Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/ob6QDf_t4BSQ7FEDekEMZwcrD2s.roa
File: ob6QDf_t4BSQ7FEDekEMZwcrD2s.roa (raw, json)
Hash identifier: 4GzBydT6XwRAgpBjWVcVC/5vn/lnNv8KYlHzl8f+vN0=
Subject key identifier: A1:BE:90:0D:FF:ED:E0:14:90:EC:51:03:7A:41:0C:67:07:2B:0F:6B
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 018419DC2F9E914623DEEC381AEBF3A563BE
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/ob6QDf_t4BSQ7FEDekEMZwcrD2s.roa
Signing time: Thu 27 Oct 2022 14:32:51 +0000
ROA not before: Thu 27 Oct 2022 14:32:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 83.149.64.0/18 maxlen: 18
95.168.160.0/20 maxlen: 20
81.17.47.0/24 maxlen: 24
95.211.0.0/16 maxlen: 16
5.79.64.0/18 maxlen: 18
85.17.0.0/16 maxlen: 16
2001:1af8:8110::/44 maxlen: 44
2001:1af8:8100::/44 maxlen: 44
2001:1af8::/32 maxlen: 32
2001:1af8:8000::/36 maxlen: 36
2001:1af8:8000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:dc:2f:9e:91:46:23:de:ec:38:1a:eb:f3:a5:63:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Oct 27 14:32:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1be900dffede01490ec51037a410c67072b0f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:17:3a:98:13:81:31:87:6d:ed:bf:ac:db:
9c:2d:20:6d:40:aa:20:14:ad:3e:b4:b9:54:77:f0:
51:a9:9c:14:ed:2e:48:8a:f6:e9:42:fa:75:f7:51:
10:40:33:b8:58:82:a0:e9:63:87:be:a5:b4:1f:77:
64:c2:8d:8a:d5:02:5b:99:f7:2e:ba:5c:87:6a:69:
2d:22:2a:53:d9:c2:0d:4d:2e:a4:ff:30:dd:fa:f9:
b3:45:0a:22:15:30:c6:0c:3e:e3:67:ff:35:d6:9c:
16:b5:8b:39:fb:50:30:6c:90:f7:40:00:62:14:1a:
41:4a:d8:b2:8a:59:23:39:ee:92:b0:97:a7:17:bc:
1c:3a:29:4d:3f:44:ab:dd:f9:6a:b8:43:6a:b2:9f:
67:8b:84:9b:bc:e7:2c:5a:e5:17:65:20:33:f2:d4:
3f:c9:d5:f0:c3:fa:c4:81:d2:cf:ef:f7:7c:af:1f:
40:e1:36:ff:a3:80:f1:e1:71:4a:a8:c2:b5:82:64:
80:8d:0f:13:3d:4f:ec:d0:68:ca:15:85:d4:9d:99:
1d:00:05:ef:e9:27:49:cd:cc:4b:70:54:6f:e4:c2:
fd:c9:c2:10:0b:cc:60:d9:21:74:ef:97:91:c6:92:
d5:9a:eb:6e:36:bb:9c:66:b2:f8:ca:58:90:9a:6b:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BE:90:0D:FF:ED:E0:14:90:EC:51:03:7A:41:0C:67:07:2B:0F:6B
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/ob6QDf_t4BSQ7FEDekEMZwcrD2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.79.64.0/18
81.17.47.0/24
83.149.64.0/18
85.17.0.0/16
95.168.160.0/20
95.211.0.0/16
IPv6:
2001:1af8::/32
Signature Algorithm: sha256WithRSAEncryption
