Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/RrGVIsvdBKJhDjuHn_jp0lJDIUc.roa
File: RrGVIsvdBKJhDjuHn_jp0lJDIUc.roa (raw, json)
Hash identifier: rFc2hzuPTRpYUl+cAB1unrlqKIH6zLrqEhG+lRPS974=
Subject key identifier: 46:B1:95:22:CB:DD:04:A2:61:0E:3B:87:9F:F8:E9:D2:52:43:21:47
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 0184618F7BA2238847E12850850A9F6416FF
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/RrGVIsvdBKJhDjuHn_jp0lJDIUc.roa
Signing time: Thu 10 Nov 2022 12:41:43 +0000
ROA not before: Thu 10 Nov 2022 12:41:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200070
IP address blocks: 193.29.206.0/24 maxlen: 24
212.237.229.0/24 maxlen: 24
194.0.14.0/24 maxlen: 24
185.43.134.0/24 maxlen: 24
2001:148f:fffb::/48 maxlen: 48
2001:678:1::/48 maxlen: 48
2001:678:11::/48 maxlen: 48
2001:148f:fffd::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:8f:7b:a2:23:88:47:e1:28:50:85:0a:9f:64:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Nov 10 12:41:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46b19522cbdd04a2610e3b879ff8e9d252432147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:ed:22:a0:06:0f:7e:a5:fc:d9:c8:8e:c7:
1a:39:9d:95:ec:80:a5:a5:ca:02:cf:98:08:77:72:
43:b0:54:12:d3:76:3c:02:1b:74:ba:9a:81:83:1d:
2c:d2:d7:1d:ec:46:37:01:5a:6e:12:05:85:da:3a:
cf:53:53:9c:cf:48:6b:c1:34:46:13:3a:ac:6c:3a:
33:47:12:41:d6:4d:30:4d:fe:ce:9e:a9:43:54:16:
38:42:4b:ee:8d:95:45:18:f1:c9:a4:e4:d6:74:aa:
14:de:6a:76:f9:f9:4e:d9:34:a0:7e:a7:a9:f6:cf:
e3:31:00:34:dc:91:6b:d7:de:70:91:af:cc:7d:23:
26:01:ac:9d:c1:46:e4:15:51:bb:c7:01:19:88:a9:
2c:f9:bb:2f:4d:70:57:cc:fa:d4:17:eb:e2:da:f5:
46:3a:53:22:c2:9e:09:a3:9f:f5:7f:cc:1f:8d:22:
84:ee:4c:c6:96:b6:a0:b6:fc:db:2f:f9:83:db:28:
00:0c:39:53:ca:67:da:c0:1d:3c:c9:15:ed:6e:5f:
aa:a4:8f:9a:e1:11:5c:a5:3e:47:a9:b2:29:99:3f:
f5:1b:35:e6:f8:21:8f:54:dc:5c:92:19:fc:42:29:
c5:d7:8f:0d:96:05:e6:06:cf:1b:f2:a0:02:80:7a:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:95:22:CB:DD:04:A2:61:0E:3B:87:9F:F8:E9:D2:52:43:21:47
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/RrGVIsvdBKJhDjuHn_jp0lJDIUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.134.0/24
193.29.206.0/24
194.0.14.0/24
212.237.229.0/24
IPv6:
2001:678:1::/48
2001:678:11::/48
2001:148f:fffb::/48
2001:148f:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
34:95:87:42:7d:e6:d0:1b:1d:a6:0f:ec:e4:5f:56:fb:c3:c4:
