Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/dY7d1AuOI4ObmwoG9N3Uxf6wjJ4.roa
File: dY7d1AuOI4ObmwoG9N3Uxf6wjJ4.roa (raw, json)
Hash identifier: V6DqtU2RdZ2zsbQd30jJVxHdNGlNzajeakEFGM8mKYE=
Subject key identifier: 75:8E:DD:D4:0B:8E:23:83:9B:9B:0A:06:F4:DD:D4:C5:FE:B0:8C:9E
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 01831C85061570A0F9D6921D3450DC3D7AA8
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/dY7d1AuOI4ObmwoG9N3Uxf6wjJ4.roa
Signing time: Thu 08 Sep 2022 09:53:43 +0000
ROA not before: Thu 08 Sep 2022 09:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56694
IP address blocks: 185.217.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:85:06:15:70:a0:f9:d6:92:1d:34:50:dc:3d:7a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Sep 8 09:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=758eddd40b8e23839b9b0a06f4ddd4c5feb08c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:56:23:0f:4b:9b:fd:86:17:97:c1:cb:21:b5:
f3:d5:d7:85:38:c9:f5:57:8e:88:4d:33:50:e8:4e:
1e:01:23:86:a3:8a:65:09:1c:1a:3c:b7:44:08:af:
68:04:a6:c1:91:27:30:cf:c8:5b:cf:49:57:15:f7:
04:13:0a:f2:66:4c:84:0a:68:00:38:e0:09:ae:34:
0f:6d:b0:76:b1:fb:bb:4c:89:97:bf:51:e0:72:fb:
b6:0b:7e:e5:6c:86:77:2b:11:4f:43:1a:9e:f9:09:
97:f6:50:8e:35:0e:56:e9:c3:f2:58:4a:53:db:9e:
96:99:6a:fb:b9:5b:53:56:dd:62:9c:32:0b:69:83:
5e:b8:1e:1a:66:28:7f:3b:e6:cb:15:38:6d:6f:9f:
0e:ff:68:89:d6:b2:fa:94:26:07:06:7f:29:a0:28:
4d:0a:09:ce:9d:91:0d:f3:17:cc:ba:ae:85:76:c1:
5d:07:7d:b1:b2:a1:d4:09:32:bd:a6:78:4f:69:07:
7d:73:0c:f1:7c:d9:33:b5:33:a6:6b:9c:17:da:1a:
ac:7b:e8:f5:85:8d:4c:a3:4a:c1:8b:82:8c:12:6c:
bc:09:f5:7a:01:3b:e3:ec:45:99:d4:35:8e:d9:fe:
96:d9:a1:1f:69:4f:5a:08:11:8e:79:15:86:e3:d1:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8E:DD:D4:0B:8E:23:83:9B:9B:0A:06:F4:DD:D4:C5:FE:B0:8C:9E
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/dY7d1AuOI4ObmwoG9N3Uxf6wjJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.128.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ca:a8:bf:56:ea:c5:4f:24:28:fd:b6:3e:fa:53:fc:fa:c9:
92:a0:fe:6a:86:e7:89:0b:49:33:5c:1d:ca:63:0e:60:b6:06:
99:0f:eb:35:0d:8c:41:8a:19:3d:7d:cd:87:a6:d0:93:d3:87:
05:4e:fa:b0:bb:97:35:1e:3c:f9:2f:da:d6:4d:8c:c7:e4:4d:
6f:86:29:0f:20:21:1a:16:df:e7:ed:96:3f:9a:0f:81:fc:64:
72:17:85:04:37:fc:f2:98:c7:71:5e:15:85:8f:bb:45:75:62:
bd:0a:df:00:db:de:a3:e1:ba:e0:35:02:5a:1d:1b:d9:cf:1f:
5f:8b:77:6c:04:29:29:e1:0e:7d:89:71:44:fa:17:a8:12:4e:
83:5f:df:16:84:e2:e3:cf:5b:eb:1c:b7:e3:7f:42:b0:68:a9:
05:dc:a0:20:68:84:52:10:78:1e:5d:df:93:2a:a7:21:5d:f3:
2c:37:96:61:82:07:0e:ce:5f:b8:b0:e4:07:18:bd:9c:54:93:
a6:14:75:ac:03:78:b7:92:c2:7a:60:88:33:2a:78:da:47:24:
12:f8:11:6d:8e:1d:c8:85:86:15:09:a6:08:a1:74:f7:1b:51:
99:24:f2:d6:8f:be:0f:c7:47:ef:6c:fe:b4:5e:69:94:e3:f5:
df:8f:ce:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMchQYVcKD51pIdNFDcPXqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTc1NzQ0MmU0N2Y4MjYwOGJlZjQyM2RhYzM0NGMyNTM1
OGRiZjkwHhcNMjIwOTA4MDk1MzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NThlZGRkNDBiOGUyMzgzOWI5YjBhMDZmNGRkZDRjNWZlYjA4YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVYjD0ub/YYXl8HLIbXz1deFOMn1
V46ITTNQ6E4eASOGo4plCRwaPLdECK9oBKbBkScwz8hbz0lXFfcEEwryZkyECmgA
OOAJrjQPbbB2sfu7TImXv1Hgcvu2C37lbIZ3KxFPQxqe+QmX9lCONQ5W6cPyWEpT
256WmWr7uVtTVt1inDILaYNeuB4aZih/O+bLFThtb58O/2iJ1rL6lCYHBn8poChN
CgnOnZEN8xfMuq6FdsFdB32xsqHUCTK9pnhPaQd9cwzxfNkztTOma5wX2hqse+j1
hY1Mo0rBi4KMEmy8CfV6ATvj7EWZ1DWO2f6W2aEfaU9aCBGOeRWG49Fa+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHWO3dQLjiODm5sKBvTd1MX+sIyeMB8GA1UdIwQY
MBaAFAanV0QuR/gmCL70I9rDRMJTWNv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYt
YjI1YTY3YjJlYjRhLzEvZFk3ZDFBdU9JNE9ibXdvRzlOM1V4ZjZ3ako0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYtYjI1YTY3YjJlYjRh
LzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudmAMA0G
CSqGSIb3DQEBCwUAA4IBAQARyqi/VurFTyQo/bY++lP8+smSoP5qhueJC0kzXB3K
Yw5gtgaZD+s1DYxBihk9fc2HptCT04cFTvqwu5c1Hjz5L9rWTYzH5E1vhikPICEa
Ft/n7ZY/mg+B/GRyF4UEN/zymMdxXhWFj7tFdWK9Ct8A296j4brgNQJaHRvZzx9f
i3dsBCkp4Q59iXFE+heoEk6DX98WhOLjz1vrHLfjf0KwaKkF3KAgaIRSEHgeXd+T
KqchXfMsN5ZhggcOzl+4sOQHGL2cVJOmFHWsA3i3ksJ6YIgzKnjaRyQS+BFtjh3I
hYYVCaYIoXT3G1GZJPLWj74Px0fvbP60XmmU4/Xfj84G
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:38 2025 by rpki-client