Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/C6U0vCjAvTz3vbaR0HhNpQcCYK8.roa
File: C6U0vCjAvTz3vbaR0HhNpQcCYK8.roa (raw, json)
Hash identifier: 8UdP+H+oz7RWGxCtpcxS8qN9CsHKxWIem6HIJwOYDdU=
Subject key identifier: 0B:A5:34:BC:28:C0:BD:3C:F7:BD:B6:91:D0:78:4D:A5:07:02:60:AF
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 0727BF96
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/C6U0vCjAvTz3vbaR0HhNpQcCYK8.roa
Signing time: Tue 25 Jan 2022 13:47:49 +0000
ROA not before: Tue 25 Jan 2022 13:47:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.44.228.0/22 maxlen: 24
192.145.52.0/22 maxlen: 24
193.219.99.0/24 maxlen: 24
193.219.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120045462 (0x727bf96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 25 13:47:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ba534bc28c0bd3cf7bdb691d0784da5070260af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7f:80:aa:7e:77:9a:ca:e7:9f:3d:c6:92:d7:
2e:0f:98:f4:37:36:10:79:66:de:18:34:0b:c1:58:
39:58:a5:40:fb:d5:5d:52:c3:ad:64:d9:91:4f:e7:
36:43:79:6e:a7:1d:d8:1b:a3:7f:37:9b:98:b5:62:
d6:17:f9:c0:ce:ae:f8:97:e3:b0:ad:10:c9:e2:15:
d6:92:6c:cc:33:0f:91:78:5e:32:e4:e3:ba:03:e0:
76:77:c0:33:15:17:08:56:23:4a:21:f3:cb:f3:7b:
82:1e:87:48:17:2b:f0:ba:29:e8:2e:e2:d7:3c:be:
6b:b5:90:b9:19:4b:0f:5f:0b:dd:4a:61:78:49:cf:
17:cb:27:d3:93:4f:0e:e3:fc:9d:58:30:0c:11:66:
0f:ff:5f:ec:b3:1d:dc:b1:03:51:46:9b:e9:1a:01:
e3:19:a7:3d:c6:f0:22:d0:f3:16:79:b6:7f:53:69:
db:04:90:8b:29:88:70:d9:52:32:2c:93:78:8d:64:
d0:7c:e8:eb:50:da:ff:c7:c7:40:40:dd:e0:70:4d:
73:45:e5:d7:e8:65:5f:1b:d4:f2:3d:08:9a:0e:79:
c6:8c:e8:6d:58:e8:bb:3d:43:24:99:61:e7:fc:57:
56:8a:6b:9c:5b:23:0a:89:2a:4c:02:0e:af:b4:e2:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A5:34:BC:28:C0:BD:3C:F7:BD:B6:91:D0:78:4D:A5:07:02:60:AF
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/C6U0vCjAvTz3vbaR0HhNpQcCYK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
192.145.52.0/22
193.219.7.0/24
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ea:ec:08:2a:37:c1:33:49:64:23:39:bd:28:78:34:ea:4f:
1e:90:66:63:19:82:21:a6:d7:64:e8:b2:86:af:2c:b5:41:3b:
f3:05:dd:93:00:a6:4b:4f:66:52:ed:32:25:81:ba:3f:2d:d0:
eb:f5:f3:f4:b5:56:cc:55:e6:dd:ce:40:4e:a1:8c:aa:b8:30:
f3:1e:08:40:d4:6f:7a:85:e5:c2:79:58:67:ba:92:b2:8d:f0:
f2:b1:6a:24:e1:a7:40:83:8e:c9:02:2b:09:2b:27:53:36:05:
0f:d1:20:ac:f1:56:64:1a:59:44:74:49:ab:50:a7:42:22:68:
41:f9:c2:ec:2b:f0:ea:c6:6a:c0:c2:b1:5c:c1:b0:2b:61:4b:
47:55:8a:a7:a3:bb:c2:56:41:53:6d:25:9d:5e:ad:7e:8d:7b:
f8:81:aa:0f:2a:37:43:21:af:8a:da:1a:b6:74:2b:3b:73:f1:
e6:4e:74:08:a8:7b:cc:cf:f7:fc:47:e2:16:4d:c1:f6:90:4c:
28:81:77:5b:88:04:80:d3:2d:c2:90:e2:22:66:0c:04:68:a4:
72:dc:3d:8d:43:68:d0:6f:4f:25:43:c9:b5:fd:81:e9:a4:8f:
06:79:d9:01:17:db:7a:d4:fb:10:5a:6e:fd:a8:01:8f:5c:06:
ca:5d:cc:8c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBye/ljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjYzNzg3ZmQwZjk0YjM3ODEzZWVmMTZiYzgxMzc0MjNlZTNmZWYzMB4XDTIyMDEy
NTEzNDc0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGJhNTM0YmMyOGMw
YmQzY2Y3YmRiNjkxZDA3ODRkYTUwNzAyNjBhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOh/gKp+d5rK5589xpLXLg+Y9Dc2EHlm3hg0C8FYOVilQPvV
XVLDrWTZkU/nNkN5bqcd2BujfzebmLVi1hf5wM6u+JfjsK0QyeIV1pJszDMPkXhe
MuTjugPgdnfAMxUXCFYjSiHzy/N7gh6HSBcr8Lop6C7i1zy+a7WQuRlLD18L3Uph
eEnPF8sn05NPDuP8nVgwDBFmD/9f7LMd3LEDUUab6RoB4xmnPcbwItDzFnm2f1Np
2wSQiymIcNlSMiyTeI1k0Hzo61Da/8fHQEDd4HBNc0Xl1+hlXxvU8j0Img55xozo
bVjouz1DJJlh5/xXVoprnFsjCokqTAIOr7TijysCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQLpTS8KMC9PPe9tpHQeE2lBwJgrzAfBgNVHSMEGDAWgBQyY3h/0PlLN4E+
7xa8gTdCPuP+8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01tTjRmOUQ1U3plQlB1OFd2SUUzUWo3al92TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNzcwM2VmLTI0MjItNDM3Yy1iOTNkLTU5NWUwYmY1YzYxMy8x
L0M2VTB2Q2pBdlR6M3ZiYVIwSGhOcFFjQ1lLOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NzcwM2VmLTI0MjItNDM3Yy1iOTNkLTU5NWUwYmY1YzYxMy8xL01tTjRmOUQ1U3pl
QlB1OFd2SUUzUWo3al92TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAiUs5AMEAsCRNAMEAMHbBwMEAMHb
YzANBgkqhkiG9w0BAQsFAAOCAQEAWursCCo3wTNJZCM5vSh4NOpPHpBmYxmCIabX
ZOiyhq8stUE78wXdkwCmS09mUu0yJYG6Py3Q6/Xz9LVWzFXm3c5ATqGMqrgw8x4I
QNRveoXlwnlYZ7qSso3w8rFqJOGnQIOOyQIrCSsnUzYFD9EgrPFWZBpZRHRJq1Cn
QiJoQfnC7Cvw6sZqwMKxXMGwK2FLR1WKp6O7wlZBU20lnV6tfo17+IGqDyo3QyGv
itoatnQrO3Px5k50CKh7zM/3/EfiFk3B9pBMKIF3W4gEgNMtwpDiImYMBGikctw9
jUNo0G9PJUPJtf2B6aSPBnnZARfbetT7EFpu/agBj1wGyl3MjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org