2e:
bb:ee:4c:8e:e7:31:8b:1c:9d:c2:09:1d:05:8d:ce:
b9:37:c9:ad:06:bc:b0:71:09:b0:66:d2:49:32:c9:
7c:9c:b1:1a:10:63:07:4a:8d:d1:bd:4f:33:e0:2a:
b2:25:07:a8:8b:f4:ac:51:90:d6:be:94:57:49:94:
27:e9:a2:ca:e2:47:04:74:96:5c:ee:22:51:13:9c:
38:b0:83:64:33:f2:5c:bd:02:d9:27:0e:32:40:04:
78:4d:59:ed:23:70:cb:2e:e0:e4:52:dd:61:f3:02:
08:95:b2:40:94:7e:8a:ec:0b:c1:65:f6:24:e2:d5:
29:6b:ca:da:dc:6c:83:0a:2f:dd:e9:23:11:f7:3a:
f8:87:11:99:16:1e:13:66:d8:99:a8:a9:e3:25:68:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:D3:DF:1D:92:AF:46:38:61:9A:D5:69:60:72:5A:F7:67:4E:9D
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/6XfT3x2Sr0Y4YZrVaWByWvdnTp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.93.0/24
Signature Algorithm: sha256WithRSAEncryption
46:19:2f:5b:b2:0e:5b:8c:9f:cf:cc:7b:6b:43:59:f0:4d:88:
a2:dc:1e:67:7c:ae:8a:89:dc:36:c7:c4:03:de:1b:a2:36:52:
f4:1a:b6:07:b2:fd:7f:90:f6:b2:4b:24:35:2e:49:d5:95:41:
0a:a8:64:05:62:1f:a0:0d:ae:03:ff:4b:29:68:df:02:ba:33:
fd:66:89:6b:db:30:46:e4:91:03:e1:4c:d8:fb:c7:38:65:a2:
e1:df:91:ea:de:c8:58:25:50:91:54:2d:a4:32:19:03:6e:3f:
b4:1e:ad:f9:e8:83:f9:47:86:cd:43:38:76:0d:fb:3f:1b:f2:
11:e3:c9:02:f4:d0:75:ee:3c:c3:9a:0a:ec:65:ff:8a:63:dc:
7e:29:35:41:66:65:4d:d0:4f:11:31:6b:bb:8c:e9:5a:a5:84:
71:12:d6:c3:e3:90:09:37:ae:dc:2b:1b:19:e8:7e:30:95:93:
b2:ab:cc:fa:57:a0:22:b9:4b:b7:3f:5b:a3:15:8b:35:63:3d:
49:1c:3d:7b:dc:af:2c:d7:d9:d9:c5:34:d4:ba:3d:4d:18:dc:
02:b9:2c:20:53:0a:85:81:d7:2b:24:97:93:5c:f4:2d:c7:4c:
da:41:ef:6a:02:75:4e:7d:88:73:06:fd:d4:7b:99:c1:7c:1c:
09:71:ac:9f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDDdnHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NGRmZTI2ZDQwMzE0MWJlOTA1OWFiMjE0NDMyNWI0MDJkNGNhYjdkMB4XDTIyMDEw
MTExNTgzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTk3N2QzZGYxZDky
YWY0NjM4NjE5YWQ1Njk2MDcyNWFmNzY3NGU5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkbTuNkpIVWDOiLv8g1ZVAKhtCfuQ6iTgikqlSgBAmZN7LV
uOBRm6Twx5US/C7PvVXUipsGA5GL24zH/m8So4XJqrU2KSrqrnxHY5b9IT8Y91pm
Hdf9tD4OHWDWoZCo4ziTI0ZztTcuu+5MjucxixydwgkdBY3OuTfJrQa8sHEJsGbS
STLJfJyxGhBjB0qN0b1PM+AqsiUHqIv0rFGQ1r6UV0mUJ+miyuJHBHSWXO4iUROc
OLCDZDPyXL0C2ScOMkAEeE1Z7SNwyy7g5FLdYfMCCJWyQJR+iuwLwWX2JOLVKWvK
2txsgwov3ekjEfc6+IcRmRYeE2bYmaip4yVohfkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTpd9PfHZKvRjhhmtVpYHJa92dOnTAfBgNVHSMEGDAWgBRk3+JtQDFBvpBZ
qyFEMltALUyrfTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pOX2liVUF4UWI2UVdhc2hSREpiUUMxTXEzMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvNWQ2MjU1LTY1YzktNGJmYS1iOWQ3LWY2NTc1MTlkMDIzMy8x
LzZYZlQzeDJTcjBZNFlaclZhV0J5V3ZkblRwMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
NWQ2MjU1LTY1YzktNGJmYS1iOWQ3LWY2NTc1MTlkMDIzMy8xL1pOX2liVUF4UWI2
UVdhc2hSREpiUUMxTXEzMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALDxXTANBgkqhkiG9w0BAQsFAAOC
AQEARhkvW7IOW4yfz8x7a0NZ8E2IotweZ3yuioncNsfEA94bojZS9Bq2B7L9f5D2
skskNS5J1ZVBCqhkBWIfoA2uA/9LKWjfAroz/WaJa9swRuSRA+FM2PvHOGWi4d+R
6t7IWCVQkVQtpDIZA24/tB6t+eiD+UeGzUM4dg37PxvyEePJAvTQde48w5oK7GX/
imPcfik1QWZlTdBPETFru4zpWqWEcRLWw+OQCTeu3CsbGeh+MJWTsqvM+legIrlL
tz9boxWLNWM9SRw9e9yvLNfZ2cU01Lo9TRjcArksIFMKhYHXKySXk1z0LcdM2kHv
agJ1Tn2Icwb91HuZwXwcCXGsnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:01 2024 by rpki-client on console-fra.rpki-client.org