Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/6qtHiAgynaOPexnqjZLj8jmQWzU.roa
File: 6qtHiAgynaOPexnqjZLj8jmQWzU.roa (raw, json)
Hash identifier: outb7TkN05brnGcqKmy2FoI06TtKTY+s1F2Djgojbpo=
Subject key identifier: EA:AB:47:88:08:32:9D:A3:8F:7B:19:EA:8D:92:E3:F2:39:90:5B:35
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 3A7CE535
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/6qtHiAgynaOPexnqjZLj8jmQWzU.roa
Signing time: Sat 01 Jan 2022 05:59:56 +0000
ROA not before: Sat 01 Jan 2022 05:59:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9096
IP address blocks: 188.172.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981263669 (0x3a7ce535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 05:59:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaab478808329da38f7b19ea8d92e3f239905b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:48:34:f6:37:64:df:5a:cf:6a:7b:af:74:
cb:a2:6d:c1:50:7e:c0:db:93:16:73:8b:e4:ed:56:
78:b0:fb:18:88:4c:11:d2:b4:66:04:af:2a:09:fb:
64:f4:17:32:18:5b:bd:80:0f:3e:36:09:48:40:c6:
ba:b3:58:70:61:4a:29:22:a4:ac:b0:40:70:37:96:
68:22:f5:bd:f2:9b:73:f8:36:0c:34:37:3a:10:55:
48:8e:9f:8c:c2:54:51:ea:65:a3:50:47:8c:ff:dc:
9f:96:94:74:3f:a0:2c:8e:af:e4:e0:14:36:0b:6a:
4d:55:17:a1:ba:59:25:53:82:c4:d5:e6:fd:b6:39:
b1:b1:bb:06:40:0d:c0:36:9b:bb:1e:c4:b9:e5:3b:
19:14:8a:53:99:9d:ca:0b:0a:ca:ae:25:3a:47:0f:
9a:3f:1c:37:bc:8c:d3:05:d3:1a:30:b3:a7:5b:23:
6f:20:45:28:13:c0:de:ab:b6:c0:42:54:00:20:18:
e6:25:f4:54:d2:83:d3:a0:71:b4:7e:e1:8d:2a:d8:
6f:26:cf:15:77:25:73:9d:d4:89:38:4e:fb:e4:a8:
d3:93:1c:d5:b4:6d:92:2a:7e:e3:9e:3b:b8:39:ba:
69:2a:dd:11:36:ae:6d:50:95:5a:7c:10:05:77:26:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:47:88:08:32:9D:A3:8F:7B:19:EA:8D:92:E3:F2:39:90:5B:35
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/6qtHiAgynaOPexnqjZLj8jmQWzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.197.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:03:c6:ed:cb:c5:20:f8:6c:c8:3b:2c:22:3b:19:3a:93:5e:
b6:c2:65:01:08:c5:2c:6b:56:ca:2d:01:56:35:97:e2:f5:16:
44:41:75:c8:76:53:e6:23:3c:68:2e:4f:61:79:7a:10:85:8e:
72:00:03:14:8d:b8:fd:a2:26:7f:30:b6:06:8d:4f:4c:33:73:
c3:2a:6b:4a:19:44:b6:1c:3f:99:f4:98:10:c1:91:bb:dd:d4:
43:ad:49:1d:d8:7e:8f:a6:5e:df:08:c7:7c:76:d1:50:43:ba:
ab:dd:90:57:df:c4:b3:6a:25:90:17:d7:07:bc:ca:56:0c:c4:
bc:1d:7e:fe:5a:91:32:c6:9d:7c:07:d0:84:c1:af:ca:f9:70:
dc:1f:82:44:15:c2:02:2c:b3:b8:08:02:d9:52:fd:bb:63:52:
4d:3e:78:d9:79:fe:da:fe:8a:21:2e:b7:4e:b1:be:1c:43:d5:
ef:2e:e4:f7:ec:2f:95:3c:e4:83:8e:62:24:ee:0c:81:e5:88:
60:44:4c:37:58:55:5d:fd:c2:a3:f7:64:88:9d:7f:4c:95:d7:
25:4c:f6:c6:14:10:09:66:08:59:b0:55:37:6a:09:e3:7a:e9:
87:5c:22:c7:75:60:68:ca:d7:cb:0b:65:8a:21:f8:3f:fd:bd:
51:53:42:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOnzlNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTM5YWZlYmFjZTg5OWE4ZWUwYmI0ZjhiYjQ0NzVmZTI0N2ExNTI4MB4XDTIyMDEw
MTA1NTk1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWFhYjQ3ODgwODMy
OWRhMzhmN2IxOWVhOGQ5MmUzZjIzOTkwNWIzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWzSDT2N2TfWs9qe690y6JtwVB+wNuTFnOL5O1WeLD7GIhM
EdK0ZgSvKgn7ZPQXMhhbvYAPPjYJSEDGurNYcGFKKSKkrLBAcDeWaCL1vfKbc/g2
DDQ3OhBVSI6fjMJUUeplo1BHjP/cn5aUdD+gLI6v5OAUNgtqTVUXobpZJVOCxNXm
/bY5sbG7BkANwDabux7EueU7GRSKU5mdygsKyq4lOkcPmj8cN7yM0wXTGjCzp1sj
byBFKBPA3qu2wEJUACAY5iX0VNKD06BxtH7hjSrYbybPFXclc53UiThO++So05Mc
1bRtkip+4547uDm6aSrdETaubVCVWnwQBXcmV8kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqq0eICDKdo497GeqNkuPyOZBbNTAfBgNVHSMEGDAWgBSlOa/rrOiZqO4L
tPi7RHX+JHoVKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BUbXY2NnpvbWFqdUM3VDR1MFIxX2lSNkZTZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvOThjNGVlLTJmNTktNDVhNy1hZGI2LTc0MTM5NTkxMzEyZS8x
LzZxdEhpQWd5bmFPUGV4bnFqWkxqOGptUVd6VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
OThjNGVlLTJmNTktNDVhNy1hZGI2LTc0MTM5NTkxMzEyZS8xL3BUbXY2NnpvbWFq
dUM3VDR1MFIxX2lSNkZTZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALysxTANBgkqhkiG9w0BAQsFAAOC
AQEA2APG7cvFIPhsyDssIjsZOpNetsJlAQjFLGtWyi0BVjWX4vUWREF1yHZT5iM8
aC5PYXl6EIWOcgADFI24/aImfzC2Bo1PTDNzwyprShlEthw/mfSYEMGRu93UQ61J
Hdh+j6Ze3wjHfHbRUEO6q92QV9/Es2olkBfXB7zKVgzEvB1+/lqRMsadfAfQhMGv
yvlw3B+CRBXCAiyzuAgC2VL9u2NSTT542Xn+2v6KIS63TrG+HEPV7y7k9+wvlTzk
g45iJO4MgeWIYERMN1hVXf3Co/dkiJ1/TJXXJUz2xhQQCWYIWbBVN2oJ43rph1wi
x3VgaMrXywtliiH4P/29UVNCOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org