Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/6IieU29uRigHngUQvaSRiU3nesU.roa
File: 6IieU29uRigHngUQvaSRiU3nesU.roa (raw, json)
Hash identifier: WRHwr/OyKgimtnkCqk/eOnmrGTnonjUTSM+066MDF/8=
Subject key identifier: E8:88:9E:53:6F:6E:46:28:07:9E:05:10:BD:A4:91:89:4D:E7:7A:C5
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 12C622A0
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/6IieU29uRigHngUQvaSRiU3nesU.roa
Signing time: Sat 01 Jan 2022 14:01:25 +0000
ROA not before: Sat 01 Jan 2022 14:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50018
IP address blocks: 185.136.64.0/22 maxlen: 22
185.136.64.0/24 maxlen: 24
185.136.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314974880 (0x12c622a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Jan 1 14:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8889e536f6e4628079e0510bda491894de77ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:ae:64:9d:16:92:2d:1a:95:3e:94:70:a4:
27:40:c9:38:80:ef:13:ae:8d:11:bf:63:1a:75:4a:
5d:d4:d0:14:7c:ce:9d:8f:48:55:de:5b:3a:e9:e2:
c9:eb:d1:aa:f3:b5:8f:af:fd:1d:90:60:1d:28:df:
ae:cd:d9:e1:9a:c7:b0:3c:0d:f7:97:53:06:eb:44:
f7:e5:e0:a0:c7:50:74:c8:01:f4:65:87:32:2c:6f:
09:6c:cf:01:54:17:ce:ee:7a:af:52:5e:05:ef:e2:
2b:bf:ae:22:8a:6e:04:64:e5:07:2c:40:4d:7f:34:
1f:69:bc:70:5f:ec:1f:d2:a5:e0:c5:ee:3d:41:3f:
d6:8a:a7:04:b1:13:2e:52:79:1b:4b:44:1e:22:2f:
ff:bd:e2:8f:34:97:81:c6:dc:8d:a6:0b:ae:91:56:
ad:12:b5:81:7b:28:65:de:95:06:33:5e:f9:5c:77:
e2:85:d0:56:8d:43:a7:8c:aa:4d:e6:95:64:0e:6b:
7e:b2:d0:80:99:76:2c:4b:ec:54:23:4b:aa:98:6a:
a0:f5:30:8d:39:28:66:2d:0f:35:ce:e5:1e:e5:12:
fb:d1:fe:bd:5a:10:29:7a:90:fe:35:f7:a1:1f:c7:
7c:03:db:3a:43:f1:2c:21:45:eb:de:b5:71:28:4f:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:9E:53:6F:6E:46:28:07:9E:05:10:BD:A4:91:89:4D:E7:7A:C5
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/6IieU29uRigHngUQvaSRiU3nesU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:e6:da:3d:2a:06:ee:7a:a8:c8:92:31:d8:3c:4c:eb:47:ab:
b9:f4:0e:93:c0:66:33:92:73:e4:26:12:1e:4c:27:c7:87:c2:
f4:82:b1:9f:5b:11:af:12:20:21:bb:aa:ff:36:b0:6e:21:5b:
c3:4f:f9:82:1b:a1:8b:a9:26:2e:8f:19:4e:73:83:b7:6a:69:
ac:d4:6d:52:c1:09:83:0d:95:d2:bc:23:ac:c7:d2:aa:1a:b6:
c5:2f:4b:2a:7a:2a:67:f9:5c:a4:be:c4:24:9c:1c:85:33:38:
e9:c0:48:cc:99:62:d1:22:4d:65:ef:04:07:ce:de:22:1b:0f:
7e:4d:36:57:90:f3:e5:de:9a:8d:78:e3:79:ec:59:f5:f1:63:
30:68:25:96:a7:1a:97:1a:70:5e:a5:c0:9a:82:81:30:40:6c:
2b:ae:8e:c9:3c:b5:d1:6e:2f:cd:45:8e:01:e5:1a:e1:24:b3:
f4:bd:1a:d5:6e:e7:94:30:b5:22:60:f6:9b:bb:a7:c0:f6:04:
68:f7:46:7f:93:71:a5:67:94:83:9a:a2:94:94:2f:39:b7:b8:
29:ec:e4:46:d2:54:9d:f9:97:01:a3:86:bd:30:1e:5f:0f:21:
55:66:7f:3b:3b:32:0f:ff:75:fc:34:bf:c8:d2:e9:b1:88:74:
16:df:4b:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEsYioDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YTM2OWNhOWJhODRhZDg0N2Q0OWQzMWUyNzQ2NWZhZjU3YmYyOGU0MB4XDTIyMDEw
MTE0MDEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTg4ODllNTM2ZjZl
NDYyODA3OWUwNTEwYmRhNDkxODk0ZGU3N2FjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI1irmSdFpItGpU+lHCkJ0DJOIDvE66NEb9jGnVKXdTQFHzO
nY9IVd5bOuniyevRqvO1j6/9HZBgHSjfrs3Z4ZrHsDwN95dTButE9+XgoMdQdMgB
9GWHMixvCWzPAVQXzu56r1JeBe/iK7+uIopuBGTlByxATX80H2m8cF/sH9Kl4MXu
PUE/1oqnBLETLlJ5G0tEHiIv/73ijzSXgcbcjaYLrpFWrRK1gXsoZd6VBjNe+Vx3
4oXQVo1Dp4yqTeaVZA5rfrLQgJl2LEvsVCNLqphqoPUwjTkoZi0PNc7lHuUS+9H+
vVoQKXqQ/jX3oR/HfAPbOkPxLCFF6961cShP52kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBToiJ5Tb25GKAeeBRC9pJGJTed6xTAfBgNVHSMEGDAWgBQqNpypuoSthH1J
0x4nRl+vV78o5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tqYWNxYnFFcllSOVNkTWVKMFpmcjFlX0tPUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvYTBiMjY2LTNjOWUtNGUwYy04YTZkLTU4OTViNjlkMTg5ZS8x
LzZJaWVVMjl1UmlnSG5nVVF2YVNSaVUzbmVzVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
YTBiMjY2LTNjOWUtNGUwYy04YTZkLTU4OTViNjlkMTg5ZS8xL0tqYWNxYnFFcllS
OVNkTWVKMFpmcjFlX0tPUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmIQDANBgkqhkiG9w0BAQsFAAOC
AQEAXebaPSoG7nqoyJIx2DxM60erufQOk8BmM5Jz5CYSHkwnx4fC9IKxn1sRrxIg
Ibuq/zawbiFbw0/5ghuhi6kmLo8ZTnODt2pprNRtUsEJgw2V0rwjrMfSqhq2xS9L
KnoqZ/lcpL7EJJwchTM46cBIzJli0SJNZe8EB87eIhsPfk02V5Dz5d6ajXjjeexZ
9fFjMGgllqcalxpwXqXAmoKBMEBsK66OyTy10W4vzUWOAeUa4SSz9L0a1W7nlDC1
ImD2m7unwPYEaPdGf5NxpWeUg5qilJQvObe4KezkRtJUnfmXAaOGvTAeXw8hVWZ/
OzsyD/91/DS/yNLpsYh0Ft9LNw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:56 2025 by rpki-client