Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/6IV6XJDgbSPbU19t73GMZTJl0BQ.roa
File: 6IV6XJDgbSPbU19t73GMZTJl0BQ.roa (raw, json)
Hash identifier: 281oalsrPZJcC4E4oxT3CP/EG4nLHKH/jGKwKTUy0dc=
Subject key identifier: E8:85:7A:5C:90:E0:6D:23:DB:53:5F:6D:EF:71:8C:65:32:65:D0:14
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 1D0D2CC4
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/6IV6XJDgbSPbU19t73GMZTJl0BQ.roa
Signing time: Wed 23 Mar 2022 18:51:01 +0000
ROA not before: Wed 23 Mar 2022 18:51:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61049
IP address blocks: 185.231.218.0/24 maxlen: 24
185.231.216.0/24 maxlen: 24
185.231.217.0/24 maxlen: 24
185.20.54.0/24 maxlen: 24
185.20.55.0/24 maxlen: 24
185.20.52.0/24 maxlen: 24
185.20.53.0/24 maxlen: 24
185.195.116.0/24 maxlen: 24
185.195.117.0/24 maxlen: 24
185.195.118.0/24 maxlen: 24
185.195.119.0/24 maxlen: 24
2a04:13c1::/32 maxlen: 32
2a0c:8305::/32 maxlen: 32
2a0c:8301::/32 maxlen: 32
2a04:13c5::/32 maxlen: 32
2a04:13c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487402692 (0x1d0d2cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Mar 23 18:51:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8857a5c90e06d23db535f6def718c653265d014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:0d:7c:49:1c:29:ca:cb:20:f6:15:53:96:
3b:01:dc:4f:11:30:b5:03:cb:cf:2f:9d:34:57:38:
7d:cd:19:3e:b9:7f:db:0a:e9:6d:22:6c:df:f0:0d:
50:ae:41:f3:a5:ad:f6:6e:35:b1:f0:63:63:88:60:
98:7e:6c:be:a9:53:9c:7b:04:8b:8d:71:ab:5f:f6:
e9:1f:88:04:55:67:af:2d:29:b6:50:4f:f5:a4:f5:
48:5c:9f:05:30:a0:a7:e2:98:76:be:de:b3:26:b5:
86:7c:f2:0f:ee:6d:d9:02:93:11:66:9d:8a:bf:16:
65:42:8d:51:f9:6c:6f:34:3b:f9:79:00:c1:0b:d0:
2d:5d:63:8e:1f:49:1f:01:6e:cd:c6:e9:d7:6d:08:
07:7a:87:82:f1:33:b3:71:d7:77:58:7e:f0:4e:19:
19:9e:e9:1f:5b:b4:c8:1b:43:be:83:fb:cf:4e:2c:
91:b3:9a:6f:4f:a6:22:0b:2b:79:03:46:66:5b:d1:
3f:f2:8f:3b:b3:a9:98:a3:92:42:d6:f6:c3:13:b5:
66:3c:f3:fc:c3:36:a0:65:9f:6f:82:69:31:0d:91:
3f:6a:79:e5:3f:da:59:04:2e:05:53:db:8b:69:a1:
c9:9e:76:44:f3:2a:cd:c3:eb:0f:a7:28:c2:68:09:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:7A:5C:90:E0:6D:23:DB:53:5F:6D:EF:71:8C:65:32:65:D0:14
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/6IV6XJDgbSPbU19t73GMZTJl0BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.52.0/22
185.195.116.0/22
185.231.216.0-185.231.218.255
IPv6:
2a04:13c0::/31
2a04:13c5::/32
2a0c:8301::/32
2a0c:8305::/32
Signature Algorithm: sha256WithRSAEncryption
13:dd:70:3e:a8:7d:ad:4b:d6:4f:36:13:df:02:f5:a8:04:32:
