Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/9u6lV-GXDWv7ubPCnRQPRImv-y4.roa
File: 9u6lV-GXDWv7ubPCnRQPRImv-y4.roa (raw, json)
Hash identifier: 7es9w4pzigTVZfXm1oKWsw86EM0sfmsy56g3qcxrAxg=
Subject key identifier: F6:EE:A5:57:E1:97:0D:6B:FB:B9:B3:C2:9D:14:0F:44:89:AF:FB:2E
Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial: 0185202949EB26A77A50F88BEA8F5BA5E573
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/9u6lV-GXDWv7ubPCnRQPRImv-y4.roa
Signing time: Sat 17 Dec 2022 12:57:34 +0000
ROA not before: Sat 17 Dec 2022 12:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201187
IP address blocks: 185.49.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:29:49:eb:26:a7:7a:50:f8:8b:ea:8f:5b:a5:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Validity
Not Before: Dec 17 12:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6eea557e1970d6bfbb9b3c29d140f4489affb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:6d:48:7b:69:b3:2b:f6:9b:8e:40:b2:05:
91:e0:13:42:81:e0:fe:fd:7a:03:26:57:8d:e0:df:
df:39:4e:43:22:19:b4:13:ba:23:57:64:5f:e8:5d:
37:01:96:09:d8:df:a3:4d:1b:60:15:9b:f2:76:f5:
5a:e9:a6:0b:8f:0d:3c:a4:3e:dd:61:6d:ab:12:4d:
57:98:bb:8c:8b:8d:8a:ea:30:fc:b7:ca:9e:96:d9:
1d:02:10:72:fc:5c:67:4e:a4:31:28:47:a6:1e:27:
06:dc:97:2f:c2:42:7e:51:d6:1e:a9:6a:7d:9a:eb:
48:02:d8:d8:ba:0d:78:19:91:81:a3:96:f9:d1:b8:
4b:0b:1b:5e:9a:73:df:24:b3:4f:13:53:e1:a4:e8:
bf:ba:3a:3b:6e:27:27:43:ca:e3:e9:2a:1a:40:c1:
83:55:3e:cb:f9:79:54:c0:f9:5b:35:d9:2e:56:16:
33:e7:0f:63:15:69:f1:6d:b2:60:55:79:f7:fa:8c:
16:24:c9:eb:aa:f1:93:ff:49:de:f9:f2:4f:ba:ef:
a8:44:d0:99:1b:99:04:1a:b5:fe:99:7a:ec:02:7a:
57:9f:25:44:9f:06:b5:49:01:07:f3:45:89:4f:c6:
a2:81:8e:d6:cd:eb:e2:78:fe:80:b7:85:22:4c:0e:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:A5:57:E1:97:0D:6B:FB:B9:B3:C2:9D:14:0F:44:89:AF:FB:2E
X509v3 Authority Key Identifier:
keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/9u6lV-GXDWv7ubPCnRQPRImv-y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.244.0/22
Signature Algorithm: sha256WithRSAEncryption
34:3d:c3:2c:8d:d3:24:fd:74:71:83:70:dd:f8:44:15:27:00:
b8:0f:d9:5f:40:7c:9f:2d:ac:44:0a:29:7c:9d:ce:d7:20:da:
ec:bf:fa:d2:ec:58:c6:0c:71:7a:5f:98:ee:a6:0c:bf:ce:bf:
bf:3c:d2:47:c0:fe:2e:02:b5:6c:26:ce:bb:d1:d0:5c:a6:95:
1f:23:4e:57:5d:18:73:3f:9c:4b:f8:35:21:f4:85:7b:be:21:
26:3f:4a:33:61:94:4a:81:e8:d8:2f:e1:18:92:91:14:94:69:
b1:53:38:66:b3:7e:31:3c:99:2b:54:10:12:e4:61:3a:ba:ec:
6b:8a:e1:5b:3b:e9:a0:c8:cf:07:51:91:85:d3:f9:a0:57:31:
fa:79:0d:b1:47:03:bb:30:ed:bf:e9:aa:7b:e5:34:3b:2e:47:
cf:be:c6:39:58:af:71:06:fe:27:85:f0:76:e9:4d:69:bd:6b:
8e:20:23:64:e4:fe:9a:73:5d:ac:ac:7d:64:50:c2:28:72:c7:
b9:f5:4b:82:4b:ee:db:9d:9e:af:7a:60:14:c3:62:f5:71:4d:
b6:49:6a:92:e9:69:fe:41:13:d3:52:67:4a:c8:0d:ec:bb:c5:
0b:4e:3b:6f:5b:d5:ad:94:2e:76:31:fb:2c:0d:a9:ab:57:5a:
54:25:a5:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUgKUnrJqd6UPiL6o9bpeVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDUwMDE2NGYwNzM4MTM1YjlhZWMwNGUzOGZjMjRjYjkw
ZTBmNWYwHhcNMjIxMjE3MTI1NzM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmVlYTU1N2UxOTcwZDZiZmJiOWIzYzI5ZDE0MGY0NDg5YWZmYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsFtSHtpsyv2m45AsgWR4BNCgeD+
/XoDJleN4N/fOU5DIhm0E7ojV2Rf6F03AZYJ2N+jTRtgFZvydvVa6aYLjw08pD7d
YW2rEk1XmLuMi42K6jD8t8qeltkdAhBy/FxnTqQxKEemHicG3JcvwkJ+UdYeqWp9
mutIAtjYug14GZGBo5b50bhLCxtemnPfJLNPE1PhpOi/ujo7bicnQ8rj6SoaQMGD
VT7L+XlUwPlbNdkuVhYz5w9jFWnxbbJgVXn3+owWJMnrqvGT/0ne+fJPuu+oRNCZ
G5kEGrX+mXrsAnpXnyVEnwa1SQEH80WJT8aigY7WzevieP6At4UiTA7IQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbupVfhlw1r+7mzwp0UD0SJr/suMB8GA1UdIwQY
MBaAFH7VABZPBzgTW5rsBOOPwky5Dg9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGIt
ODJkOWE5ZWI0MzBjLzEvOXU2bFYtR1hEV3Y3dWJQQ25SUVBSSW12LXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGItODJkOWE5ZWI0MzBj
LzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTH0MA0G
CSqGSIb3DQEBCwUAA4IBAQA0PcMsjdMk/XRxg3Dd+EQVJwC4D9lfQHyfLaxECil8
nc7XINrsv/rS7FjGDHF6X5jupgy/zr+/PNJHwP4uArVsJs670dBcppUfI05XXRhz
P5xL+DUh9IV7viEmP0ozYZRKgejYL+EYkpEUlGmxUzhms34xPJkrVBAS5GE6uuxr
iuFbO+mgyM8HUZGF0/mgVzH6eQ2xRwO7MO2/6ap75TQ7LkfPvsY5WK9xBv4nhfB2
6U1pvWuOICNk5P6ac12srH1kUMIocse59UuCS+7bnZ6vemAUw2L1cU22SWqS6Wn+
QRPTUmdKyA3su8ULTjtvW9WtlC52MfssDamrV1pUJaXw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:49 2024 by rpki-client on console-fra.rpki-client.org