dd:78:d5:72:04:65:43:5b:ec:c2:7b:6d:62:21:db:19:bf:a0:
d1:a0:e4:12:3e:15:4c:fe:e3:d9:66:3a:e3:3b:89:3d:48:4f:
cd:11:1a:97:80:5d:42:7e:7b:c6:dc:46:a7:4a:23:00:fa:2c:
94:70:2e:69:92:d3:28:c7:14:7a:d7:52:c0:b3:22:a8:f6:65:
35:19:ba:ce:75:e1:3d:fc:1f:e8:a2:41:e1:16:eb:be:6d:45:
89:59:86:67:71:06:ad:2f:75:de:4f:a5:3e:41:94:51:9e:84:
5c:42:73:9f:28:4b:5d:ff:aa:f3:4c:37:0a:f2:fa:50:b7:17:
bf:f7:4f:4e:06:36:f0:0b:94:e0:72:be:18:76:2c:62:a1:68:
0b:18:5a:16:49:36:ba:e5:97:d8:9a:fb:a5:8e:a2:88:53:a8:
95:1f:d3:14:19:8d:3e:af:14:cc:0a:00:cc:25:50:55:35:ba:
72:d3:8c:35:92:4f:ba:05:fd:b7:a4:5e:f3:58:0e:a6:98:1a:
fd:71:f0:42:87:b7:bc:40:1c:cf:81:b5:ba:a6:61:5a:5d:ca:
67:19:47:f2:1f:da:bb:03:cb:c3:ee:e6:13:05:4b:52:c5:5c:
de:06:2a:b6
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYRhj3uiI4hH4ShQhQqfZBb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTdmZmU4MjJiM2JhN2JjMTk0ZGI3YTczNGM4NWVmY2Vm
MmYyODMwHhcNMjIxMTEwMTI0MTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmIxOTUyMmNiZGQwNGEyNjEwZTNiODc5ZmY4ZTlkMjUyNDMyMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl3tIqAGD36l/NnIjscaOZ2V7ICl
pcoCz5gId3JDsFQS03Y8Aht0upqBgx0s0tcd7EY3AVpuEgWF2jrPU1Ocz0hrwTRG
EzqsbDozRxJB1k0wTf7OnqlDVBY4QkvujZVFGPHJpOTWdKoU3mp2+flO2TSgfqep
9s/jMQA03JFr195wka/MfSMmAaydwUbkFVG7xwEZiKks+bsvTXBXzPrUF+vi2vVG
OlMiwp4Jo5/1f8wfjSKE7kzGlragtvzbL/mD2ygADDlTymfawB08yRXtbl+qpI+a
4RFcpT5HqbIpmT/1GzXm+CGPVNxckhn8QinF148NlgXmBs8b8qACgHpY+QIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFEaxlSLL3QSiYQ47h5/46dJSQyFHMB8GA1UdIwQY
MBaAFGpX/+gis7p7wZTbenNMhe/O8vKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2It
Y2EwYzYyNjIxMDk4LzEvUnJHVklzdmRCS0poRGp1SG5fanAwbEpESVVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2ItY2EwYzYyNjIxMDk4
LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAeBAIAATAYAwQAuSuGAwQA
wR3OAwQAwgAOAwQA1O3lMCoEAgACMCQDBwAgAQZ4AAEDBwAgAQZ4ABEDBwAgARSP
//sDBwAgARSP//0wDQYJKoZIhvcNAQELBQADggEBADSVh0J95tAbHaYP7ORfVvvD
xN141XIEZUNb7MJ7bWIh2xm/oNGg5BI+FUz+49lmOuM7iT1IT80RGpeAXUJ+e8bc
RqdKIwD6LJRwLmmS0yjHFHrXUsCzIqj2ZTUZus514T38H+iiQeEW675tRYlZhmdx
Bq0vdd5PpT5BlFGehFxCc58oS13/qvNMNwry+lC3F7/3T04GNvALlOByvhh2LGKh
aAsYWhZJNrrll9ia+6WOoohTqJUf0xQZjT6vFMwKAMwlUFU1unLTjDWST7oF/bek
XvNYDqaYGv1x8EKHt7xAHM+BtbqmYVpdymcZR/If2rsDy8Pu5hMFS1LFXN4GKrY=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:51 2025 by rpki-client