Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/6hSC6hfnF2ehkOCM2u3IdsUA8Gs.roa
File: 6hSC6hfnF2ehkOCM2u3IdsUA8Gs.roa (raw, json)
Hash identifier: iv5DSp/MLdWjrjXSLlonTTgh8et4ISvXD7RVHiKRK2c=
Subject key identifier: EA:14:82:EA:17:E7:17:67:A1:90:E0:8C:DA:ED:C8:76:C5:00:F0:6B
Certificate issuer: /CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Certificate serial: 01A5BC94
Authority key identifier: 02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/6hSC6hfnF2ehkOCM2u3IdsUA8Gs.roa
Signing time: Sat 01 Jan 2022 10:55:51 +0000
ROA not before: Sat 01 Jan 2022 10:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 185.76.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27638932 (0x1a5bc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Validity
Not Before: Jan 1 10:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea1482ea17e71767a190e08cdaedc876c500f06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:e2:a2:7b:2f:fd:63:fc:8e:b4:38:5a:68:
98:af:df:3c:6d:c0:0b:a1:3b:3c:33:b5:c4:c4:cf:
ff:5c:54:af:a9:aa:0d:ca:41:33:02:ed:06:7d:48:
87:05:f4:75:70:72:9b:7c:cd:df:bc:c7:7d:5c:30:
9c:ee:fe:77:a9:60:4a:14:a7:62:d6:0d:e3:bb:fe:
bc:60:52:69:ab:19:17:cc:8c:3a:b4:64:7c:b3:4c:
5a:e4:ef:ad:92:fc:0e:7a:91:28:9d:4a:5d:e7:35:
cc:a1:00:be:39:d0:a7:04:97:fb:57:f2:2b:35:a4:
2e:a7:d9:a6:ba:d7:f5:c8:07:92:70:08:f1:65:d6:
8f:08:18:9c:73:77:e8:21:c4:83:3d:b8:bd:aa:7c:
68:be:30:c2:fb:87:ce:87:6d:e3:1e:98:b8:58:7c:
78:17:b3:22:99:b0:6b:3e:c3:88:55:3d:7c:19:b4:
4a:83:8e:b1:74:ce:0e:a0:11:d2:30:f3:52:20:f1:
f1:0b:22:2f:58:98:e0:d2:00:59:c7:19:0b:e4:4d:
0e:d3:2b:ef:9a:33:cc:e2:50:46:e0:cc:2f:02:0a:
04:2d:9e:a4:e6:93:71:cc:a4:1b:bc:86:17:7b:49:
02:25:25:8b:e1:cc:21:5b:37:de:5f:61:11:74:86:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:82:EA:17:E7:17:67:A1:90:E0:8C:DA:ED:C8:76:C5:00:F0:6B
X509v3 Authority Key Identifier:
keyid:02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/6hSC6hfnF2ehkOCM2u3IdsUA8Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e8:cb:b4:e1:69:d9:73:5e:4c:ca:4f:f5:11:b2:c6:fa:65:
97:93:a9:bd:96:52:ba:c4:84:40:e4:0a:00:7b:bd:73:70:c1:
4d:49:16:b4:20:b0:b5:16:b5:0c:b7:b3:9a:be:e3:dd:ad:e2:
5e:54:d5:46:ec:1a:68:40:99:97:ec:95:e7:0f:41:87:15:ca:
bf:52:a0:5b:06:da:10:10:c4:0b:f4:85:c7:60:18:28:c5:f3:
17:56:49:4c:17:0c:ed:d2:81:04:30:61:cd:96:19:0c:1e:1d:
70:24:a1:92:f3:ea:eb:b7:3f:86:b8:8d:ea:3d:fa:31:b0:b4:
24:a4:a6:92:9a:64:c5:db:f7:2b:5d:7d:62:33:8b:07:86:37:
36:84:bc:35:ce:8a:8c:e2:95:e6:43:35:ca:74:5e:01:06:f6:
87:9f:1a:9c:7e:cb:0c:89:06:52:5e:7d:b4:a9:ab:9a:c2:92:
c4:6b:69:63:7b:a8:f5:11:50:88:29:47:af:b6:53:e0:bb:61:
93:10:6d:04:f7:b3:e3:35:49:c5:45:03:40:c1:a3:be:60:09:
4d:21:74:69:38:81:36:3f:34:73:e4:28:0e:40:2a:b9:b6:1b:
51:30:63:59:fa:df:99:3a:15:b8:f8:89:4a:e1:e1:b5:54:29:
8e:47:03:fa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAaW8lDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MjZmZDZiNjVhMTFhM2E3MmMyMmZhYWRhMDZjMzFmMmY2MzMxNjM3MB4XDTIyMDEw
MTEwNTU1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWExNDgyZWExN2U3
MTc2N2ExOTBlMDhjZGFlZGM4NzZjNTAwZjA2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPBN4qJ7L/1j/I60OFpomK/fPG3AC6E7PDO1xMTP/1xUr6mq
DcpBMwLtBn1IhwX0dXBym3zN37zHfVwwnO7+d6lgShSnYtYN47v+vGBSaasZF8yM
OrRkfLNMWuTvrZL8DnqRKJ1KXec1zKEAvjnQpwSX+1fyKzWkLqfZprrX9cgHknAI
8WXWjwgYnHN36CHEgz24vap8aL4wwvuHzodt4x6YuFh8eBezIpmwaz7DiFU9fBm0
SoOOsXTODqAR0jDzUiDx8QsiL1iY4NIAWccZC+RNDtMr75ozzOJQRuDMLwIKBC2e
pOaTccykG7yGF3tJAiUli+HMIVs33l9hEXSGxPkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqFILqF+cXZ6GQ4Iza7ch2xQDwazAfBgNVHSMEGDAWgBQCb9a2WhGjpywi
+q2gbDHy9jMWNzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FtX1d0bG9SbzZjc0l2cXRvR3d4OHZZekZqYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvMjE0OGRiLWExZmEtNDAxMS04OTE3LTRlYWJlM2M1ZTQxOC8x
LzZoU0M2aGZuRjJlaGtPQ00ydTNJZHNVQThHcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
MjE0OGRiLWExZmEtNDAxMS04OTE3LTRlYWJlM2M1ZTQxOC8xL0FtX1d0bG9SbzZj
c0l2cXRvR3d4OHZZekZqYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlMljANBgkqhkiG9w0BAQsFAAOC
AQEAXujLtOFp2XNeTMpP9RGyxvpll5OpvZZSusSEQOQKAHu9c3DBTUkWtCCwtRa1
DLezmr7j3a3iXlTVRuwaaECZl+yV5w9BhxXKv1KgWwbaEBDEC/SFx2AYKMXzF1ZJ
TBcM7dKBBDBhzZYZDB4dcCShkvPq67c/hriN6j36MbC0JKSmkppkxdv3K119YjOL
B4Y3NoS8Nc6KjOKV5kM1ynReAQb2h58anH7LDIkGUl59tKmrmsKSxGtpY3uo9RFQ
iClHr7ZT4LthkxBtBPez4zVJxUUDQMGjvmAJTSF0aTiBNj80c+QoDkAqubYbUTBj
WfrfmToVuPiJSuHhtVQpjkcD+g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:07 2023 by rpki-client on console-fra.rpki-client.org