Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/6FBV1feRKwTl4qp1otl-naNcnvM.roa
File: 6FBV1feRKwTl4qp1otl-naNcnvM.roa (raw, json)
Hash identifier: afG+C4s5+u3V8wACjVqcu2H2TueLcaoTOSQkITfVmk0=
Subject key identifier: E8:50:55:D5:F7:91:2B:04:E5:E2:AA:75:A2:D9:7E:9D:A3:5C:9E:F3
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 0137FA
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/6FBV1feRKwTl4qp1otl-naNcnvM.roa
Signing time: Wed 27 Apr 2022 11:13:13 +0000
ROA not before: Wed 27 Apr 2022 11:13:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35442
IP address blocks: 193.239.254.0/23 maxlen: 23
91.195.96.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79866 (0x137fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Apr 27 11:13:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e85055d5f7912b04e5e2aa75a2d97e9da35c9ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:a2:07:90:85:f0:10:98:02:66:57:02:15:
cc:69:d9:2b:d5:28:56:a5:3f:6f:27:d3:a2:09:10:
37:a3:3b:8a:a1:a3:45:bf:72:78:ed:25:da:75:4d:
f3:4c:70:8c:b1:09:1d:00:30:06:63:a6:39:3a:6c:
59:35:a3:22:54:77:00:5c:c3:e4:d4:36:96:1a:52:
dc:2c:b7:f7:9f:53:11:fc:8e:2d:1c:d6:8e:c9:64:
a3:29:55:45:a7:35:27:d9:f2:ae:0d:f2:08:2d:bd:
ce:92:34:d7:e2:c2:08:0c:b6:3b:d6:f7:ef:98:ee:
dd:17:dc:08:d7:7c:39:68:e4:c5:08:75:a7:81:cf:
0e:1b:20:09:7d:10:29:6a:cf:ee:fb:8b:64:7f:64:
41:e2:be:6b:32:e3:1c:d2:b9:5e:e0:b7:f4:19:4f:
dc:7b:31:92:75:96:6f:ea:ca:a2:58:d5:28:51:9d:
ef:f0:6b:b0:8b:62:0a:35:11:aa:1d:f7:31:cb:1b:
4c:13:fd:e4:3e:83:4a:df:19:db:92:eb:e5:98:84:
e9:86:39:2d:c5:dc:88:3d:54:ec:52:f9:71:13:4b:
2a:d0:1f:36:7d:70:91:ff:3a:08:c1:5d:d5:58:7d:
7b:0b:91:40:5b:c1:3e:2f:72:09:ea:6b:39:7c:5a:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:55:D5:F7:91:2B:04:E5:E2:AA:75:A2:D9:7E:9D:A3:5C:9E:F3
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/6FBV1feRKwTl4qp1otl-naNcnvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.96.0/23
193.239.254.0/23
Signature Algorithm: sha256WithRSAEncryption
13:32:3a:a5:49:94:e6:ae:6f:f2:43:1e:97:d7:a7:32:29:f1:
6e:5c:17:46:53:d6:09:43:53:2c:a1:00:6f:7d:69:07:bc:76:
28:15:47:28:3b:c6:0e:75:38:62:f9:0a:32:f1:5c:49:3e:a6:
32:81:92:14:b1:31:77:47:f0:09:e7:3f:17:6a:be:2c:e2:21:
ee:21:f6:04:47:0f:f3:93:26:63:72:23:83:ad:1f:a1:a1:3e:
dc:c0:16:8d:cd:47:ad:60:36:e9:62:56:69:75:a0:36:a2:2e:
94:e8:29:c1:d9:d6:aa:21:40:7f:0d:d7:1b:17:9e:d0:3e:12:
6f:75:52:58:e7:60:ec:6b:37:b8:a8:a1:95:be:62:a7:3b:bb:
a8:53:15:ac:63:fc:9f:e4:c8:c4:29:e5:d1:51:78:58:d1:d8:
df:51:b0:00:99:c7:20:01:6e:11:28:8a:d9:e1:59:b9:cb:a5:
99:60:1d:c0:68:ca:5d:76:eb:b2:d9:4b:e4:f7:2b:a4:52:8b:
50:9d:16:23:ae:23:85:de:61:c1:d6:01:59:58:65:c4:ed:74:
0a:f8:6b:5f:d8:1b:24:dd:74:44:e2:24:25:7a:04:5b:76:e6:
d7:a8:1f:cf:b0:de:c2:2e:2a:25:08:5e:e2:22:88:eb:a9:76:
51:39:4d:91
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDATf6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY3
Zjg0ZTc0NjkxYzNiN2ZkMmQ1MThlNTYyZjllYTg3ZGU1ZDNmNTAwHhcNMjIwNDI3
MTExMzEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlODUwNTVkNWY3OTEy
YjA0ZTVlMmFhNzVhMmQ5N2U5ZGEzNWM5ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvhCiB5CF8BCYAmZXAhXMadkr1ShWpT9vJ9OiCRA3ozuKoaNF
v3J47SXadU3zTHCMsQkdADAGY6Y5OmxZNaMiVHcAXMPk1DaWGlLcLLf3n1MR/I4t
HNaOyWSjKVVFpzUn2fKuDfIILb3OkjTX4sIIDLY71vfvmO7dF9wI13w5aOTFCHWn
gc8OGyAJfRApas/u+4tkf2RB4r5rMuMc0rle4Lf0GU/cezGSdZZv6sqiWNUoUZ3v
8Guwi2IKNRGqHfcxyxtME/3kPoNK3xnbkuvlmITphjktxdyIPVTsUvlxE0sq0B82
fXCR/zoIwV3VWH17C5FAW8E+L3IJ6ms5fFpkOQIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFOhQVdX3kSsE5eKqdaLZfp2jXJ7zMB8GA1UdIwQYMBaAFGf4TnRpHDt/0tUY
5WL56ofeXT9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Wl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZhLzEv
NkZCVjFmZVJLd1RsNHFwMW90bC1uYU5jbnZNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9l
OTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZhLzEvWl9oT2RHa2NPM19T
MVJqbFl2bnFoOTVkUDFBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8NgAwQBwe/+MA0GCSqGSIb3DQEB
CwUAA4IBAQATMjqlSZTmrm/yQx6X16cyKfFuXBdGU9YJQ1MsoQBvfWkHvHYoFUco
O8YOdThi+Qoy8VxJPqYygZIUsTF3R/AJ5z8Xar4s4iHuIfYERw/zkyZjciODrR+h
oT7cwBaNzUetYDbpYlZpdaA2oi6U6CnB2daqIUB/DdcbF57QPhJvdVJY52Dsaze4
qKGVvmKnO7uoUxWsY/yf5MjEKeXRUXhY0djfUbAAmccgAW4RKIrZ4Vm5y6WZYB3A
aMpdduuy2Uvk9yukUotQnRYjriOF3mHB1gFZWGXE7XQK+Gtf2Bsk3XRE4iQlegRb
dubXqB/PsN7CLiolCF7iIojrqXZROU2R
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:24 2025 by rpki-client