e0:bf:b5:0b:34:87:c7:3a:2f:c1:c9:ed:6f:aa:ea:7a:0d:27:
98:5c:f7:8e:75:7d:b2:fb:76:22:8d:4e:c9:c5:19:e1:02:91:
63:2b:dd:1e:0b:a2:b3:69:2f:2f:77:c1:39:b0:ab:ad:46:a2:
3e:5a:22:fa:25:3c:0a:dd:31:fb:53:66:90:e4:e5:cf:9f:ac:
ff:31:93:79:f5:23:b0:a8:9b:df:3a:90:e5:84:1d:9a:58:43:
aa:cc:71:08:bf:0f:31:45:b4:c0:aa:24:4c:75:97:63:06:6e:
07:7e:99:39:67:cb:a0:2c:c0:99:f7:b5:35:fb:38:5a:19:04:
d9:ed:e9:83:20:06:30:87:61:40:53:b0:b6:08:9f:7f:41:d8:
11:48:e2:c7:5e:fd:2f:c7:e6:19:03:d9:bc:c8:58:15:7a:fb:
fe:d5:89:0e:ce:64:5b:ac:00:1c:a3:d4:19:4e:22:8e:0a:a7:
10:8c:95:49:b3:bb:0e:94:b8:a8:70:aa:f6:6f:12:17:0b:4d:
42:4c:5a:27:33:95:7b:ef:ab:4d:60:e8:13:82:5c:9c:5d:b0:
a2:ae:f2:2f:5e:7e:a0:ed:1e:72:42:91:9e:aa:1b:f3:4c:af:
77:61:0f:b9
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIEHQ0sxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
N2JiMzJhYThjOWY4ZDA1YzUxN2JlMmFkNjY1MmY2NjU1MGE4ZDU3MB4XDTIyMDMy
MzE4NTEwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTg4NTdhNWM5MGUw
NmQyM2RiNTM1ZjZkZWY3MThjNjUzMjY1ZDAxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfvDXxJHCnKyyD2FVOWOwHcTxEwtQPLzy+dNFc4fc0ZPrl/
2wrpbSJs3/ANUK5B86Wt9m41sfBjY4hgmH5svqlTnHsEi41xq1/26R+IBFVnry0p
tlBP9aT1SFyfBTCgp+KYdr7esya1hnzyD+5t2QKTEWadir8WZUKNUflsbzQ7+XkA
wQvQLV1jjh9JHwFuzcbp120IB3qHgvEzs3HXd1h+8E4ZGZ7pH1u0yBtDvoP7z04s
kbOab0+mIgsreQNGZlvRP/KPO7OpmKOSQtb2wxO1Zjzz/MM2oGWfb4JpMQ2RP2p5
5T/aWQQuBVPbi2mhyZ52RPMqzcPrD6cowmgJRQcCAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBTohXpckOBtI9tTX23vcYxlMmXQFDAfBgNVHSMEGDAWgBQnuzKqjJ+NBcUX
virWZS9mVQqNVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0o3c3lxb3lmalFYRkY3NHExbVV2WmxVS2pWYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjMvYTdkY2ViLWZmNTQtNDM2YS05NDE1LTQ4NDIyMWExZjI4NS8x
LzZJVjZYSkRnYlNQYlUxOXQ3M0dNWlRKbDBCUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMv
YTdkY2ViLWZmNTQtNDM2YS05NDE1LTQ4NDIyMWExZjI4NS8xL0o3c3lxb3lmalFY
RkY3NHExbVV2WmxVS2pWYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwIAQCAAEwGgMEArkUNAMEArnDdDAMAwQDuefYAwQA
uefaMCIEAgACMBwDBQEqBBPAAwUAKgQTxQMFACoMgwEDBQAqDIMFMA0GCSqGSIb3
DQEBCwUAA4IBAQAT3XA+qH2tS9ZPNhPfAvWoBDLgv7ULNIfHOi/Bye1vqup6DSeY
XPeOdX2y+3YijU7JxRnhApFjK90eC6KzaS8vd8E5sKutRqI+WiL6JTwK3TH7U2aQ
5OXPn6z/MZN59SOwqJvfOpDlhB2aWEOqzHEIvw8xRbTAqiRMdZdjBm4Hfpk5Z8ug
LMCZ97U1+zhaGQTZ7emDIAYwh2FAU7C2CJ9/QdgRSOLHXv0vx+YZA9m8yFgVevv+
1YkOzmRbrAAco9QZTiKOCqcQjJVJs7sOlLiocKr2bxIXC01CTFonM5V776tNYOgT
glycXbCirvIvXn6g7R5yQpGeqhvzTK93YQ+5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:32 2024 by rpki-client on console-ams.rpki-client.org