Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6wrz3QKaGphs4uzxSEJS7sZxopg.roa
File: 6wrz3QKaGphs4uzxSEJS7sZxopg.roa (raw, json)
Hash identifier: NBfgnfKGb+6RqJ269ir5M18oxUJl0XHqCWKYrBzB0Co=
Subject key identifier: EB:0A:F3:DD:02:9A:1A:98:6C:E2:EC:F1:48:42:52:EE:C6:71:A2:98
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03DF3933
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6wrz3QKaGphs4uzxSEJS7sZxopg.roa
Signing time: Sat 01 Jan 2022 13:04:07 +0000
ROA not before: Sat 01 Jan 2022 13:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 217.26.190.0/23 maxlen: 23
89.42.112.0/23 maxlen: 23
77.247.120.0/22 maxlen: 22
185.227.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64960819 (0x3df3933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb0af3dd029a1a986ce2ecf1484252eec671a298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:db:78:e2:c3:ee:d5:ee:10:4e:aa:e6:ce:
06:c6:df:eb:d0:f3:bd:0a:72:f0:c7:a9:23:e9:57:
d8:df:cf:3e:79:6f:cd:5d:41:11:82:31:b1:b4:72:
ea:3d:64:6a:3f:6b:17:a0:18:6a:bd:7a:09:f0:a9:
16:db:a1:b6:46:82:17:73:11:48:79:83:2f:78:4a:
69:8c:b7:a6:35:77:e6:d3:41:f1:d4:b6:f1:58:6a:
3c:bc:c9:21:07:69:86:48:10:c8:82:5a:1d:8d:49:
48:f4:2c:de:7f:a6:bf:4b:82:d9:8e:59:d1:2a:b0:
60:a0:9e:bd:17:95:ee:01:94:7f:47:fa:76:ff:d5:
18:68:4a:58:ba:04:e6:4f:d8:da:21:90:5b:44:ab:
c7:07:7e:a1:46:ee:0b:fe:fc:7e:54:0d:de:95:6b:
b7:6f:31:85:6d:b7:8d:51:e3:6f:71:f4:21:82:4e:
64:c0:89:5d:f5:0b:11:21:fd:2d:6e:a1:c4:42:1a:
a0:e7:5c:b5:01:ae:32:f8:4a:2b:b7:12:b1:51:40:
62:fe:8b:36:1f:3e:93:df:a5:c7:17:35:ef:fa:52:
9e:e8:2d:96:ec:6d:c8:57:21:c1:5a:29:a8:25:a4:
c2:66:d4:b9:9f:17:b0:bb:0f:8d:86:61:96:6d:e0:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0A:F3:DD:02:9A:1A:98:6C:E2:EC:F1:48:42:52:EE:C6:71:A2:98
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6wrz3QKaGphs4uzxSEJS7sZxopg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.120.0/22
89.42.112.0/23
185.227.103.0/24
217.26.190.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:fb:ec:b8:e2:88:c5:78:d4:05:b5:77:46:54:89:23:d5:94:
f6:2c:af:93:9e:6e:0b:ac:44:c0:bd:7a:e6:82:1d:2c:16:6d:
39:7f:14:07:42:30:b0:c9:af:dc:51:1e:3c:64:26:e7:c3:2b:
ab:94:1a:bb:36:01:89:f2:9b:3a:4d:51:36:f7:ba:d1:e6:33:
56:7e:72:10:6c:c8:82:25:31:60:6e:94:9f:2e:9f:ca:3a:db:
da:40:4d:e5:d3:bc:d1:0b:38:1c:13:31:40:18:40:9e:aa:e1:
cb:a0:28:ea:fd:46:05:14:da:e1:23:d4:76:9b:96:0d:eb:fb:
1d:14:b6:3b:f2:4e:c2:fa:d8:70:57:38:64:99:be:6e:94:69:
e6:bf:ee:9d:46:70:46:fa:db:c5:a1:46:6f:fc:6a:15:03:2d:
5b:8c:2e:e4:49:79:d0:1c:27:80:54:78:49:e9:53:18:0e:d9:
58:49:41:8b:ff:c2:53:d1:62:a7:d1:03:18:cc:d1:de:62:68:
b7:4a:c0:79:ec:5c:06:b0:d8:96:46:85:99:43:dd:84:44:85:
b3:8e:60:d5:58:38:9d:75:80:42:5a:72:cc:73:92:89:8b:7a:
4f:6c:21:a9:0b:5f:4b:dc:57:90:fc:20:39:48:3a:fa:06:77:
2c:d9:78:5c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEA985MzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDEw
MTEzMDQwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWIwYWYzZGQwMjlh
MWE5ODZjZTJlY2YxNDg0MjUyZWVjNjcxYTI5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxC23jiw+7V7hBOqubOBsbf69DzvQpy8MepI+lX2N/PPnlv
zV1BEYIxsbRy6j1kaj9rF6AYar16CfCpFtuhtkaCF3MRSHmDL3hKaYy3pjV35tNB
8dS28VhqPLzJIQdphkgQyIJaHY1JSPQs3n+mv0uC2Y5Z0SqwYKCevReV7gGUf0f6
dv/VGGhKWLoE5k/Y2iGQW0Srxwd+oUbuC/78flQN3pVrt28xhW23jVHjb3H0IYJO
ZMCJXfULESH9LW6hxEIaoOdctQGuMvhKK7cSsVFAYv6LNh8+k9+lxxc17/pSnugt
luxtyFchwVopqCWkwmbUuZ8XsLsPjYZhlm3gldsCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTrCvPdApoamGzi7PFIQlLuxnGimDAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
LzZ3cnozUUthR3BoczR1enhTRUpTN3NaeG9wZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAk33eAMEAVkqcAMEALnjZwMEAdka
vjANBgkqhkiG9w0BAQsFAAOCAQEAbPvsuOKIxXjUBbV3RlSJI9WU9iyvk55uC6xE
wL165oIdLBZtOX8UB0IwsMmv3FEePGQm58Mrq5QauzYBifKbOk1RNve60eYzVn5y
EGzIgiUxYG6Uny6fyjrb2kBN5dO80Qs4HBMxQBhAnqrhy6Ao6v1GBRTa4SPUdpuW
Dev7HRS2O/JOwvrYcFc4ZJm+bpRp5r/unUZwRvrbxaFGb/xqFQMtW4wu5El50Bwn
gFR4SelTGA7ZWElBi//CU9Fip9EDGMzR3mJot0rAeexcBrDYlkaFmUPdhESFs45g
1Vg4nXWAQlpyzHOSiYt6T2whqQtfS9xXkPwgOUg6+gZ3LNl4XA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org