Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/9ekHWvWz-CZADWfaU4FlSpmx8ME.roa
File: 9ekHWvWz-CZADWfaU4FlSpmx8ME.roa (raw, json)
Hash identifier: t2xvydUSAziN9kFOaIlXsTozRs/7m9xn9ro2O7MmDxo=
Subject key identifier: F5:E9:07:5A:F5:B3:F8:26:40:0D:67:DA:53:81:65:4A:99:B1:F0:C1
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0ABE95D3
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/9ekHWvWz-CZADWfaU4FlSpmx8ME.roa
Signing time: Mon 04 Apr 2022 20:51:48 +0000
ROA not before: Mon 04 Apr 2022 20:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212988
IP address blocks: 185.221.190.0/24 maxlen: 24
185.221.191.0/24 maxlen: 24
185.221.188.0/24 maxlen: 24
185.221.189.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
185.219.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180262355 (0xabe95d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Apr 4 20:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5e9075af5b3f826400d67da5381654a99b1f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c6:be:a2:9a:30:49:2d:88:d4:ce:40:21:e9:
90:dc:74:7e:26:ef:60:4e:fe:ac:ec:fb:a2:36:04:
ae:71:86:4c:2a:d6:af:fc:41:20:bb:1d:89:1a:92:
5a:01:3b:82:2f:f7:0a:45:ea:f4:e8:05:4c:9e:3c:
4f:0e:ae:f8:13:01:20:72:19:91:3c:9d:d9:11:65:
78:24:67:51:86:22:a0:a7:cb:e4:e4:62:b2:6d:0a:
81:bd:25:0b:cd:3a:53:0f:0c:06:ae:49:a6:07:77:
4b:45:4c:b0:37:34:73:1a:7d:6f:47:7d:1a:7a:c8:
d2:21:4f:39:e4:f3:8c:4d:c3:bc:00:a8:87:05:b7:
df:a0:3d:34:2f:46:cc:79:8e:c1:9e:92:e4:77:0b:
a1:28:d6:eb:89:a5:c1:5e:2c:d7:c2:a9:f5:bf:3e:
1f:83:16:0a:87:c7:35:12:7b:a5:bc:50:95:3a:2a:
6e:ea:8b:01:1c:3a:05:64:0f:a8:d3:47:10:65:e4:
73:c4:d5:93:11:db:72:1d:5c:94:99:9d:74:cf:b5:
d8:83:5f:4b:54:91:9a:4d:5e:1d:e4:3b:20:20:06:
25:92:d9:28:4f:8e:0b:e6:a8:b2:0d:42:22:00:29:
bb:e6:0d:f5:6a:6b:da:64:94:9c:6d:77:2a:3b:4b:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:07:5A:F5:B3:F8:26:40:0D:67:DA:53:81:65:4A:99:B1:F0:C1
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/9ekHWvWz-CZADWfaU4FlSpmx8ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.216.0/22
185.221.188.0/22
Signature Algorithm: sha256WithRSAEncryption
76:6e:b4:fd:78:7f:de:70:b2:7a:3c:7a:2a:48:eb:cd:a5:89:
ed:18:57:44:16:1e:94:4f:e7:11:08:b6:b6:bc:01:b3:5f:18:
65:e4:9f:34:3c:90:84:e6:a5:e1:02:43:4f:19:dc:bb:8f:5c:
73:d1:8d:ef:4d:60:ff:9b:de:60:d3:88:d3:18:eb:f7:dc:be:
a1:81:13:43:d0:25:48:b4:56:95:14:7d:9d:4b:59:3f:0d:b9:
b8:da:ed:bc:c4:81:7c:a1:3e:51:89:48:aa:76:9e:8b:de:70:
1b:7b:fa:2a:8d:51:0b:6f:a7:aa:1b:16:86:7d:70:01:4e:89:
20:49:a6:4f:01:3b:28:c7:78:32:ae:b7:14:c6:d1:21:70:97:
e8:8f:f1:c2:24:8b:cb:40:d1:72:41:a2:d7:74:46:ba:23:1b:
6a:1d:50:02:24:e1:97:2c:cf:b5:fe:a1:99:b8:0a:75:f4:42:
17:a6:de:92:b8:3f:53:c4:84:67:ae:08:63:e2:a2:5b:31:62:
01:09:0a:50:36:d1:b3:bf:ee:1f:a6:a4:62:ef:4b:ec:95:ba:
a6:ba:9e:79:90:e0:e9:98:fc:ab:93:f1:19:9b:57:ce:d5:2b:
43:fa:bf:65:0a:3d:e2:00:a1:97:5c:63:a3:72:0c:b4:5f:2f:
2d:24:0b:d6
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECr6V0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YmEzMTg2NTk3NzQyYTkyNmNkMjY1MDRlMWVkNzZmODU0M2ZkYjI2MB4XDTIyMDQw
NDIwNTE0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjVlOTA3NWFmNWIz
ZjgyNjQwMGQ2N2RhNTM4MTY1NGE5OWIxZjBjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIbGvqKaMEktiNTOQCHpkNx0fibvYE7+rOz7ojYErnGGTCrW
r/xBILsdiRqSWgE7gi/3CkXq9OgFTJ48Tw6u+BMBIHIZkTyd2RFleCRnUYYioKfL
5ORism0Kgb0lC806Uw8MBq5Jpgd3S0VMsDc0cxp9b0d9GnrI0iFPOeTzjE3DvACo
hwW336A9NC9GzHmOwZ6S5HcLoSjW64mlwV4s18Kp9b8+H4MWCofHNRJ7pbxQlToq
buqLARw6BWQPqNNHEGXkc8TVkxHbch1clJmddM+12INfS1SRmk1eHeQ7ICAGJZLZ
KE+OC+aosg1CIgApu+YN9Wpr2mSUnG13KjtLWS0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBT16Qda9bP4JkANZ9pTgWVKmbHwwTAfBgNVHSMEGDAWgBRroxhll3QqkmzS
ZQTh7Xb4VD/bJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2E2TVlaWmQwS3BKczBtVUU0ZTEyLUZRXzJ5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTYvOWQ1OTEwLTlmNWUtNDQ2Yy04ZDNjLWJjMDA3ZjJkYWMyNC8x
Lzlla0hXdld6LUNaQURXZmFVNEZsU3BteDhNRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
OWQ1OTEwLTlmNWUtNDQ2Yy04ZDNjLWJjMDA3ZjJkYWMyNC8xL2E2TVlaWmQwS3BK
czBtVUU0ZTEyLUZRXzJ5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArnb2AMEArndvDANBgkqhkiG9w0B
AQsFAAOCAQEAdm60/Xh/3nCyejx6KkjrzaWJ7RhXRBYelE/nEQi2trwBs18YZeSf
NDyQhOal4QJDTxncu49cc9GN701g/5veYNOI0xjr99y+oYETQ9AlSLRWlRR9nUtZ
Pw25uNrtvMSBfKE+UYlIqnaei95wG3v6Ko1RC2+nqhsWhn1wAU6JIEmmTwE7KMd4
Mq63FMbRIXCX6I/xwiSLy0DRckGi13RGuiMbah1QAiThlyzPtf6hmbgKdfRCF6be
krg/U8SEZ64IY+KiWzFiAQkKUDbRs7/uH6akYu9L7JW6prqeeZDg6Zj8q5PxGZtX
ztUrQ/q/ZQo94gChl1xjo3IMtF8vLSQL1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org