Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6oJfTHzSqt5mpD3_LNu4UCPhDvo.roa
File: 6oJfTHzSqt5mpD3_LNu4UCPhDvo.roa (raw, json)
Hash identifier: s7YHiu8ed6ULX504aaUVoN3swqtTFpN1Q8CNPCHC6ok=
Subject key identifier: EA:82:5F:4C:7C:D2:AA:DE:66:A4:3D:FF:2C:DB:B8:50:23:E1:0E:FA
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1AC4EE0E
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6oJfTHzSqt5mpD3_LNu4UCPhDvo.roa
Signing time: Sat 01 Jan 2022 16:03:16 +0000
ROA not before: Sat 01 Jan 2022 16:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209490
IP address blocks: 176.235.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449113614 (0x1ac4ee0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea825f4c7cd2aade66a43dff2cdbb85023e10efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:9a:32:dd:8e:ba:ff:82:b7:02:d3:0c:7d:
78:eb:a7:36:82:67:fb:5b:e4:8d:73:be:93:6f:0e:
37:bf:63:b5:ad:24:b5:3e:6a:2d:c5:78:45:26:ab:
1a:b0:44:e1:fe:f4:e8:97:f2:3f:11:98:72:32:0a:
ec:2a:40:e6:48:5a:c8:3e:5a:7a:b5:20:23:1a:5f:
29:60:d1:60:31:ae:5d:10:bd:0f:bc:b9:91:74:57:
8b:71:44:88:bf:00:da:a1:5e:c7:28:ef:45:24:12:
9f:36:c9:8f:9a:bf:2c:36:56:70:4d:ab:c2:78:15:
a2:7c:f1:85:af:be:1a:f1:f9:bd:35:48:88:5b:9e:
83:3b:c4:c3:54:37:07:04:78:df:7c:7c:40:59:fc:
ad:0a:c6:86:64:96:74:ae:c2:e8:fd:e7:63:96:0b:
62:b5:d0:52:34:72:2c:45:f1:b1:b5:a7:e2:c2:7c:
d0:c4:09:3c:7d:8c:9a:c5:78:0b:f8:ec:a0:36:3d:
7a:14:5c:80:58:0e:e4:47:53:7c:a5:d2:5b:93:34:
a3:04:1b:86:fa:05:85:eb:2e:70:c5:c9:ea:fb:52:
28:db:78:e5:07:89:89:9b:b9:69:ad:a4:c9:23:f9:
aa:8a:b6:55:73:ee:78:ad:3d:29:bd:89:b2:a9:bc:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:5F:4C:7C:D2:AA:DE:66:A4:3D:FF:2C:DB:B8:50:23:E1:0E:FA
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6oJfTHzSqt5mpD3_LNu4UCPhDvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.235.119.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e4:d9:1e:8a:70:bd:b1:2d:4f:bd:ce:5f:63:1c:e2:30:87:
8c:15:ca:7a:6c:40:b0:c2:bf:6b:c2:9c:fb:f7:bf:3b:1f:9a:
00:ce:24:0b:b4:3a:17:fb:fd:e7:4f:57:9f:7e:61:5c:c6:2f:
4c:b1:9f:d9:20:35:1f:3b:d1:6c:c3:fe:c6:72:60:86:ca:e0:
2c:41:70:77:cb:72:11:96:d4:0a:73:33:11:8b:fe:7c:c5:b3:
d6:87:f1:ea:71:a1:39:c1:d8:8e:5f:a6:9e:0a:34:c9:6f:81:
49:fe:e9:f0:ad:ee:50:bc:12:d4:0d:f0:82:6d:39:5d:a1:af:
ba:92:cb:e8:c7:1b:b8:e4:ab:08:cb:a0:84:a6:75:34:76:c5:
6e:ff:21:1d:3c:d8:f9:04:ec:ce:f7:5a:46:c9:ce:f5:71:da:
36:22:62:2a:63:b4:a7:c4:a7:ed:fe:e5:06:27:15:84:87:c0:
24:c6:93:bc:75:61:c7:a6:5e:c9:7b:be:f8:48:1e:92:33:61:
dc:72:b4:45:02:00:f4:f1:41:21:52:79:83:71:a0:0c:8a:57:
d9:d0:30:e1:5e:e6:a5:67:51:38:04:55:32:81:a7:fe:d4:04:
a2:44:da:ca:e9:a9:db:94:47:ea:77:68:65:23:ca:9e:9e:57:
3b:5e:55:63
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGsTuDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZDU5YzQzMjNmNzY3Y2U0ZmZjODVkYWFkMjA4YjkwYzA0ZmJkM2U5MB4XDTIyMDEw
MTE2MDMxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWE4MjVmNGM3Y2Qy
YWFkZTY2YTQzZGZmMmNkYmI4NTAyM2UxMGVmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKBcmjLdjrr/grcC0wx9eOunNoJn+1vkjXO+k28ON79jta0k
tT5qLcV4RSarGrBE4f706JfyPxGYcjIK7CpA5khayD5aerUgIxpfKWDRYDGuXRC9
D7y5kXRXi3FEiL8A2qFexyjvRSQSnzbJj5q/LDZWcE2rwngVonzxha++GvH5vTVI
iFuegzvEw1Q3BwR433x8QFn8rQrGhmSWdK7C6P3nY5YLYrXQUjRyLEXxsbWn4sJ8
0MQJPH2MmsV4C/jsoDY9ehRcgFgO5EdTfKXSW5M0owQbhvoFhesucMXJ6vtSKNt4
5QeJiZu5aa2kySP5qoq2VXPueK09Kb2Jsqm8DUcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqgl9MfNKq3makPf8s27hQI+EO+jAfBgNVHSMEGDAWgBSNWcQyP3Z85P/I
XarSCLkMBPvT6TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pWbkVNajkyZk9UX3lGMnEwZ2k1REFUNzAtay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjYvZjA5ZWNmLWU4MDUtNDE1OC1iMzE1LWYyYmU5ZjZjNjY0Yy8x
LzZvSmZUSHpTcXQ1bXBEM19MTnU0VUNQaER2by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYv
ZjA5ZWNmLWU4MDUtNDE1OC1iMzE1LWYyYmU5ZjZjNjY0Yy8xL2pWbkVNajkyZk9U
X3lGMnEwZ2k1REFUNzAtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALDrdzANBgkqhkiG9w0BAQsFAAOC
AQEAZ+TZHopwvbEtT73OX2Mc4jCHjBXKemxAsMK/a8Kc+/e/Ox+aAM4kC7Q6F/v9
509Xn35hXMYvTLGf2SA1HzvRbMP+xnJghsrgLEFwd8tyEZbUCnMzEYv+fMWz1ofx
6nGhOcHYjl+mngo0yW+BSf7p8K3uULwS1A3wgm05XaGvupLL6McbuOSrCMughKZ1
NHbFbv8hHTzY+QTszvdaRsnO9XHaNiJiKmO0p8Sn7f7lBicVhIfAJMaTvHVhx6Ze
yXu++EgekjNh3HK0RQIA9PFBIVJ5g3GgDIpX2dAw4V7mpWdROARVMoGn/tQEokTa
yump25RH6ndoZSPKnp5XO15VYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org