Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/6QaUt3or5magFIqlp7CNZrvjiCs.roa
File: 6QaUt3or5magFIqlp7CNZrvjiCs.roa (raw, json)
Hash identifier: 7fHz038AYZw7tssJKD5hznx5lLP/JwKK9z2T+o7l60U=
Subject key identifier: E9:06:94:B7:7A:2B:E6:66:A0:14:8A:A5:A7:B0:8D:66:BB:E3:88:2B
Certificate issuer: /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Certificate serial: 0182625AF03099FB8A319EB30EE14A6268CE
Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/6QaUt3or5magFIqlp7CNZrvjiCs.roa
Signing time: Wed 03 Aug 2022 06:18:23 +0000
ROA not before: Wed 03 Aug 2022 06:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12853
IP address blocks: 79.98.224.0/21 maxlen: 24
185.251.4.0/22 maxlen: 24
212.68.96.0/19 maxlen: 24
2001:940::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:5a:f0:30:99:fb:8a:31:9e:b3:0e:e1:4a:62:68:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Validity
Not Before: Aug 3 06:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e90694b77a2be666a0148aa5a7b08d66bbe3882b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:57:5d:af:64:ba:a8:f6:23:83:60:fc:2f:
70:0d:1f:99:02:24:3b:c5:bc:71:1c:4f:14:81:0b:
8b:d5:2c:13:b7:25:20:75:35:de:8e:d1:fb:67:ba:
6a:49:4f:34:87:04:5d:5a:66:3c:3c:d6:62:71:3c:
12:32:74:b2:48:fe:df:ea:4e:d1:65:a2:91:6b:d9:
af:d8:d4:4a:f0:f1:1e:96:a4:0e:4e:c9:a2:fd:b0:
87:57:41:5d:64:29:81:c9:27:61:f3:c9:fb:26:b3:
4a:bf:54:3d:b7:df:36:f9:dc:e0:b7:9b:63:38:bf:
7b:19:e5:59:56:ad:f9:ca:59:d3:ff:ce:89:91:10:
5b:82:cb:d9:1d:64:81:8b:54:aa:2b:c3:f6:3a:01:
15:20:43:b1:7e:47:d1:27:44:cb:55:83:c1:00:4a:
7f:a8:bd:e4:a0:40:ed:4d:24:8e:85:ad:3e:45:e9:
05:98:30:e6:7e:92:76:e8:0b:92:d0:e2:49:ec:07:
1e:22:64:b1:f5:00:48:18:5f:7c:21:62:18:33:77:
9c:ec:43:d5:c8:3e:4d:03:b1:78:fe:17:da:09:d5:
d9:96:2d:7e:78:91:e8:5f:33:95:28:3f:67:03:a3:
6c:89:99:05:4f:d8:ff:ac:48:42:9a:e6:06:dd:11:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:94:B7:7A:2B:E6:66:A0:14:8A:A5:A7:B0:8D:66:BB:E3:88:2B
X509v3 Authority Key Identifier:
keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/6QaUt3or5magFIqlp7CNZrvjiCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.224.0/21
185.251.4.0/22
212.68.96.0/19
IPv6:
2001:940::/32
Signature Algorithm: sha256WithRSAEncryption
6f:a7:1d:6e:bf:b9:63:ef:7c:90:53:ac:cc:65:3e:79:86:a6:
9c:15:a2:f8:e9:40:a1:c2:21:90:6e:af:7b:33:b4:b0:27:cb:
be:27:04:c8:f0:97:bf:95:d4:a6:dd:f1:16:72:c4:96:87:11:
55:d9:67:df:8d:90:d1:54:bf:05:12:b4:2f:15:e0:e8:be:fa:
c3:8d:3e:20:82:44:3e:d3:e6:aa:e2:15:76:5d:9f:a8:24:bb:
71:68:94:8f:dd:92:22:92:e4:9a:16:0d:11:b6:15:c8:76:43:
90:74:00:60:2c:f0:16:f8:20:ef:8f:73:66:0f:11:f4:81:80:
b8:77:ec:8a:c2:28:73:f0:d4:22:f9:36:c7:bd:ef:27:dd:b8:
3a:d5:5b:2f:51:1f:05:58:3e:6b:ed:bb:ba:7f:0a:f2:15:e3:
a1:79:3f:08:4c:ba:7a:34:4d:f1:7c:e3:a3:03:63:6b:ea:3c:
7d:70:ce:5b:b5:be:ff:d0:5e:15:87:a8:63:1e:ad:56:ea:34:
a1:28:c6:5f:1e:53:36:2a:95:dd:2a:ba:fb:99:e5:bd:d7:e0:
23:62:2e:01:90:78:1b:b0:57:7b:85:a7:f2:b1:f7:d2:2f:d1:
c7:43:dd:aa:11:68:c5:60:43:ed:20:6e:71:15:90:97:a1:60:
55:41:6d:97
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYJiWvAwmfuKMZ6zDuFKYmjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODFhZDMyMzNkOWMyYzE4OWQ5NDk5ZGExMTc3YjU3MTAx
YTVlZjQwHhcNMjIwODAzMDYxODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTA2OTRiNzdhMmJlNjY2YTAxNDhhYTVhN2IwOGQ2NmJiZTM4ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwhXXa9kuqj2I4Ng/C9wDR+ZAiQ7
xbxxHE8UgQuL1SwTtyUgdTXejtH7Z7pqSU80hwRdWmY8PNZicTwSMnSySP7f6k7R
ZaKRa9mv2NRK8PEelqQOTsmi/bCHV0FdZCmBySdh88n7JrNKv1Q9t982+dzgt5tj
OL97GeVZVq35ylnT/86JkRBbgsvZHWSBi1SqK8P2OgEVIEOxfkfRJ0TLVYPBAEp/
qL3koEDtTSSOha0+RekFmDDmfpJ26AuS0OJJ7AceImSx9QBIGF98IWIYM3ec7EPV
yD5NA7F4/hfaCdXZli1+eJHoXzOVKD9nA6NsiZkFT9j/rEhCmuYG3RHMWQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOkGlLd6K+ZmoBSKpaewjWa744grMB8GA1UdIwQY
MBaAFPeBrTIz2cLBidlJnaEXe1cQGl70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kZjc1YTctZWQ1Ny00ZWQwLWExMmUt
OTU2NGE0NzIyZTc4LzEvNlFhVXQzb3I1bWFnRklxbHA3Q05acnZqaUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kZjc1YTctZWQ1Ny00ZWQwLWExMmUtOTU2NGE0NzIyZTc4
LzEvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDT2LgAwQC
ufsEAwQF1ERgMA0EAgACMAcDBQAgAQlAMA0GCSqGSIb3DQEBCwUAA4IBAQBvpx1u
v7lj73yQU6zMZT55hqacFaL46UChwiGQbq97M7SwJ8u+JwTI8Je/ldSm3fEWcsSW
hxFV2WffjZDRVL8FErQvFeDovvrDjT4ggkQ+0+aq4hV2XZ+oJLtxaJSP3ZIikuSa
Fg0RthXIdkOQdABgLPAW+CDvj3NmDxH0gYC4d+yKwihz8NQi+TbHve8n3bg61Vsv
UR8FWD5r7bu6fwryFeOheT8ITLp6NE3xfOOjA2Nr6jx9cM5btb7/0F4Vh6hjHq1W
6jShKMZfHlM2KpXdKrr7meW91+AjYi4BkHgbsFd7hafysffSL9HHQ92qEWjFYEPt
IG5xFZCXoWBVQW2X
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org