Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/6T93AuhfzhG1023ugdHreoRwi5M.roa
File: 6T93AuhfzhG1023ugdHreoRwi5M.roa (raw, json)
Hash identifier: W5TGRfeUbyohjdFGcckeuDP4REHUw2kTd9RuFxBy2Sk=
Subject key identifier: E9:3F:77:02:E8:5F:CE:11:B5:D3:6D:EE:81:D1:EB:7A:84:70:8B:93
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0552E6A2
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/6T93AuhfzhG1023ugdHreoRwi5M.roa
Signing time: Sat 01 Jan 2022 09:55:26 +0000
ROA not before: Sat 01 Jan 2022 09:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61431
IP address blocks: 109.196.130.0/24 maxlen: 24
109.196.131.0/24 maxlen: 24
109.196.135.0/24 maxlen: 24
109.196.134.0/24 maxlen: 24
109.196.136.0/23 maxlen: 23
109.196.138.0/23 maxlen: 23
109.196.142.0/24 maxlen: 24
109.196.141.0/24 maxlen: 24
109.196.143.0/24 maxlen: 24
109.196.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89319074 (0x552e6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 09:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e93f7702e85fce11b5d36dee81d1eb7a84708b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:40:77:c8:5d:2e:54:f2:fe:d1:7d:06:5d:
b0:db:7d:9a:bb:c4:11:93:4c:ad:f8:07:52:52:53:
53:da:54:9b:89:cd:de:bc:f5:4a:ca:92:a4:02:6a:
f2:93:3f:d0:66:fe:1e:d0:64:5c:75:0c:b9:9f:a4:
0b:22:b0:8b:8b:dc:7b:34:43:40:82:9b:b2:79:7a:
cd:b3:9d:63:11:72:e2:99:34:a5:57:0b:0d:37:b6:
48:2b:6d:6d:d5:f9:cb:b6:e9:2f:a2:4d:dd:38:44:
80:b5:22:be:36:e6:42:c0:36:b0:88:13:79:31:f1:
ed:84:e0:f3:bc:11:0b:ba:b1:3a:50:f3:d6:78:22:
be:72:fa:19:e9:82:cd:1e:a5:c4:dd:e9:2d:05:07:
b9:cc:50:5e:1f:6c:e5:36:6a:9e:95:5c:53:ec:d3:
63:33:d4:3a:9b:91:8e:1a:4d:70:88:b4:e6:df:2c:
a2:9d:99:fd:d1:70:b6:23:ff:46:2b:74:b8:45:b5:
9a:2e:24:91:2a:62:42:7b:2b:42:b5:9e:55:1e:7c:
5a:e2:8c:05:82:77:16:10:d3:ed:65:96:c1:c9:23:
0f:22:3e:c3:28:06:a7:88:7d:99:74:84:bb:25:bd:
21:dd:96:bd:a8:af:06:b2:ca:3b:85:e5:e9:af:9f:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3F:77:02:E8:5F:CE:11:B5:D3:6D:EE:81:D1:EB:7A:84:70:8B:93
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/6T93AuhfzhG1023ugdHreoRwi5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.130.0/23
109.196.134.0-109.196.143.255
Signature Algorithm: sha256WithRSAEncryption
8b:cb:84:fc:25:10:f6:90:eb:d0:ba:0d:bd:32:d3:e5:0e:d5:
92:f6:75:5f:9e:dd:40:3e:07:f2:fd:b9:70:ec:a9:8a:ea:d7:
85:9e:37:10:f4:1c:0c:74:39:ab:75:ba:e7:d5:05:67:b9:c0:
7a:c9:74:bf:d5:c6:dd:b6:1a:4b:aa:d2:12:bf:6e:95:04:3e:
fc:6d:1f:77:d0:97:fd:bb:ce:71:ba:f8:01:96:76:0b:5f:7a:
d1:0c:cb:6e:5c:90:d3:35:c3:07:6b:85:75:3f:3c:0b:fa:cf:
0e:58:81:10:b4:b6:a7:5d:ea:d8:d4:f4:7b:7e:c1:70:6a:e5:
cf:76:75:a3:da:81:fb:0a:58:23:00:cd:d6:d4:c4:eb:e0:78:
4d:a1:a8:51:b4:59:6f:bb:4f:3c:72:8f:c2:a0:f8:82:ba:f6:
86:87:98:15:05:3e:37:63:8b:3d:20:43:f3:f6:58:5a:f1:5b:
e8:7f:e4:6e:bf:65:72:44:9b:94:37:75:b8:26:c8:90:48:7e:
30:16:a8:80:b1:65:2d:be:1f:83:f8:cb:89:1f:7a:b0:14:0d:
54:7f:32:74:c2:63:fd:23:bf:e5:fa:53:49:a3:f3:6d:d6:eb:
be:85:49:d8:ba:4b:52:45:ef:3b:70:0d:fe:47:09:02:a4:4b:
98:3c:c4:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEBVLmojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzM4ZWY0MWIyYzAxMDVhOTFjY2JiOWM4OTMzN2ZhZWIxMjlmZjg0MB4XDTIyMDEw
MTA5NTUyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTkzZjc3MDJlODVm
Y2UxMWI1ZDM2ZGVlODFkMWViN2E4NDcwOGI5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWZQHfIXS5U8v7RfQZdsNt9mrvEEZNMrfgHUlJTU9pUm4nN
3rz1SsqSpAJq8pM/0Gb+HtBkXHUMuZ+kCyKwi4vcezRDQIKbsnl6zbOdYxFy4pk0
pVcLDTe2SCttbdX5y7bpL6JN3ThEgLUivjbmQsA2sIgTeTHx7YTg87wRC7qxOlDz
1ngivnL6GemCzR6lxN3pLQUHucxQXh9s5TZqnpVcU+zTYzPUOpuRjhpNcIi05t8s
op2Z/dFwtiP/Rit0uEW1mi4kkSpiQnsrQrWeVR58WuKMBYJ3FhDT7WWWwckjDyI+
wygGp4h9mXSEuyW9Id2WvaivBrLKO4Xl6a+fH5kCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBTpP3cC6F/OEbXTbe6B0et6hHCLkzAfBgNVHSMEGDAWgBSDOO9BssAQWpHM
u5yJM3+usSn/hDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6anZRYkxBRUZxUnpMdWNpVE5fcnJFcF80US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8x
LzZUOTNBdWhmemhHMTAyM3VnZEhyZW9Sd2k1TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
NDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8xL2d6anZRYkxBRUZx
UnpMdWNpVE5fcnJFcF80US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAW3EgjAMAwQBbcSGAwQEbcSAMA0G
CSqGSIb3DQEBCwUAA4IBAQCLy4T8JRD2kOvQug29MtPlDtWS9nVfnt1APgfy/blw
7KmK6teFnjcQ9BwMdDmrdbrn1QVnucB6yXS/1cbdthpLqtISv26VBD78bR930Jf9
u85xuvgBlnYLX3rRDMtuXJDTNcMHa4V1PzwL+s8OWIEQtLanXerY1PR7fsFwauXP
dnWj2oH7ClgjAM3W1MTr4HhNoahRtFlvu088co/CoPiCuvaGh5gVBT43Y4s9IEPz
9lha8Vvof+Ruv2VyRJuUN3W4JsiQSH4wFqiAsWUtvh+D+MuJH3qwFA1UfzJ0wmP9
I7/l+lNJo/Nt1uu+hUnYuktSRe87cA3+RwkCpEuYPMRJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-fra.rpki-client.org