Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/eAEFiPuPmJ9sgsO7R0-L8M1CCNE.roa
File: eAEFiPuPmJ9sgsO7R0-L8M1CCNE.roa (raw, json)
Hash identifier: EgHeBgH5yU99vVoaUwWhizn9DndddQj9jjI/PMWtuEQ=
Subject key identifier: 78:01:05:88:FB:8F:98:9F:6C:82:C3:BB:47:4F:8B:F0:CD:42:08:D1
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0FE0EDD4
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/eAEFiPuPmJ9sgsO7R0-L8M1CCNE.roa
Signing time: Sat 01 Jan 2022 04:53:25 +0000
ROA not before: Sat 01 Jan 2022 04:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31631
IP address blocks: 185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266399188 (0xfe0edd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Jan 1 04:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78010588fb8f989f6c82c3bb474f8bf0cd4208d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:30:71:5c:72:ed:bb:bc:8e:eb:10:f2:48:
3b:f0:ed:c1:e4:cf:17:11:3b:f8:c8:0b:37:ad:af:
d6:7b:fd:aa:81:14:ce:f0:c2:c8:7d:ac:2d:2e:cd:
cc:6a:ae:d7:7c:42:a7:05:e3:8b:1f:b2:23:8b:16:
2a:9b:1d:c8:5f:cb:9f:6a:01:b9:94:02:c4:73:c7:
1b:42:43:01:54:de:9d:13:71:49:ba:35:68:21:bd:
db:c9:3b:d8:d4:84:46:f3:7b:3e:da:69:ec:d4:1d:
f9:d9:f1:52:18:97:0f:fb:05:bc:57:a1:2b:80:fc:
6c:3e:4f:d4:8e:98:10:0e:d1:8d:ad:44:b9:a9:94:
64:e1:d9:57:fe:24:98:dc:ff:3c:05:39:c5:16:a5:
92:1f:f9:77:f1:74:25:3b:1b:02:fe:03:c2:3f:a0:
b9:57:58:2f:94:a3:bb:80:50:c6:1a:da:e9:75:5b:
23:b9:c0:ce:79:06:0a:4e:28:e6:52:cc:99:23:a0:
36:65:a3:16:10:d4:42:61:9e:9d:de:28:bf:a0:04:
0b:b9:a4:94:13:ce:56:41:7e:69:c9:19:46:9f:7c:
8b:a8:74:dc:aa:7c:3a:98:e6:81:90:37:48:9c:ea:
9f:4c:be:88:26:09:c4:ed:94:7d:37:08:62:78:de:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:05:88:FB:8F:98:9F:6C:82:C3:BB:47:4F:8B:F0:CD:42:08:D1
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/eAEFiPuPmJ9sgsO7R0-L8M1CCNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.168.0/22
185.205.172.0/22
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
41:b8:34:2b:19:0d:7d:45:88:9d:1f:70:76:eb:de:21:e8:dc:
1d:20:fb:60:37:89:f5:c5:b7:ea:cf:21:90:4b:0f:e8:da:7e:
3d:7e:fe:96:34:50:4a:10:12:a8:3a:a9:6f:e4:a3:14:3d:9f:
da:f4:4b:4d:e2:d8:7c:54:54:fd:fc:b5:7e:3a:0a:83:e8:9b:
af:3f:0d:24:42:7b:79:11:59:48:3b:4f:aa:73:6d:96:0f:0c:
e1:2b:17:8a:3c:da:e2:63:18:dd:6b:e6:a9:7b:08:20:b8:bb:
82:32:a3:ec:83:fe:17:79:dd:22:d7:50:34:4b:d1:6b:2e:2a:
9d:64:e2:98:96:2b:04:3d:a7:e6:ac:bb:df:7e:42:96:7a:1d:
f2:b7:57:d2:a6:35:f5:c3:d9:1d:fa:c7:cb:7f:2d:9a:cc:a7:
ca:ea:f8:ae:da:85:02:3f:80:dd:fd:4d:1a:34:3b:d6:89:dd:
f6:f4:38:14:2b:78:3d:99:3c:5f:b8:c9:35:73:ad:c4:78:f9:
2a:6e:72:f9:c9:c2:37:8f:50:47:5c:94:5f:e4:c1:61:76:86:
b7:61:ff:84:28:70:35:2d:19:8f:e4:d1:09:31:c5:9f:ed:47:
5c:01:eb:d7:6b:3f:d1:21:6f:b6:79:13:2a:8c:52:83:b7:fe:
1f:88:db:fb
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIED+Dt1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NmMwZmRiYjY1Y2E0OTFjYjgzY2MwODVhNDNlMDM0MDU5NmFlODczMB4XDTIyMDEw
MTA0NTMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzgwMTA1ODhmYjhm
OTg5ZjZjODJjM2JiNDc0ZjhiZjBjZDQyMDhkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdWMHFccu27vI7rEPJIO/DtweTPFxE7+MgLN62v1nv9qoEU
zvDCyH2sLS7NzGqu13xCpwXjix+yI4sWKpsdyF/Ln2oBuZQCxHPHG0JDAVTenRNx
Sbo1aCG928k72NSERvN7Ptpp7NQd+dnxUhiXD/sFvFehK4D8bD5P1I6YEA7Rja1E
uamUZOHZV/4kmNz/PAU5xRalkh/5d/F0JTsbAv4Dwj+guVdYL5Sju4BQxhra6XVb
I7nAznkGCk4o5lLMmSOgNmWjFhDUQmGend4ov6AEC7mklBPOVkF+ackZRp98i6h0
3Kp8OpjmgZA3SJzqn0y+iCYJxO2UfTcIYnjembUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBR4AQWI+4+Yn2yCw7tHT4vwzUII0TAfBgNVHSMEGDAWgBTGwP27ZcpJHLg8
wIWkPgNAWWroczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hzRDl1MlhLU1J5NFBNQ0ZwRDREUUZscTZITS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjIvNjY2OWJiLTFmNjItNDJhMy05ZThkLTQ5YTY1NDU3ODZlNi8x
L2VBRUZpUHVQbUo5c2dzTzdSMC1MOE0xQ0NORS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIv
NjY2OWJiLTFmNjItNDJhMy05ZThkLTQ5YTY1NDU3ODZlNi8xL3hzRDl1MlhLU1J5
NFBNQ0ZwRDREUUZscTZITS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArlsqAMEArnNrDANBAIAAjAHAwUD
KgYOQDANBgkqhkiG9w0BAQsFAAOCAQEAQbg0KxkNfUWInR9wduveIejcHSD7YDeJ
9cW36s8hkEsP6Np+PX7+ljRQShASqDqpb+SjFD2f2vRLTeLYfFRU/fy1fjoKg+ib
rz8NJEJ7eRFZSDtPqnNtlg8M4SsXijza4mMY3WvmqXsIILi7gjKj7IP+F3ndItdQ
NEvRay4qnWTimJYrBD2n5qy7335Clnod8rdX0qY19cPZHfrHy38tmsynyur4rtqF
Aj+A3f1NGjQ71ond9vQ4FCt4PZk8X7jJNXOtxHj5Km5y+cnCN49QR1yUX+TBYXaG
t2H/hChwNS0Zj+TRCTHFn+1HXAHr12s/0SFvtnkTKoxSg7f+H4jb+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:23 2024 by rpki-client on console-fra.rpki-client.org