Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/6sCEYYkMEpSIHl1UuSVQ81CGr4g.roa
File: 6sCEYYkMEpSIHl1UuSVQ81CGr4g.roa (raw, json)
Hash identifier: pfItVbkk02r9cauwTR2fjMDR3Bvwu3dN/tcvM+HQg4Q=
Subject key identifier: EA:C0:84:61:89:0C:12:94:88:1E:5D:54:B9:25:50:F3:50:86:AF:88
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 02F2A272
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/6sCEYYkMEpSIHl1UuSVQ81CGr4g.roa
Signing time: Sat 01 Jan 2022 11:00:14 +0000
ROA not before: Sat 01 Jan 2022 11:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 46.19.169.0/24 maxlen: 24
46.19.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49455730 (0x2f2a272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Jan 1 11:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eac08461890c1294881e5d54b92550f35086af88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:e3:38:32:60:59:f2:f2:2f:08:76:7c:47:
0c:75:ba:7d:28:cd:12:f6:3e:94:cc:34:6c:1d:fb:
80:bf:93:d4:df:bd:6f:e2:8c:8b:4b:97:dc:0c:b2:
04:d0:03:e3:da:e1:7d:97:e2:52:03:08:e7:6e:5c:
4d:7e:de:64:2f:df:02:77:90:52:27:3a:62:29:12:
6b:2d:e1:bd:cd:87:97:d6:12:87:b1:ad:92:c0:2a:
43:0f:65:76:01:c4:f0:28:ae:82:6e:b5:cc:89:10:
d1:c7:6a:aa:95:f8:cc:7a:37:c4:17:d4:d9:97:b3:
93:e6:5d:64:f1:be:dd:77:69:fa:85:d4:5a:22:60:
86:f3:64:d8:42:17:c9:06:ab:9b:5d:f7:3a:dd:c5:
ac:01:4f:20:be:ab:f2:ce:01:8b:a2:a4:1f:e8:b6:
74:2e:5f:b2:92:92:8a:bf:76:39:8e:97:82:a5:51:
80:86:e4:94:8a:5d:2d:37:b4:16:49:61:0f:e5:4a:
bf:ba:41:16:e3:72:e2:60:c1:a4:f9:6c:ba:b6:48:
9e:9f:d3:8e:df:15:69:e0:e8:d9:f9:15:69:a4:4b:
04:73:b0:0b:c9:86:79:19:05:ce:7b:de:f1:3e:6c:
e6:9b:90:ea:a5:95:30:01:89:94:c7:c0:e7:4f:0e:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C0:84:61:89:0C:12:94:88:1E:5D:54:B9:25:50:F3:50:86:AF:88
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/6sCEYYkMEpSIHl1UuSVQ81CGr4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.168.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:8c:6e:c0:b6:16:22:54:76:58:7d:55:85:74:b8:1d:00:80:
33:a6:44:15:e9:8d:ee:f5:14:fb:8b:98:e5:19:7b:9e:80:6a:
20:dc:8a:61:13:fd:3b:1a:a4:d2:0d:72:4b:6c:a4:82:63:09:
11:0c:70:dd:bc:58:0f:3b:e8:ac:72:76:8a:ad:23:e6:ca:13:
d6:8e:01:ba:6e:ff:0c:12:8d:78:4e:5d:65:d2:46:3a:ad:af:
d8:71:82:df:b9:4a:4e:fa:f7:48:2b:40:00:a3:8d:d0:d1:db:
d6:97:13:af:16:11:87:10:6e:02:09:19:c1:96:33:1c:c9:54:
f8:5d:ad:ab:44:6d:84:86:d9:f4:2b:05:94:e9:f9:c5:1c:89:
92:d3:42:1b:67:87:4b:4f:78:90:6f:36:90:a0:9d:7c:be:5b:
02:65:f0:aa:70:57:19:dd:06:85:3d:c5:fd:0f:a8:12:0b:a0:
51:18:f6:ef:e3:ca:77:be:a3:8f:00:40:9e:9b:4f:5d:d8:35:
43:36:b6:00:50:6b:e8:e5:1f:d8:49:45:5e:9f:12:a2:9a:bc:
a9:e7:ad:29:f9:07:3e:d0:05:08:ff:a0:4c:33:ac:7d:fc:2a:
a8:4a:12:d1:0a:a7:3b:28:e3:90:36:37:8c:c9:6f:ac:ec:59:
a5:b6:c6:7a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvKicjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MmY2YmM4ZjE2M2FmNDljMDNkOWFkNjllNzE2YjQyYzViOTZlZTc5MB4XDTIyMDEw
MTExMDAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWFjMDg0NjE4OTBj
MTI5NDg4MWU1ZDU0YjkyNTUwZjM1MDg2YWY4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJBg4zgyYFny8i8IdnxHDHW6fSjNEvY+lMw0bB37gL+T1N+9
b+KMi0uX3AyyBNAD49rhfZfiUgMI525cTX7eZC/fAneQUic6YikSay3hvc2Hl9YS
h7GtksAqQw9ldgHE8Ciugm61zIkQ0cdqqpX4zHo3xBfU2Zezk+ZdZPG+3Xdp+oXU
WiJghvNk2EIXyQarm133Ot3FrAFPIL6r8s4Bi6KkH+i2dC5fspKSir92OY6XgqVR
gIbklIpdLTe0FklhD+VKv7pBFuNy4mDBpPlsurZInp/Tjt8VaeDo2fkVaaRLBHOw
C8mGeRkFznve8T5s5puQ6qWVMAGJlMfA508OELcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqwIRhiQwSlIgeXVS5JVDzUIaviDAfBgNVHSMEGDAWgBSi9ryPFjr0nAPZ
rWnnFrQsW5bueTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L292YThqeFk2OUp3RDJhMXA1eGEwTEZ1Vzduay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTcvMjg1MWI2LTJlNjUtNDg1OS05YzA1LTUwNmJiNmM2NzljZS8x
LzZzQ0VZWWtNRXBTSUhsMVV1U1ZRODFDR3I0Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcv
Mjg1MWI2LTJlNjUtNDg1OS05YzA1LTUwNmJiNmM2NzljZS8xL292YThqeFk2OUp3
RDJhMXA1eGEwTEZ1Vzduay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS4TqDANBgkqhkiG9w0BAQsFAAOC
AQEApYxuwLYWIlR2WH1VhXS4HQCAM6ZEFemN7vUU+4uY5Rl7noBqINyKYRP9Oxqk
0g1yS2ykgmMJEQxw3bxYDzvorHJ2iq0j5soT1o4Bum7/DBKNeE5dZdJGOq2v2HGC
37lKTvr3SCtAAKON0NHb1pcTrxYRhxBuAgkZwZYzHMlU+F2tq0RthIbZ9CsFlOn5
xRyJktNCG2eHS094kG82kKCdfL5bAmXwqnBXGd0GhT3F/Q+oEgugURj27+PKd76j
jwBAnptPXdg1Qza2AFBr6OUf2ElFXp8Sopq8qeetKfkHPtAFCP+gTDOsffwqqEoS
0QqnOyjjkDY3jMlvrOxZpbbGeg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:01 2025 by rpki-client