Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/EfQb-JWGdaf1dNkIvnGqui8wWME.roa
File: EfQb-JWGdaf1dNkIvnGqui8wWME.roa (raw, json)
Hash identifier: d9JBI8L8nyocKzIy8mwV9wQf9fgtcozqpt70h65JLXQ=
Subject key identifier: 11:F4:1B:F8:95:86:75:A7:F5:74:D9:08:BE:71:AA:BA:2F:30:58:C1
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01857271303059DB12AB2C98CE7110F35BF3
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/EfQb-JWGdaf1dNkIvnGqui8wWME.roa
Signing time: Mon 02 Jan 2023 12:24:58 +0000
ROA not before: Mon 02 Jan 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21100
IP address blocks: 91.90.192.0/24 maxlen: 24
91.223.123.0/24 maxlen: 24
185.198.164.0/22 maxlen: 22
195.245.112.0/23 maxlen: 23
2001:67c:2f5c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:30:30:59:db:12:ab:2c:98:ce:71:10:f3:5b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 2 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11f41bf8958675a7f574d908be71aaba2f3058c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:e8:fa:22:04:12:2d:b2:a5:19:2b:53:e2:
8f:e8:21:7b:a5:49:51:0a:2d:d7:f1:53:47:8a:4a:
0e:f7:d1:31:ae:f1:ed:fd:19:e3:d9:ae:68:b0:66:
95:62:1d:e6:79:cb:3a:29:98:e6:b7:1a:cf:ad:57:
8c:44:78:24:80:92:0d:08:12:5e:17:cb:54:0a:e5:
1c:c1:6c:c5:6b:7d:b2:e6:ac:2c:a3:24:a7:7f:42:
95:25:22:4a:15:b2:e7:2d:4f:fc:b4:e9:ee:9b:d6:
c8:da:40:49:00:42:75:f8:08:69:10:2b:38:6a:7e:
3b:be:12:f5:e2:f0:15:65:48:78:03:81:62:26:8c:
61:31:6b:09:ae:e8:8d:e5:ae:d2:ae:f5:3e:a5:80:
ad:07:69:27:7c:65:66:bb:08:b0:2c:f9:41:13:95:
a2:47:28:a2:1f:10:91:d7:29:2b:23:c6:d8:50:2f:
a7:be:eb:34:bb:26:74:39:d5:3d:9e:a3:92:77:fd:
64:1f:e2:8f:60:1a:97:46:16:7d:ba:78:14:3d:f1:
58:ca:03:cc:19:fd:8f:3a:f1:64:c1:54:00:4c:f3:
52:60:57:b8:3c:cd:02:0e:db:66:73:d3:14:97:21:
de:d7:13:e8:66:ae:7e:ba:c5:e2:93:b1:d6:e4:cd:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F4:1B:F8:95:86:75:A7:F5:74:D9:08:BE:71:AA:BA:2F:30:58:C1
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/EfQb-JWGdaf1dNkIvnGqui8wWME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.192.0/24
91.223.123.0/24
185.198.164.0/22
195.245.112.0/23
IPv6:
2001:67c:2f5c::/48
Signature Algorithm: sha256WithRSAEncryption
90:b9:40:06:2e:27:4d:69:fa:77:d5:50:65:dd:5a:ee:2c:e9:
fe:94:77:c4:4d:3e:9a:ac:ff:00:cf:e5:76:83:e1:cb:6f:7d:
57:08:a9:7f:ea:c9:8f:94:28:b0:4f:56:ac:a3:ab:b7:fe:2d:
2b:6f:fc:31:fd:6e:5d:f3:bc:ff:d2:70:09:7c:00:30:31:e9:
06:9a:02:ee:56:05:b3:c5:d0:2d:2a:db:28:3e:d0:3f:67:a6:
c5:58:62:63:71:ca:77:2b:ee:19:2c:f7:84:ad:f0:c6:83:12:
bf:b4:83:0f:19:99:a9:7f:dc:bc:a5:69:98:e5:99:94:fa:16:
e0:fe:32:c9:49:ce:b0:35:5d:23:26:54:47:08:0d:9c:c1:6e:
d0:fc:87:08:bf:62:fa:25:cb:a9:91:3c:46:16:34:1c:58:3b:
3a:ad:6d:85:25:b5:b2:d6:95:e9:6f:0f:dd:8a:2d:c5:cc:2f:
d3:75:78:5e:d2:5d:94:9b:8c:02:cd:4f:6f:f1:3c:7c:dc:04:
41:ef:f8:2c:ac:81:09:9b:d2:62:6e:e8:86:97:5f:68:de:71:
55:cc:b1:c0:7e:18:38:5a:08:d3:d5:b4:5a:e2:29:74:52:53:
ae:bf:8d:24:9e:64:1a:9b:07:55:c6:07:a7:24:22:6b:4e:0c:
5a:45:61:d3
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVycTAwWdsSqyyYznEQ81vzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5
Yzk3MTgwHhcNMjMwMTAyMTIyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWY0MWJmODk1ODY3NWE3ZjU3NGQ5MDhiZTcxYWFiYTJmMzA1OGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsXo+iIEEi2ypRkrU+KP6CF7pUlR
Ci3X8VNHikoO99ExrvHt/Rnj2a5osGaVYh3mecs6KZjmtxrPrVeMRHgkgJINCBJe
F8tUCuUcwWzFa32y5qwsoySnf0KVJSJKFbLnLU/8tOnum9bI2kBJAEJ1+AhpECs4
an47vhL14vAVZUh4A4FiJoxhMWsJruiN5a7SrvU+pYCtB2knfGVmuwiwLPlBE5Wi
RyiiHxCR1ykrI8bYUC+nvus0uyZ0OdU9nqOSd/1kH+KPYBqXRhZ9ungUPfFYygPM
Gf2POvFkwVQATPNSYFe4PM0CDttmc9MUlyHe1xPoZq5+usXik7HW5M0BLwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFBH0G/iVhnWn9XTZCL5xqrovMFjBMB8GA1UdIwQY
MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt
YTc3NGU0MWQyNjRjLzEvRWZRYi1KV0dkYWYxZE5rSXZuR3F1aTh3V01FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj
LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAW1rAAwQA
W997AwQCucakAwQBw/VwMA8EAgACMAkDBwAgAQZ8L1wwDQYJKoZIhvcNAQELBQAD
ggEBAJC5QAYuJ01p+nfVUGXdWu4s6f6Ud8RNPpqs/wDP5XaD4ctvfVcIqX/qyY+U
KLBPVqyjq7f+LStv/DH9bl3zvP/ScAl8ADAx6QaaAu5WBbPF0C0q2yg+0D9npsVY
YmNxyncr7hks94St8MaDEr+0gw8Zmal/3LylaZjlmZT6FuD+MslJzrA1XSMmVEcI
DZzBbtD8hwi/Yvoly6mRPEYWNBxYOzqtbYUltbLWlelvD92KLcXML9N1eF7SXZSb
jALNT2/xPHzcBEHv+CysgQmb0mJu6IaXX2jecVXMscB+GDhaCNPVtFriKXRSU66/
jSSeZBqbB1XGB6ckImtODFpFYdM=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:24 2025 by rpki-client