b6:a7:1e:04:17:c4:a9:2d:18:8c:ce:31:05:31:44:ac:8c:d7:
d9:1e:9a:a6:18:da:11:6f:41:46:56:66:5f:4e:d6:7e:e3:57:
78:04:b8:cd:69:69:5a:2e:5e:83:ca:44:7d:5c:f9:c1:60:1b:
66:bc:4b:15:e5:62:9a:5c:50:6e:f0:2e:e6:d5:4f:69:bd:8a:
53:6d:7e:c0:a8:13:1f:60:b5:e6:df:91:00:70:29:d7:04:16:
46:c8:62:da:4b:74:77:cc:b9:8d:6f:6e:33:36:cd:ff:64:58:
7b:53:b8:0d:65:87:65:ba:e7:b3:13:65:2b:f5:c1:48:3c:50:
aa:1c:9e:95:ea:2e:bf:30:f7:37:0b:cc:38:f6:af:20:8d:4d:
f8:74:3a:0f:a5:87:c3:6f:0e:3e:bb:85:62:c2:ba:04:b0:3e:
5b:d0:1b:b7:11:7b:fd:f6:81:59:56:d4:05:f7:fe:e1:0f:c0:
76:fc:a3:16:c6:9d:cd:a3:c1:10:aa:d8:a3:e5:f7:fe:f0:90:
c2:9d:6c:1f:13:02:80:3c:61:11:09:42:41:93:b8:12:1b:52:
d6:5f:db:0a:10:0a:ef:f1:87:ad:51:a4:62:c2:ea:bd:7a:e2:
46:b1:c9:be:64:0c:d2:e8:2b:e8:7c:70:8c:ae:2b:2c:05:f9:
d2:44:3a:8e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAYQZ3C+ekUYj3uw4GuvzpWO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDczMDRjMWI1OWRjMjI3MzFiYjUzZWZmNWE4NGVkOWEz
MDYxNGMwHhcNMjIxMDI3MTQzMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWJlOTAwZGZmZWRlMDE0OTBlYzUxMDM3YTQxMGM2NzA3MmIwZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxwXOpgTgTGHbe2/rNucLSBtQKog
FK0+tLlUd/BRqZwU7S5IivbpQvp191EQQDO4WIKg6WOHvqW0H3dkwo2K1QJbmfcu
ulyHamktIipT2cINTS6k/zDd+vmzRQoiFTDGDD7jZ/811pwWtYs5+1AwbJD3QABi
FBpBStiyilkjOe6SsJenF7wcOilNP0Sr3flquENqsp9ni4SbvOcsWuUXZSAz8tQ/
ydXww/rEgdLP7/d8rx9A4Tb/o4Dx4XFKqMK1gmSAjQ8TPU/s0GjKFYXUnZkdAAXv
6SdJzcxLcFRv5ML9ycIQC8xg2SF075eRxpLVmutuNrucZrL4yliQmmtCzwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFKG+kA3/7eAUkOxRA3pBDGcHKw9rMB8GA1UdIwQY
MBaAFCfXMEwbWdwicxu1Pv9ahO2aMGFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt
ZmZmYjVhNGU3NjJhLzEvb2I2UURmX3Q0QlNRN0ZFRGVrRU1ad2NyRDJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh
LzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiAwQGBU9AAwQA
UREvAwQGU5VAAwMAVREDBARfqKADAwBf0zANBAIAAjAHAwUAIAEa+DANBgkqhkiG
9w0BAQsFAAOCAQEAtqceBBfEqS0YjM4xBTFErIzX2R6aphjaEW9BRlZmX07WfuNX
eAS4zWlpWi5eg8pEfVz5wWAbZrxLFeVimlxQbvAu5tVPab2KU21+wKgTH2C15t+R
AHAp1wQWRshi2kt0d8y5jW9uMzbN/2RYe1O4DWWHZbrnsxNlK/XBSDxQqhyeleou
vzD3NwvMOPavII1N+HQ6D6WHw28OPruFYsK6BLA+W9AbtxF7/faBWVbUBff+4Q/A
dvyjFsadzaPBEKrYo+X3/vCQwp1sHxMCgDxhEQlCQZO4EhtS1l/bChAK7/GHrVGk
YsLqvXriRrHJvmQM0ugr6HxwjK4rLAX50kQ6jg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org